[OPENIDM-4942] Added new roles relationship array field "authzMembers".

OPENIDM-4453: sync users of roles when roles are sync'd

OPENIDM-4775: 'validate' attribute for collection relationships should be within items config.

OPENIDM-4557: create relationship validators.

OPENIDM-4671 fixes issue with managed object schema editor where properties field was being erroneously saved to managed.json

OPENIDM-4541 fixes unhelpful error message when saving a resource with policy validation errors and changes email property on managed user to use the valid-email-address-format policyId instead of pattern: .+@.+ OPENIDM-4073 fixes issue with No Data message not being displayed in generic resource list grid when grid was reloaded

addresses a couple comments from pull request OPENIDM-4359 adds the ability to toggle between list view and chart view on relationship array tabs adds label property to resourceCollection schema definition adds links to relationship resources in both relationshipArray grid rows and on singleton relationship fields fixes "Clear Filters" button on relationship array grids and hides it if no _refProperties are available for the tab's relationship changes the name of the "Reports" tab to "Direct Reports" OPENIDM-4570 filters out the parent resource from the select list for relationship search deletes a couple of unused files

OPENIDM-4488: reverse side of roles and managers needed to be validate=true too.

OPENIDM-4441 only fetch relationship fields that are not hidden or have been explicitly requested

OPENIDM-4453: sync script on assignments to sync users of roles of the assignment being sync'ed

OPENIDM-4504 fixes broken managed object schema editor and aligns it with new changes to the way the old properties property is handled in managed.json

OPENIDM-4124 adds the role users tab to the roles edit screen by adding a generic tab for hanlding arrays of relationships (adding records, updating records, and removing multiple records at one time) also takes care of OPENIDM-4360 which adds the roles tab to the assignments view adds support for selecting from multiple resourceCollections when searching for one to one relationship values fixes a couple minor issues and a typo adds create new resource link to ResourceCollectionSearchDialog changed some class names and id names to follow coding convention minor copyright date change adds some javadoc comments to a couple functions some final cleanup and changes requested in pr

OPENIDM-4488: make validate true on role and manager relationships.

[OPENIDM-4420] Moved managed object properties config into schema.

[OPENIDM-4447] Reworked reverse relationships to be defined in the schema of the fields at both ends of the relationship.

OPENIDM-4247: delete update-users-of-role.js in favor of utilizing OPENIDM-4387

OPENIDM-4042: verify relationships

[OPENIDM-4335] Moved "returnByDefault" and "isVirtual" flags to always be at base of property schema.

OPENIDM-3560 - restoring support for admin password reset

OPENIDM-4341 - Change labels for roles (Provisioning Roles) and authzRoles (Authorization Roles)

OPENIDM-4213 adds support for relationship data type to the managed object schema editor. Adds the ability to handle Validation policies. Adds other fields that did not exist before (End users allowed to edit?,Minimum Length,Pattern,Is Virtual?)

[OPENIDM-4223] Updated samples for assignment refactoring

[OPENIDM-4218][OPENIDM-4220][OPENIDM-4219][OPENIDM-4221] Added new managed assignments schema. Updated managed roles schema to reference managed assignments. Updated virtual properties and defaultMapping to incorporate new assignment refactoring.

OPENIDM-4252 - Removing required _id attribute from roles schema

OPENIDM-4251 - Setting authzRoles returnByDefault to false, accounting for its absence in auth modules

OPENIDM-3559 - Moving policy details for managed objects into json schema Adjusting authz rules for self-service requests (taking CSS-28 into account) Including kbaInfo in default user schema Progress with adding new properties to json editor for managed objects Aligning the Admin UI and authz rules with backend, removing default configs Using external/email endpoint in access.js authz rule

OPENIDM-3892 - Integrating User Self-Service with the openidm selfservice UI Bumping up to forgerock-ui 7.2.0 Fixes backgrid layout by including common/structure/backgrid.less Deleting old registration and reset code, and clearing out a lot of cruft Fixes to the /admin config screens for self-service: - for mimeType, ordering, labels, and _id removal - Updating ui/configuration when self-service features are enabled/disabled - bug with admin context startup, due to looking at wrong site configuration delegate

OPENIDM-4129 - Aligns generic resource editor with relationship type schema changes

OPENIDM-4043 update reverse relationship config

OPENIDM-4043 initial commit of bidirectional relationships

OPENIDM-3507 Move _id under _refProperties

OPENIDM-3507 Move relationship _id and _rev under _refProperties

OPENIDM-3507 Initial commit of discreet relationships object with properties

[OPENIDM-3471][CR-7582] Added basic relationship field support to the Managed Object Service and the schema configuration.

