Updating to version 3.19.0

Pre-startup tasks

• The following email templates have been added for the new role modification functionality:

  • provisioning/[Language (en or fr)]/manual_role_activation.html
  • role_modification/[Language (en or fr)]/task.html
  • role_modification/[Language (en or fr)]/notification.html

  If some e-mail templates are customized, it may be necessary to adapt them to the themes used.

  It may also be necessary to modify the subject of these new e-mails. To do this, you can modify the following properties:

  • subject.RoleModificationRequest.TASK in the file resources/com/okiok/pheonix/services/bpm/email/WorkflowEmailTemplateHelper_[Language (en or fr)].properties.
  • subject.RoleModificationRequest.NOTIFICATION in the resources/com/okiok/pheonix/services/bpm/email/WorkflowEmailTemplateHelper_[Language (en or fr)].properties file
  • subject.MANUAL_ROLE_ACTIVATION in the resources/com/okiok/pheonix/services/management/email/ProvisioningEmailTemplate_[Language (en or fr)].properties file.

• The self.service.new_request_role_modification.enable parameter must be configured in the conf/config.properties file. This controls the new tile in self-service for role modification.

• Three new parameters have been added to the conf/config.properties file for role modification requests:

  • self.service.workflow.role.remove.auto_approved indicates whether remove requests in a role modification are approved automatically.
    • Default value is “false”.
  • self.service.workflow.role.gia indicates the delegation group to be used for global approval of role modification requests.
    • Delegation group identifiers (BUSINESS_GROUP.GROUP_ID) are used (e.g., 132).
    • If not defined, approval is not required.
  • self.service.workflow.role.default_activation_option indicates the default activation mode for roles.
    • The value can be:
      • "AUTOMATIC
      • "MANUAL"
  • The self.service.new_request_role_creation.enable parameter must be configured in the conf/config.properties file. This controls the new tile in self-service for role creation.
  • The new parameter self.service.new_request_role_creation.link can be added to the conf/config.properties file to configure the link that is used on the role creation page.
  • Two new parameters (default.locale.[Language] and override.browser.locale.for.dates) can be added to the conf/config.properties file to configure additional options for the consolidated display of dates. If required, you can now set the application's default locale. It will be used to display dates in the application and in emails. It is also possible to use the browser locale. Please refer to Configuring the locale for more information.

Post-startup tasks

• When using modification requests and role creation,
  • the following permissions must be assigned to the RAC/M profiles that will be able to use the functionalities.
    • "Role modification request" to authorize the modification request page
    • "Role creation request" to authorize the creation request page
    • "Role request details" to authorize the user to view the details of role requests he has initiated.
  • the following permissions must be assigned to RAC/M profiles who will be able to administer role requests in administrator mode. They are similar to those for identity requests.
    • "Role requests"
    • "Groups for a role"
    • "Members for a role"
    • "Role modifications"
    • "Roles included in other roles"