[midPoint] bulk remove assigments of non-existent objects

[Radovan Semancik]

Hi,

The assignments to non-existing objects are not removed automatically 
(not even in recopute) by purpose. Assignment is a policy statement. We 
do not want to change it in any way that is not compliant with the 
business processes. Even if it points to a non-existing role. Because we 
do not know if the assignment is OK, just the role was accidentally 
deleted or the role was deleted by purpose and the assignment 
accidentally remained. As there is not simple way how to resolve this we 
have chosen not to do anything automatically.

Now, it would be easy to re-create a missing role. But I guess you are 
pointing out that it is not that easy to remove these assignments. And 
you are partially right. There is no efficient mechanism how to remove 
all the assignment to all the missing targets. But there is a way how to 
do it one by one for each missing target. You can use bulk actions for 
that. See samples/tasks/bulk-actions/modify-selected-users-unassign-role.xml

-- 
Radovan Semancik
Software Architect
evolveum.com



On 12/10/2015 12:52 PM, Roman Pudil - AMI Praha a.s. wrote:
> Hi,
> how to bulk remove assignments of non-existent objects? Recomputing 
> has no effect.
> Example - source code of User object:
>    <assignment id="3">
>       <targetRef oid="b1b778bf-b731-4715-b8fb-c109a5705485" 
> type="c:RoleType"><!-- (object not found) --></targetRef>
>    </assignment>
>    <assignment id="4">
>       <targetRef oid="5017359e-8fd5-40d5-bc23-76c0ad274a49" 
> type="c:RoleType"><!-- (object not found) --></targetRef>
>    </assignment>
>    <assignment id="5">
>       <targetRef oid="701722db-dfd1-4291-9ce5-7f0f9234af20" 
> type="c:RoleType"><!-- (object not found) --></targetRef>
>    </assignment>
> Thanks!
> Roman
>
> Roman Pudil
> solution architect
>
> gsm: [+420] 775 663 666
> e-mail:roman.pudil at ami.cz <mailto:roman.pudil at ami.cz>
>
> 			
>
> AMI Praha a.s.
> Pláničkova 11
> 162 00 Praha 6
> tel./fax: [+420] 274 783 239
> web:www.ami.cz <http://www.ami.cz>
>
> 			
>
>
> <http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management>
>
> Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za 
> společnost AMI Praha a.s.
> jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít 
> výhradně písemnou formu.
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160121/b849bc9a/attachment.htm>