[midPoint] Fw: URGENT ... Role inducements lost on role updates

[Pavol Mederly]

Hello Dharmendra,

looking at your WS request: it is of REPLACE type, see:

<objectDelta ... >
...
    <t:itemDelta>
       <t:modificationType>*replace*</t:modificationType>
          <t:path>c:*inducement*</t:path>
          <t:value id="2">
              ...
          </t:value>
    </t:itemDelta>
...

So, basically you tell midPoint that you want to REPLACE the values of 
*inducement***item with the ones you have provided.
And you've provided one value with id=2 and content of account 
construction on resource d0811790-1d80-11e4-86b2-3c970e467874.
So after the operation, the original inducement with id=1 should be gone.

Is this what you wanted to do? Perhaps no.

If you want to replace only one value in multi-valued item, you have to
1) delete old value
2) add new value

And, I'm not quite sure about your first mail (Manish Baid, received 
01:14). Aren't the contents of files "original.xml" and 
"after_addRoleInducement.xml" swapped? Because original.xml corresponds 
to the state with only one inducement, while the file 
"after_addRoleInducement.xml" contains two inducements. Just opposite as 
I would expect, given the messages you wrote.

Best regards,
Pavol


On 12. 2. 2015 8:39, Dharmendra Parakh wrote:
> Hi Ivan
>
> Thanks for your reply. jira you have pointed is might be related to UI 
> only and what i observed is if i use model web service to modify one 
> inducement it is deleting other inducements.
>
> We are using the master branch so latest midpoint version.
>
> Regards
> Dharmendra
>
> On Thu, Feb 12, 2015 at 1:01 PM, Ivan Noris <ivan.noris at evolveum.com 
> <mailto:ivan.noris at evolveum.com>> wrote:
>
>     Hi,
>
>     I believe this is the issue:
>     https://jira.evolveum.com/browse/MID-2113 and it should be fixed,
>     but please see the comment in JIRA.
>
>     Also, what version of midPoint are you using?
>
>     Thanks,
>     regards
>     Ivan
>
>
>     On 02/12/2015 08:08 AM, Dharmendra Parakh wrote:
>>     Hi Radovan
>>
>>     Additional Information:
>>
>>     We have a requirement to update the role inducement from web
>>     service client, where we have to add/delete some resource attributes.
>>
>>     In our scenario we have a role with multiple inducements (let say
>>     one role and one resource inducement). Now i want to add some
>>     additional attribute-values in resource inducement. To do this we
>>     calculate the correct inducement (AssignmentType) object with all
>>     current attributes and try to replace this inducement.
>>     Earlier this was working for us but now when we do this other
>>     inducement information is lost (induced role is no longer
>>     available in role).
>>
>>     I am attaching the request xml with the mail...
>>
>>
>>
>>
>>     Regards
>>     Dharmendra
>>
>>
>>     On Thu, Feb 12, 2015 at 12:03 PM, Manish Baid
>>     <baid_manish at yahoo.com <mailto:baid_manish at yahoo.com>> wrote:
>>
>>         Hi Radovan,
>>         We are showing a demo to our clients, looks like with recent
>>         3.1 release, inducement update is behaving differently.
>>
>>         If you can work with Dharmendra to work through this (he is
>>         in India timezone, will be available in your mornings), it
>>         would be of great help.
>>
>>
>>
>>         Thanks
>>
>>         ----- Forwarded Message -----
>>         *From:* Manish Baid <baid_manish at yahoo.com
>>         <mailto:baid_manish at yahoo.com>>
>>         *To:* midPoint General Discussion
>>         <midpoint at lists.evolveum.com
>>         <mailto:midpoint at lists.evolveum.com>>
>>         *Cc:* Dharmendra Parakh <dharmendra at confluxsys.com
>>         <mailto:dharmendra at confluxsys.com>>; Indrajit Chauhan
>>         <indrajit at confluxsys.com <mailto:indrajit at confluxsys.com>>
>>         *Sent:* Wednesday, February 11, 2015 4:14 PM
>>         *Subject:* URGENT ... Role inducements lost on role updates
>>
>>         Hi,
>>         With 3.1 release code (and also after MID-2194), when
>>         inducement/s is/are updated in a role, other related
>>         indcuments are removed.
>>
>>         Here is an example:
>>
>>         * Role had an indcument: "LDAP Account" with 3 group memberships
>>         * Role is modified to add a role inducement (role hierarchy)
>>
>>         Observation: 3 group memberships that were part of "Ldap
>>         Account" inducments are removed.
>>
>>         Please see object XMLs of before and after.
>>
>>         Thanks
>>
>>
>>
>>
>>
>>
>>     _______________________________________________
>>     midPoint mailing list
>>     midPoint at lists.evolveum.com  <mailto:midPoint at lists.evolveum.com>
>>     http://lists.evolveum.com/mailman/listinfo/midpoint
>
>     -- 
>        Ing. Ivan Noris
>        Senior Identity Management Engineer
>        evolveum.com  <http://evolveum.com>      evolveum.com/blog/  <http://evolveum.com/blog/>
>        _____________________________________________
>        "Semper Id(e)M Vix."
>
>
>     _______________________________________________
>     midPoint mailing list
>     midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>     http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150212/dc2198ed/attachment.htm>