[midPoint] Fw: URGENT ... Role inducements lost on role updates

Thu Feb 12 09:23:41 CET 2015

Hello Dharmendra,

> If the replace does not work how can i individually add/delete 
> attributes/values ?

REPLACE replaces the whole inducement, i.e. all of its values.

If you want to replace just one value (e.g. you have a values of A, B, C 
and you want to make it A, B, D), you have to do the following:
- delete C
- add D

You can (and perhaps, should) do this in one operation.

Hope this helps.
Pavol

On 12. 2. 2015 9:01, Dharmendra Parakh wrote:
> HI Pavol
>
> Quick Background:
> My role had two inducements:
> id=1: Role
> id=2 Resource
> I wanted to replace the resource inducement.
>
> As per my understanding i was trying to replace the inducement with 
> id=2. and that does not means to delete the other inducement (like id=1).
>
> If the replace does not work how can i individually add/delete 
> attributes/values ?
>
> Thanks
> Dharmendra
>
>
> On Thu, Feb 12, 2015 at 1:22 PM, Pavol Mederly <mederly at evolveum.com 
> <mailto:mederly at evolveum.com>> wrote:
>
>     Hello Dharmendra,
>
>     looking at your WS request: it is of REPLACE type, see:
>
>     <objectDelta ... >
>     ...
>        <t:itemDelta>
>           <t:modificationType>*replace*</t:modificationType>
>              <t:path>c:*inducement*</t:path>
>              <t:value id="2">
>                  ...
>              </t:value>
>        </t:itemDelta>
>     ...
>
>     So, basically you tell midPoint that you want to REPLACE the
>     values of *inducement***item with the ones you have provided.
>     And you've provided one value with id=2 and content of account
>     construction on resource d0811790-1d80-11e4-86b2-3c970e467874.
>     So after the operation, the original inducement with id=1 should
>     be gone.
>
>     Is this what you wanted to do? Perhaps no.
>
>     If you want to replace only one value in multi-valued item, you
>     have to
>     1) delete old value
>     2) add new value
>
>     And, I'm not quite sure about your first mail (Manish Baid,
>     received 01:14). Aren't the contents of files "original.xml" and
>     "after_addRoleInducement.xml" swapped? Because original.xml
>     corresponds to the state with only one inducement, while the file
>     "after_addRoleInducement.xml" contains two inducements. Just
>     opposite as I would expect, given the messages you wrote.
>
>     Best regards,
>     Pavol
>
>
>
>     On 12. 2. 2015 8:39, Dharmendra Parakh wrote:
>>     Hi Ivan
>>
>>     Thanks for your reply. jira you have pointed is might be related
>>     to UI only and what i observed is if i use model web service to
>>     modify one inducement it is deleting other inducements.
>>
>>     We are using the master branch so latest midpoint version.
>>
>>     Regards
>>     Dharmendra
>>
>>     On Thu, Feb 12, 2015 at 1:01 PM, Ivan Noris
>>     <ivan.noris at evolveum.com <mailto:ivan.noris at evolveum.com>> wrote:
>>
>>         Hi,
>>
>>         I believe this is the issue:
>>         https://jira.evolveum.com/browse/MID-2113 and it should be
>>         fixed, but please see the comment in JIRA.
>>
>>         Also, what version of midPoint are you using?
>>
>>         Thanks,
>>         regards
>>         Ivan
>>
>>
>>         On 02/12/2015 08:08 AM, Dharmendra Parakh wrote:
>>>         Hi Radovan
>>>
>>>         Additional Information:
>>>
>>>         We have a requirement to update the role inducement from web
>>>         service client, where we have to add/delete some resource
>>>         attributes.
>>>
>>>         In our scenario we have a role with multiple inducements
>>>         (let say one role and one resource inducement). Now i want
>>>         to add some additional attribute-values in resource
>>>         inducement. To do this we calculate the correct inducement
>>>         (AssignmentType) object with all current attributes and try
>>>         to replace this inducement.
>>>         Earlier this was working for us but now when we do this
>>>         other inducement information is lost (induced role is no
>>>         longer available in role).
>>>
>>>         I am attaching the request xml with the mail...
>>>
>>>
>>>
>>>
>>>         Regards
>>>         Dharmendra
>>>
>>>
>>>         On Thu, Feb 12, 2015 at 12:03 PM, Manish Baid
>>>         <baid_manish at yahoo.com <mailto:baid_manish at yahoo.com>> wrote:
>>>
>>>             Hi Radovan,
>>>             We are showing a demo to our clients, looks like with
>>>             recent 3.1 release, inducement update is behaving
>>>             differently.
>>>
>>>             If you can work with Dharmendra to work through this (he
>>>             is in India timezone, will be available in your
>>>             mornings), it would be of great help.
>>>
>>>
>>>
>>>             Thanks
>>>
>>>             ----- Forwarded Message -----
>>>             *From:* Manish Baid <baid_manish at yahoo.com
>>>             <mailto:baid_manish at yahoo.com>>
>>>             *To:* midPoint General Discussion
>>>             <midpoint at lists.evolveum.com
>>>             <mailto:midpoint at lists.evolveum.com>>
>>>             *Cc:* Dharmendra Parakh <dharmendra at confluxsys.com
>>>             <mailto:dharmendra at confluxsys.com>>; Indrajit Chauhan
>>>             <indrajit at confluxsys.com <mailto:indrajit at confluxsys.com>>
>>>             *Sent:* Wednesday, February 11, 2015 4:14 PM
>>>             *Subject:* URGENT ... Role inducements lost on role updates
>>>
>>>             Hi,
>>>             With 3.1 release code (and also after MID-2194), when
>>>             inducement/s is/are updated in a role, other related
>>>             indcuments are removed.
>>>
>>>             Here is an example:
>>>
>>>             * Role had an indcument: "LDAP Account" with 3 group
>>>             memberships
>>>             * Role is modified to add a role inducement (role
>>>             hierarchy)
>>>
>>>             Observation: 3 group memberships that were part of "Ldap
>>>             Account" inducments are removed.
>>>
>>>             Please see object XMLs of before and after.
>>>
>>>             Thanks
>>>
>>>
>>>
>>>
>>>
>>>
>>>         _______________________________________________
>>>         midPoint mailing list
>>>         midPoint at lists.evolveum.com  <mailto:midPoint at lists.evolveum.com>
>>>         http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>         -- 
>>            Ing. Ivan Noris
>>            Senior Identity Management Engineer
>>            evolveum.com  <http://evolveum.com>      evolveum.com/blog/  <http://evolveum.com/blog/>
>>            _____________________________________________
>>            "Semper Id(e)M Vix."
>>
>>
>>         _______________________________________________
>>         midPoint mailing list
>>         midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>>         http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>>
>>
>>     _______________________________________________
>>     midPoint mailing list
>>     midPoint at lists.evolveum.com  <mailto:midPoint at lists.evolveum.com>
>>     http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>     _______________________________________________
>     midPoint mailing list
>     midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>     http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150212/57bb9455/attachment.htm>