Pending operation management

  • Updated on Jul 7, 2025
  • Published on Dec 20, 2024
  • 1 minute(s) read
Prev Next

The Administration Web Interface and the Tcl Command-Line Administration tool provide commands to manage pending operations in the context of maker–checker authorization (see Table: Pending operation commands).

  Table:  Pending operation commands
CommandDescription
approvePendingOperationApproves a pending operation (see  approvePendingOperation (Command)).
rejectPendingOperationRejects a pending operation (see  rejectPendingOperation (Command)).
deletePendingOperationDeletes a pending operation (see  deletePendingOperation (Command)).
queryPendingOperationAllows to query a pending operation (see  queryPendingOperation (Command)).
viewPendingOperationEnables an administrator to view details of a pending operation (see  viewPendingOperation (Command)).

The following field attributes are available for the pending operation commands:

  Table:  Pending operation field attributes
Attribute nameData typeDescription
POFLD_AUTO_EXECUTEBooleanSpecifies whether the pending operation should be automatically executed on behalf of the maker administrator upon approval by the checker administrator.
POFLD_CHECKER_DOMAINString

The domain of the administrator who is entitled to authorize the pending operation (checker).

Up to 255 characters.

POFLD_CHECKER_USERIDString

The user ID of the administrator who is entitled to authorize the pending operation (checker).

Up to 255 characters.

POFLD_COMMANDString

The name of the command that is awaiting approval.

Up to 32 characters.

POFLD_CONTEXTString

The serialized input parameters of the command that is awaiting approval.

Up to 16,384 characters.

POFLD_CONTEXTIDString

Unique identifier of the context for the pending operation.

Up to 255 characters

POFLD_CREATE_TIMEDateTime

The date and time the data record was created.

Format: yyyy-mm-ddThh:mm:ssZ

POFLD_DOMAINString

The domain of the command target. By default, it is based on the maker administrator.

Up to 255 character.

POFLD_IDENTIFIERString

The unique ID of the operation in the maker–checker workflow. Automatically created during the first execution of a command, if maker–checker authorization is enabled. Mandatory during the second execution of a command, if maker–checker authorization is enabled.

Allowed characters: [0-9a-zA-Z]

Exactly 8 characters.

POFLD_MAKER_DOMAINString

The domain of the administrator who initiated the pending operation (maker).

Up to 255 characters.

POFLD_MAKER_USERIDString

The user ID of the administrator who initiated the pending operation (maker).

Up to 255 characters.

POFLD_MODIFY_TIMEDateTime

The date and time the data record was last modified.

Format. yyyy-mm-ddThh:mm:ssZ

POFLD_NOTEString

Additional annotations and remarks added by the maker administrator when initiating the pending operation.

Up to 2,048 characters.

POFLD_OBJECTString

The type of the target object.

Up to 32 characters.

POFLD_ORGANIZATIONAL_UNITString

The organizational unit of the command target. By default, it is based on the maker administrator.

Up to 255 characters.

POFLD_SERIAL_NOString

The serial number of the authenticator affected by the command, e.g. when an authenticator is assigned to a user. As long as there is an operation pending, the respective authenticator is reserved and cannot be used for any other operation.

Up to 46 characters.

POFLD_STATUSUnsignedInt

The approval state of the pending operation.

POFLD_TO_SERIAL_NOString

Returned as upper bound of a serial number range between POFLD_SERIAL_NO and POFLD_TO_SERIAL_NO of possibly affected authenticators of a pending operation (when queried using queryPendingOperation or viewPendingOperation).

Up to 46 characters.