I would like to have getEffectivePrivileges token in IDM.
It will allow having an easy way to get information about permission of specific object to update another object.

Proposed structure:
getEffectivePrivileges(DestinationObject, Trustee, {attribute name/s}, {right/s})

Token will return number/list of rights or boolean response (true/false) if specific right submitted in the query.

Based on this information, the policy can make a right decision, for example, the trustee will send update telephone event, only if he has enough rights to update it.

by: Alex B. | over a year ago | Other