[midPoint] Fw: URGENT ... Role inducements lost on role updates

[Manish Baid]

Thank you Pavol.

You suggestion to "Add" and "Delete" value has worked.

Inducements are now not removed.

Best Regards

      From: Pavol Mederly <mederly at evolveum.com>
 To: midpoint at lists.evolveum.com 
 Sent: Wednesday, February 11, 2015 11:52 PM
 Subject: Re: [midPoint] Fw: URGENT ... Role inducements lost on role updates
   
 Hello Dharmendra,
 
 looking at your WS request: it is of REPLACE type, see:
 
 <objectDelta ... >
 ...        
    <t:itemDelta>
       <t:modificationType>replace</t:modificationType>
          <t:path>c:inducement</t:path>
          <t:value id="2">
              ...
          </t:value>
    </t:itemDelta>
 ...
 
 So, basically you tell midPoint that you want to REPLACE the values of inducement item with the ones you have provided.
 And you've provided one value with id=2 and content of account construction on resource d0811790-1d80-11e4-86b2-3c970e467874.
 So after the operation, the original inducement with id=1 should be gone.
 
 Is this what you wanted to do? Perhaps no.
 
 If you want to replace only one value in multi-valued item, you have to
 1) delete old value
 2) add new value
 
 And, I'm not quite sure about your first mail (Manish Baid, received 01:14). Aren't the contents of files "original.xml" and "after_addRoleInducement.xml" swapped? Because original.xml corresponds to the state with only one inducement, while the file "after_addRoleInducement.xml" contains two inducements. Just opposite as I would expect, given the messages you wrote.
 
 Best regards,
 Pavol
 
 


 On 12. 2. 2015 8:39, Dharmendra Parakh wrote:
  
 Hi Ivan  
 Thanks for your reply. jira you have pointed is might be related to UI only and what i observed is if i use model web service to modify one inducement it is deleting other inducements.  
  We are using the master branch so latest midpoint version. 
  Regards Dharmendra  
 On Thu, Feb 12, 2015 at 1:01 PM, Ivan Noris <ivan.noris at evolveum.com> wrote:
 
  Hi,
 
 I believe this is the issue: https://jira.evolveum.com/browse/MID-2113 and it should be fixed, but please see the comment in JIRA.
 
 Also, what version of midPoint are you using?
 
 Thanks,
 regards
 Ivan  
 
 On 02/12/2015 08:08 AM, Dharmendra Parakh wrote:
    
   Hi Radovan 
  Additional Information: 
  We have a requirement to update the role inducement from web service client, where we have to add/delete some resource attributes. 
  In our scenario we have a role with multiple inducements (let say one role and one resource inducement). Now i want to add some additional attribute-values in resource inducement. To do this we calculate the correct inducement (AssignmentType) object with all current attributes and try to replace this inducement.  Earlier this was working for us but now when we do this other inducement information is lost (induced role is no longer available in role). 
  I am attaching the request xml with the mail... 
  
  
  
  Regards Dharmendra 
   
 On Thu, Feb 12, 2015 at 12:03 PM, Manish Baid <baid_manish at yahoo.com> wrote:
 
   Hi Radovan, We are showing a demo to our clients, looks like with recent 3.1 release, inducement update is behaving  differently. 
  If you can work with Dharmendra to work through this (he is in India timezone, will be available in  your mornings), it would be of great help. 
  
  
  Thanks
     
    ----- Forwarded Message -----
  From: Manish Baid <baid_manish at yahoo.com>
 To: midPoint General Discussion <midpoint at lists.evolveum.com> 
 Cc: Dharmendra Parakh <dharmendra at confluxsys.com>; Indrajit Chauhan <indrajit at confluxsys.com> 
 Sent: Wednesday, February 11, 2015 4:14 PM
 Subject: URGENT ... Role inducements lost on role updates
   
    Hi, With 3.1 release code (and also after MID-2194), when  inducement/s is/are updated in a role, other related indcuments are removed. 
  Here is an example: 
  * Role had an indcument: "LDAP Account" with 3 group  memberships * Role is modified to add a role inducement (role  hierarchy)  
  Observation: 3 group memberships that were part of "Ldap  Account" inducments are removed. 
  
  Please see object XMLs of before and after. 
  Thanks
  
     
 
        
  
  
  
   _______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com
http://lists.evolveum.com/mailman/listinfo/midpoint
  
  
 -- 
  Ing. Ivan Noris
  Senior Identity Management Engineer
  evolveum.com     evolveum.com/blog/
  _____________________________________________
  "Semper Id(e)M Vix."
  
 _______________________________________________
 midPoint mailing list
 midPoint at lists.evolveum.com
 http://lists.evolveum.com/mailman/listinfo/midpoint
 
 
  
  
  
 _______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com
http://lists.evolveum.com/mailman/listinfo/midpoint
 
 
 
_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com
http://lists.evolveum.com/mailman/listinfo/midpoint


  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150212/d399fe5e/attachment.htm>