CR-7438 - OPENIDM-3344 - Separate different role types into different fields for managed/user

OPENIDM-3292 reviewed at CR-7011 -handle resourceCollection datatype with autocomplete selections -add Linked Systems tab -add tabs for arrays of resourceCollections -add tabs for relationships where the resourceCollection path is the same as the parent object (i.e. managed/user parent object and managed/user resourceCollection property) -bring SearchDelegate into common idm space -make CSS changes to generic list grid to get closer to matching mockups

OPENIDM-3214 and OPENIDM-3215 (CR-6778) - This includes adding a manager, graphing reportees, removing font roboto, and changing to the 2.0.4 commons-ui.

OPENIDM-3241 add managed/role properties.name field to UI and adjust generice resource list grid to show/filter/sort nested searchable properties Reviewed at CR-6757

OPENIDM-3165 / CR-6711 : Added roles samples to address the main CRUD operations and role based provisioning. The linkqualifier role sample will be addressed at a later time. Also includes a correction to defaultMapping.js

CR-6629 - Default schema for managed/user to fix types for roles

work related to OPENIDM-3142 (managed roles admin) added LIST/CRUD on managed objects data to the admin UI reviewed at CR-6557

[OPENIDM-1821][CR-4838] Added onDelete script for managed roles to prevent deletes of roles that are currently assigned.

http://sources.forgerock.org/cru/CR-3243 - OpenIDM updates to samples 1 through 4 Doesn't include sample3 updates

[OPENIDM-1578][CR-3133] Added change event processing for managed roles, and support for postCreate/postUpdate/postDelete scripts on managed objects.

OPENIDM-1570 CR-3001 Make virtual attribute scripts parameterized

OPENIDM-1569 OPENIDM-1570 CR-3000 CR-3001 effectiveRoles virtual attribute with direct roles support, effectiveAssignments virtual attribute support

Added "role" managed object.

[CREST-103] Fixed issue where default properties were not getting added on create for managed objects.

Changed "name" to "file" in script configs

Add the managed service Add the endpoint service Fix the script sample Partial merger from trunk rev. 2015

Fixing misspelled words in script names

Removing unneeded onValidate script now that we have policies

Moving scripts to bin/defaults and updating references in conf

UI branch changes, r1480-1529 http://sources.forgerock.org/cru/CR-891 This also includes global rename of _query-id to _queryId and _query-expression to _queryExpression. Note for documenters: there are several changes expected to be made soon; review the code review (linked above) and note Andi's comments

moved app's related scripts to apps module; removed apps from default openidm ui; cleanup

OPENIDM-762 [CR-792] Declarative way to have private data Added "scope" field to managed.json properties. Supports "public" and "private". If none is set, property is assumed to be "public" and thus not filtered out. Also updated the defaults in managed.json and router.json and removed the ui-workaround to sensitive attributes.

* moved countries, states and security questions to conf/ * fixed login as internal_user using mysql * UserApp is connected using user _id not username * messages hides on click * removing userAppLink on user delete

* removed ui-user, ui-libs & ui-commons. * links in apps * moved apps to conf/applications.json, notifications to repo * error messages are not fading out now * task details with username & app name

CR-607 CR-630 - ui divided into three modules, - customizable forms, - new dashboard & apps views, - js refactoring, - apps request approval simple workflow, - users table pagination

- logging in as openidm-admin (internal_user) - form validation msg next to submit button in registration - fixed problems reported in CR-485 & CR-490 - functional tests update - removed profiles

Integrate the Activiti Repository with the OpenIDM JDBC Repository

Simpler configuration to start from.

sample sync configurations. It's not checked yet.