[midPoint] Problem With midpoint.searchObjects in approverExpression

[pdbogen at cernu.us]

Howdy!

I'm working approval schemas that select the approver based on the value of 
the extension attribute; the result of this is that I need to locate a User 
object based on the Name.

Here's my code that I believe should accomplish this:

  import com.evolveum.midpoint.prism.path.ItemPath
  import com.evolveum.midpoint.prism.query.EqualFilter
  import com.evolveum.midpoint.prism.query.ObjectQuery
  import javax.xml.namespace.QName
  import com.evolveum.midpoint.xml.ns._public.common.common_3.UserType
  
  qn = new QName("http://cernu.us/xml/ns/userSchema", "managerDn")
  dn = basic.getExtensionPropertyValue(object, qn)
  
  dn_parts = dn.split(",")
  cn_parts = dn_parts[0].split("=")
  cn = cn_parts[1]
  
  log.info('assign: searching for manager with username {}', cn)
  
  prismContext = midpoint.getPrismContext()
  filter = EqualFilter.createEqual(UserType.F_NAME, UserType.class, prismContext, null, cn)
  log.error('assign: {}', filter)
  query = ObjectQuery.createObjectQuery(filter)
  log.error('assign: {}', query)
  managers = midpoint.searchObjects(UserType.class, query)
  log.error('assign: {}', managers)
  
  if (managers.size() == 0) {
    log.warn('assign: for approval of assignment of {} to {}, no user for cn: {}', object, target, cn)
  } else {
    managers.each { m ->
      log.info('assign: for approval of assignment of {} to {}, found {} for cn: {}', object, target, m, cn)
    }
    managers.collect { it.getOid() }
  }

For brevity, I've excluded some defensive programming around parsing the dn, 
etc.; please just assume that 'cn' is valid by the time we create the 
EqualFilter.

The logging output of this is:

  INFO (com.evolveum.midpoint.expression): assign: searching for manager with username alice
  ERROR (com.evolveum.midpoint.expression): assign: EQUAL: name,PPV(String:alice)
  ERROR (com.evolveum.midpoint.expression): assign: Q{EQUAL: name,PPV(String:alice),null paging
  ERROR (com.evolveum.midpoint.expression): assign: []
  WARN (com.evolveum.midpoint.expression): assign: for approval of assignment of user:db85f122-a6fc-4a97-8a42-e37c204db5c4(bob) to role:abe7a780-3644-4b7e-a7e4-8378402ab208(foo), no user for cn: alice

Is there anything obvious I've done wrong? The User 'alice' definitely exists. 
Also, I _think_ this was working on 3.4, whereas I'm now on 3.4.1. I don't 
know of anything else I might have changed that would break this.

I've tried a few variations:

* Making a filter with PolyString.fromOrig(cn) instead of just cn
* The above, plus replacing the `null` matching rule with variations on new QName("origIgnoreCase")
* Using midpoing.searchObjectByName, which very surprisingly did not work either
* Using ObjectQueryUtil.createNameQuery to create the query

Any advice on this would be quite helpful.

Thanks!
-- 
             .
Patrick Bogen .
            ...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160920/6185e02b/attachment.sig>