[midPoint] Fw: URGENT ... Role inducements lost on role updates

Thu Feb 12 09:34:27 CET 2015

Hi

I got this point that i can add and delete individual attribute/value but i
want to know how can i achieve with java code or can you give me a sample
xml doing this.

Regards
Dharmendra

On Thu, Feb 12, 2015 at 1:53 PM, Pavol Mederly <mederly at evolveum.com> wrote:

>  Hello Dharmendra,
>
> If the replace does not work how can i individually add/delete
> attributes/values ?
>
>
> REPLACE replaces the whole inducement, i.e. all of its values.
>
> If you want to replace just one value (e.g. you have a values of A, B, C
> and you want to make it A, B, D), you have to do the following:
> - delete C
> - add D
>
> You can (and perhaps, should) do this in one operation.
>
> Hope this helps.
> Pavol
>
>
>
> On 12. 2. 2015 9:01, Dharmendra Parakh wrote:
>
> HI Pavol
>
>  Quick Background:
> My role had two inducements:
> id=1: Role
> id=2 Resource
> I wanted to replace the resource inducement.
>
>  As per my understanding i was trying to replace the inducement with
> id=2. and that does not means to delete the other inducement (like id=1).
>
>  If the replace does not work how can i individually add/delete
> attributes/values ?
>
>  Thanks
> Dharmendra
>
>
> On Thu, Feb 12, 2015 at 1:22 PM, Pavol Mederly <mederly at evolveum.com>
> wrote:
>
>>  Hello Dharmendra,
>>
>> looking at your WS request: it is of REPLACE type, see:
>>
>> <objectDelta ... >
>> ...
>>    <t:itemDelta>
>>       <t:modificationType>*replace*</t:modificationType>
>>          <t:path>c:*inducement*</t:path>
>>          <t:value id="2">
>>              ...
>>          </t:value>
>>    </t:itemDelta>
>> ...
>>
>> So, basically you tell midPoint that you want to REPLACE the values of
>> *inducement* item with the ones you have provided.
>> And you've provided one value with id=2 and content of account
>> construction on resource d0811790-1d80-11e4-86b2-3c970e467874.
>> So after the operation, the original inducement with id=1 should be gone.
>>
>> Is this what you wanted to do? Perhaps no.
>>
>> If you want to replace only one value in multi-valued item, you have to
>> 1) delete old value
>> 2) add new value
>>
>> And, I'm not quite sure about your first mail (Manish Baid, received
>> 01:14). Aren't the contents of files "original.xml" and
>> "after_addRoleInducement.xml" swapped? Because original.xml corresponds to
>> the state with only one inducement, while the file
>> "after_addRoleInducement.xml" contains two inducements. Just opposite as I
>> would expect, given the messages you wrote.
>>
>> Best regards,
>> Pavol
>>
>>
>>
>> On 12. 2. 2015 8:39, Dharmendra Parakh wrote:
>>
>> Hi Ivan
>>
>> Thanks for your reply. jira you have pointed is might be related to UI
>> only and what i observed is if i use model web service to modify one
>> inducement it is deleting other inducements.
>>
>>  We are using the master branch so latest midpoint version.
>>
>>  Regards
>> Dharmendra
>>
>> On Thu, Feb 12, 2015 at 1:01 PM, Ivan Noris <ivan.noris at evolveum.com>
>> wrote:
>>
>>>  Hi,
>>>
>>> I believe this is the issue: https://jira.evolveum.com/browse/MID-2113
>>> and it should be fixed, but please see the comment in JIRA.
>>>
>>> Also, what version of midPoint are you using?
>>>
>>> Thanks,
>>> regards
>>> Ivan
>>>
>>>
>>> On 02/12/2015 08:08 AM, Dharmendra Parakh wrote:
>>>
>>>  Hi Radovan
>>>
>>>  Additional Information:
>>>
>>>  We have a requirement to update the role inducement from web service
>>> client, where we have to add/delete some resource attributes.
>>>
>>>  In our scenario we have a role with multiple inducements (let say one
>>> role and one resource inducement). Now i want to add some additional
>>> attribute-values in resource inducement. To do this we calculate the
>>> correct inducement (AssignmentType) object with all current attributes and
>>> try to replace this inducement.
>>> Earlier this was working for us but now when we do this other inducement
>>> information is lost (induced role is no longer available in role).
>>>
>>>  I am attaching the request xml with the mail...
>>>
>>>
>>>
>>>
>>>  Regards
>>> Dharmendra
>>>
>>>
>>> On Thu, Feb 12, 2015 at 12:03 PM, Manish Baid <baid_manish at yahoo.com>
>>> wrote:
>>>
>>>>  Hi Radovan,
>>>> We are showing a demo to our clients, looks like with recent 3.1
>>>> release, inducement update is behaving differently.
>>>>
>>>>  If you can work with Dharmendra to work through this (he is in India
>>>> timezone, will be available in your mornings), it would be of great help.
>>>>
>>>>
>>>>
>>>>  Thanks
>>>>
>>>>   ----- Forwarded Message -----
>>>>  *From:* Manish Baid <baid_manish at yahoo.com>
>>>> *To:* midPoint General Discussion <midpoint at lists.evolveum.com>
>>>> *Cc:* Dharmendra Parakh <dharmendra at confluxsys.com>; Indrajit Chauhan <
>>>> indrajit at confluxsys.com>
>>>> *Sent:* Wednesday, February 11, 2015 4:14 PM
>>>> *Subject:* URGENT ... Role inducements lost on role updates
>>>>
>>>>   Hi,
>>>> With 3.1 release code (and also after MID-2194), when inducement/s
>>>> is/are updated in a role, other related indcuments are removed.
>>>>
>>>>  Here is an example:
>>>>
>>>>  * Role had an indcument: "LDAP Account" with 3 group memberships
>>>> * Role is modified to add a role inducement (role hierarchy)
>>>>
>>>>  Observation: 3 group memberships that were part of "Ldap Account"
>>>> inducments are removed.
>>>>
>>>>  Please see object XMLs of before and after.
>>>>
>>>>  Thanks
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>>  _______________________________________________
>>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>> --
>>>   Ing. Ivan Noris
>>>   Senior Identity Management Engineer
>>>   evolveum.com     evolveum.com/blog/
>>>   _____________________________________________
>>>   "Semper Id(e)M Vix."
>>>
>>>
>>> _______________________________________________
>>> midPoint mailing list
>>> midPoint at lists.evolveum.com
>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>
>>
>> _______________________________________________
>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150212/81b9944a/attachment.htm>