[midPoint] Midpoint Concept What is vs. What should be - towards account entitlements

Wed Jun 28 13:14:33 CEST 2017

Hi Daniel,

I have fixed this issue right now.
Thank you for your support. Enjoy your midPoint subscription.

-- 
Radovan Semancik
Software Architect
evolveum.com

On 06/27/2017 05:03 PM, Ivan Noris wrote:
> Hi Daniel,
>
> I have just reproduced it with recent 3.6 SNAPSHOT and it looks like 
> you've hit a bug. I have created 
> https://jira.evolveum.com/browse/MID-4021 - feel free to add to 
> watchers. Also if there is anything missing in the issue description 
> feel free to update.
>
> Thank you for reporting!
>
> Best regards,
> Ivan
>
> ------------------------------------------------------------------------
>
>     *From: *"Daniel Sommer" <Daniel.Sommer at itconcepts.net>
>     *To: *midpoint at lists.evolveum.com
>     *Sent: *Tuesday, June 27, 2017 4:24:57 PM
>     *Subject: *[midPoint] Midpoint Concept What is vs. What should be
>     - towards        account entitlements
>
>     Hello,
>
>
>     we have connected Midpoint to an active directory. It has accounts
>     and group entitlements. We are able to set accounts to users (and
>     the group to a role).
>     We can assign such entitlement to a user by adding a role with
>     specific second order inducement. So far, so good.
>
>     Now we set the value in the config object to "none":
>     "globalAccountSynchronizationSettings/assignmentPolicyEnforcement"
>
>     If we now remove the role for the user again, the accounts
>     (projections) stay - as expected. But what gets lost is the
>     entitlement !
>
>     The user is not in a group anymore. So what is the problem:
>
>
>     Does not apply your concept of what is and should be to entitlements?
>
>     Is there a place in shadows or similar where the (real what is)
>     state is saved within midpoint towards account entitlements (group
>     memberships)?
>
>
>     Best regards and thx in advance,
>
>
>     Daniel
>
>     Daniel Sommer
>     Office: +49 228 908733 0 | Fax: +49 228 908733 1| Mobil: +49 176
>     162086 79
>
>     ITConcepts Professional GmbH -  In den Dauen 6 - DE 53117 Bonn
>
>     Website www.itconcepts.net <http://www.itconcepts.net>
>
>     <http://www.itconcepts.net/>
>     <http://www.itconcepts.net/index.php/about-cognitum>
>     Besuchen Sie uns auch auf
>     <http://www.xing.com/companies/itconceptsprofessionalgmbh/updates>
>     <http://www.linkedin.com/company/itconcepts>
>     <https://www.facebook.com/ITConcepts-Karriere-274907129252667/>
>     <https://twitter.com/ITConceptsJobs>
>
>     Events mit ITConcepts　.
>     29. Juni: IT Security Management & Technology Conference 2017 in
>     Hanau. Mehr Infos hier:
>     <http://www.itconcepts.de/index.php/itconcepts-events/details/72-it-security-conference>
>     13. Juli: IT Security Management & Technology Conference 2017 in
>     Hamburg. Mehr Infos hier:
>     <http://www.itconcepts.de/index.php/itconcepts-events/details/75-it-security-conference>
>
>     ITConcepts Professional GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn
>     HRB 12947 - Ust-Id Nr: DE211482933
>     ITConcepts Automotive GmbH Gf.: Sven Moog, Sitz Wolfsburg, AG
>     Braunschweig HRB 204188 - Ust-Id Nr: DE223888748
>     ITConcepts Operations GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn HRB
>     15454 - St.-Nr: 205/5726/0602
>
>     Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte
>     Informationen. Wenn Sie nicht der richtige Adressat sind
>     oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte
>     sofort den Absender und vernichten Sie diese Mail.
>     Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser
>     E-Mail sind nicht gestattet.
>
>     This e-mail may contain confidential and/or privileged
>     information. If you are not the intended recipient
>     (or have received this e-mail in error) please notify the sender
>     immediately and destroy this e-mail.
>     Any unauthorised copying, disclosure or distribution of the
>     material in this e-mail is strictly forbidden.
>
>
>     _______________________________________________
>     midPoint mailing list
>     midPoint at lists.evolveum.com
>     http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
>
> -- 
> Ivan Noris
> Senior Identity Engineer
> evolveum.com
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ITConcepts.gif
Type: image/gif
Size: 2977 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: COGNITUM.gif
Type: image/gif
Size: 501 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: xing20.gif
Type: image/gif
Size: 1009 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: linkedin20.gif
Type: image/gif
Size: 1026 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment-0003.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Facebook_Signatur.gif
Type: image/gif
Size: 587 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment-0004.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Twitter_Signatur.gif
Type: image/gif
Size: 585 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170628/27ae7a31/attachment-0005.gif>