[midPoint] Midpoint Role UI Issue

[Pavol Mederly]

Hello Anand,

as for the losing of inducement details, it seems that you've hit a bug 
in midPoint. I've created a jira issue 
<https://jira.evolveum.com/browse/MID-2113> for it. I'm going to have a 
look at it.

The exact behavior of midPoint when unassigning the role from a user 
depends on assignment enforcement policy that you have set in system 
configuration. I.e. whether the account on the resource should be 
deleted or not. However, in all cases, because now the role has no 
information about the group that it induced (because the information was 
lost while editing), the unassigning of the role will not cause the LDAP 
group to be unassigned.

Best regards,
Pavol

On 12. 12. 2014 5:57, Anand Kothekar wrote:
> Hi
>
> I have recently started using midpoint for evaluation. I have a 
> midpoint environment in my system configured with an ldap resource.
>
> I was trying to play around with roles and inducement, I observed one 
> behaviour which i think is an issue with midpoint UI.
>
> Problem:
>
> - When i create a role and add an ldap resource inducement with some 
> ldap groups, the role is properly created and role member gets the 
> appropriate account and group membership.
> - Now if i modify the role like i change the role description and save 
> it, the induced groups are removed from role. role xml gets modified.
> - Another observation is like if a user is assigned multiple roles 
> (roles in hierarchy), and we remove the above updated role from user 
> then the group removed from role is not removed from user.
>
>
> I have attached the role xml's for reference, please look into this 
> and let me know if it is the case i have mentioned or i am making any 
> mistake.
>
>
> Regards
> Anand
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20141212/7905c567/attachment.htm>