[midPoint] - Inherited role's mapping not removing value from user

[Rodrigo Yanis]

Hello,

I've just created a JIRA for this issue: MID-4284
<https://jira.evolveum.com/browse/MID-4284>

Regards,


*Rodrigo Yanis.*
Identicum S.A.
Jorge Newbery 3226
Tel: +54 (11) 4552-3050
ryanis at identicum.com
www.identicum.com

2017-08-29 15:32 GMT-03:00 Rodrigo Yanis <ryanis at identicum.com>:

> Hello everyone,
>
> I'm currently experiencing an issue in MidPoint 3.5.1 where I have a role
> with an inducement including a focusMapping, defined as following:
>
> <inducement id="1">
>       <focusMappings>
>          <mapping>
>             <strength>strong</strength>
>             <source>
>                <c:path>$focus/extension/someAttribute</c:path>
>             </source>
>             <expression>
>                <script>
>                   <code>
>                 if (someAttribute) { return "someValue" }
>                 else { return null };
>                </code>
>                </script>
>             </expression>
>             <target>
>                <c:path>$focus/extension/targetAttribute</c:path>
>             </target>
>          </mapping>
>       </focusMappings>
>       <orderConstraint>
>          <orderMax>unbounded</orderMax>
>       </orderConstraint>
>       <focusType>UserType</focusType>
>    </inducement>
>
> So when I directly assign this to a user, the role writes the attribute
> "targetAttribute", and when i de-assign it, the value is removed. This is
> the expected behavior.
>
> This is not the exact case when the role is induced into another role, and
> this last one is assigned to the user. In this case, the "2nd order" role
> writes the value correctly, but when the "2nd order" role is de-induced
> from the "1st order" role and then the user is recomputed, targetAttribute
> value is not removed.
>
> I hope the case is well explained. Anecdotically, I've played with the
> orders on the inducements but haven't got any results.
>
> Do you have any suggestions? Is this encompassed on 3.6 release?
>
> Thanks a lot.
>
> *Rodrigo Yanis.*
> Identicum S.A.
> Jorge Newbery 3226
> Tel: +54 (11) 4552-3050
> ryanis at identicum.com
> www.identicum.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20171123/fed9a6a9/attachment.htm>