Customize UI to hide Entitlement Details from Standard Property Screen

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.4p2

Please share any images or screenshots, if relevant.

Entitlements
Entitlements904×469 8.52 KB

Share all details about your problem, including any error messages you may have received.

Hello Everyone,

We have a requirement to hide the attribute values from the ‘Standard Properties’ UI screen which shows up when we click on the Entitlement Details of the Access request, UARs and Identity Warehouse page. Screenshot for the same is given below. We want to hide the “value” attribute for the entitlement in the UI screen. We don’t see an entry for the same in UIConfig.

Can anyone help us with this to hide the attribute from the UI? Will it require changes into any xHTML file or any code or plugin is required for the same?

Thanks in advance for your help.

2

Hi,

You won’t be able to hide the Value field from the Standard Properties dialog through UIConfig, since this popup isn’t driven by UIConfig entries. There are a few approaches depending on how clean and maintainable you want the solution to be:

1. Override the XHTML (recommended)

  • The entitlement details popup comes from an XHTML facelet (usually something like entitlementDetails.xhtml or entitlementStandardProperties.xhtml under the ui/ directory).

  • Copy that file into the custom/ directory (or package it inside a plugin as a web resource) and remove/adjust the row that displays Value.

  • You can also add conditional rendering if you only want it visible for certain roles, for example:

    <h:panelGroup rendered="#{sp:hasRight('SystemAdministrator')}">
    <h:outputText value="#{msgs.value_label}" />
    <h:outputText value="#{entitlement.value}" />
</h:panelGroup>

  • This way, the change is isolated and easy to maintain across upgrades.

2. Plugin-based override

  • Package the modified XHTML as part of a plugin (web resource). This is cleaner for deployment/rollback than editing directly in the WAR.

3. CSS-only (quick and dirty)

  • You can technically inject a custom CSS to hide the row if you identify a stable selector, e.g.:

    .valueRow { display: none !important; }

  • But this is brittle and may break after upgrades or layout changes.

If you want to hide the Value field because it contains sensitive information, remember that hiding it in the UI does not prevent exposure via APIs, reports, or exports. In that case, you should consider masking or stripping the attribute at the aggregation/transform rule level, not only in the UI.

1 Like
3

Hi, This can be done via a plugin, can you tell me what attributes you want to hide, and only at the standard attributes popup window page correct??

Please let me know, I can write a small plugin, and it can be achived

4

Hey Naveen,

Thanks for you response.

I would specifically want to hide the attribute called ‘value’ for all the users except for the SystemAdministrators. An yes, only at the standard attributes pop up window.

6

Hey Rounka,

I have created a small plugin for your requirement, where it will basically hide the value attribute of all user except system Admin. System Admin will be able to see the attribute.

I have tested in my environment and it is working as expected.

Please find the attach plugin.zip. Please import it directly and test it.

Please mark the post as solution, as it will help other people.

Regards
Naveen Kumar
Entitlementvaluehide_plugin.zip (1.2 KB)

1 Like
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.