Sun Identity Manager Deployment Reference


Specifies access to work items by type. For example, there is a built-in authorization type called EndUserRule. All end-users implicitly get access to all rules tagged with the EndUserRule authorization type.


Specifies the name of the Identity Manager user whose work items are contained in the workItem list. Initially, this value is the name of the current session user. The value can be null to indicate that the work items for all controlled users with approver rights should be displayed. This is always the Identity Manager user name, never a display name.

The form must not be modify this value. To change users, set the user attribute.


Specifies the display name of the Identity Manager user whose work items are listed. This value is the same as userId if display names are not used. The form can modify this value, which causes the system to recalculate the work item list during refresh. A null value indicates that all work items are being displayed.


Set to true if the userId is the same as the current session user.


When set, indicates that the user named by userId has elected to have work items forwarded to another user. The other user is identified by its display name.


Lists the display names of Identity Manager users that the current user controls and which have work item capabilities. This value is typically used to build an user select box. If a custom form wants to compute the user list in a different way, you can specify the view option CustomUserLists as either a view option or form property.


Typically null. If you are configured to use alternate display names, then the users list contains display names, and this list contains the true repository names.


Lists the display names of Identity Manager users to which the current user can forward work items. This value depends on the value of the ForwardingApproverStyle attribute, which defaults to peers.


When set, the work items in the list will be filtered to contain only those whose item type matches this value. This gives the WorkItemList view the ability to filter the item list based on the work item type.


Typically null. If you are configured to use alternate display names, then the forwardingUsers list will have display names, and this list will have the true repository names.


Lists the objects that contain information about the work items for the selected user(s). The object names are the repository IDs of the work items.


Specifies the display name of the owner. Set only if user is null and all work items are displayed.


Supplies a brief description of the object being requested. This value is computed by the WorkItemRequest expression of the manual action in the workflow process.


Identifies the display name of the user that made the request.


Provides a more detailed description of the work item. The value is computed by the WorkItemDescription expression of the manual action in the workflow process. The description is typically displayed in tables that summarize the work items for a user, and is often displayed in a work item form.


Individual item selection flag. An alternative to selectedWorkItems.


Lists the work item IDs that represent the items to be processed by the next action. An alternative to setting the selected attribute inside the work item object, which is easier for SortingTable components. If both this attribute and individual select flags are set, the value of this attribute takes precedence.


Identifies the name of an Identity Manager user to which all selected work items will be forwarded when the action attribute is set to Forward.


Similar to forwardTo, but is also an action attribute. It copies its value to forwardTo, set action=Forward and process the refresh as if forwardTo and action were set independently. Use this attribute if you want to have the form process the forwarding immediately after a user is selected from a form component. If you would rather have forwarding controlled with a button, then have the form component set the forwardTo attribute and have the button post an action value of Forward.


(Boolean) When non-null, initiates an operation on the selected work items.

Valid values include:

If the NoConfirm option is set, the action is processed immediately. Otherwise, Identity Manager waits for the confirm attribute to be set to true. The form is expected to define its own confirmation page rendering.


(Boolean) Indicates that the operation specified in the action attribute can be performed.

Using the variables Attribute

When editing an individual work item, the form can set work item variables, such as comments, to pass additional information about the approval or rejection into the workflow process for auditing.

You can also set arbitrary work item variables when performing actions in the WorkItemList view. The value of the attribute variables can be set to an object whose attributes will be copied into the work item when it is approved or rejected. For example, if the variables object contains an attribute named comments, the same comments will be saved with every selected work item.

<Form name=’variables.comments’>
       <s>Approval performed on </s>
<invoke class=’com.waveset.util.Util’ name=’dateToString’>
         <new class=’java.util.Date’/>

Note –

Although in practice the work item form requires additional fields for buttons such as Approve and Reject, you may not want everything displayed by Default User Form displayed in the work item form. Typically, you can factor out the fields in the user form into a form library that can be referenced by both the user forms and the work item forms.