[midPoint] intent filter/expression?
Pavol Mederly
mederly at evolveum.com
Wed Dec 6 00:08:51 CET 2017
Hello Wojciech,
I am afraid that this is not possible. Intent (and the kind as well)
seem to be quite fixed to String (and ShadowKindType) in the code.
Best regards,
Pavol Mederly
Software developer
evolveum.com
On 05.12.2017 12:00, Wojciech Staszewski wrote:
> Hello!
>
> Is there an ability to set the "intent" in a metarole using filter or expression? Or it must be defined statically?
>
> I'm building an "universal" metarole that is assigning an entitlement (group membership).
> It must work with any instance of specified type of resource and any account intent. I'm trying to prevent the role explosion syndrome. :)
>
> Everything is working fine, except that the metarole works only for accounts with intent marked as "default" (or defined explicitly).
> Would be great to resolve "intent" using filter/expression, analogously to "resourceRef".
>
> Below is the metarole:
>
> <role>
> <name>UNIVERSAL ENTITLEMENT METAROLE: GROUP AAAAA</name>
> <inducement id="1">
> <construction>
> <strength>weak</strength>
> <resourceRef>
> <filter>
> <q:inOid>
> <expression>
> <script>
> <code>
> return basic.getPropertyValue(immediateRole, "extension/resourceRef");
> </code>
> </script>
> </expression>
> </q:inOid>
> </filter>
> <resolutionTime>run</resolutionTime>
> </resourceRef>
> <kind>account</kind>
> <intent> *THIS IS THE PLACE I HAVE TO RESOLVE INTENT FROM PARENT ROLE "extension/intentRef"* </intent>
> <association>
> <c:ref>ri:groups</c:ref>
> <outbound>
> <strength>strong</strength>
> <expression>
> <associationTargetSearch xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
> xsi:type="c:SearchObjectExpressionEvaluatorType">
> <filter>
> <q:equal>
> <q:path>attributes/icfs:name</q:path>
> <q:value>GROUP AAAAA</q:value>
> </q:equal>
> </filter>
> </associationTargetSearch>
> </expression>
> </outbound>
> </association>
> </construction>
> <order>2</order>
> </inducement>
> </role>
>
> I tried to make filters / expressions but got nothing but errors...
>
> Thanks for any help.
> WS
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
More information about the midPoint
mailing list