[midPoint] REST interface

[Pavol Mederly]

Hello Jens,

I'm afraid that getting the entire set of valid roles defined for a 
particular user (like "Show all assignments" in GUI) is a bit trickier 
than simply traversing all role inducements.

The reason is that some assignments or inducements can be conditional; 
i.e. you would have to evaluate these conditions to see whether they 
apply or not.

Fortunately, there is a method called previewChanges (in 
ModelController) that is used to do that in GUI and that could be 
published via REST/WS interface. However, I don't know if/when something 
like that is planned. 
(https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature).

Best regards,
Pavol

PS: As a partial workaround, I originally thought about using the " 
resolve" option in GetOperationOptions structure. However, this is not 
recursive and moreover, seems to be not working for multi-segment paths, 
like assignment/targetRef (MID-2435 
<https://jira.evolveum.com/browse/MID-2435>).


On 8. 7. 2015 14:18, Jens Breitenstein wrote:
> Hi midpoint experts,
>
> we are fairly new to midpoint but we already have a running instance 
> now, we added some organisational data and added users and roles using 
> the admin interface.
> While investigating the REST connector we are now able to retrieve all 
> information for a particular user, but it's somehow cumbersome to 
> "manually" parse / traverse all parentOrgs, collecting all single 
> roles and again traversing all role inducements to gather the overall 
> role set.
>
> Is there any chance to retrieve the entire set of valid roles defined 
> for a particular user in "one go" without executing multiple REST calls?
>
>
> Thanks in advance
>
> Jens
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150708/cbd4401d/attachment.htm>