[midPoint] Timed Org Unit assignment for new users - bulk action problem

[Wojciech Staszewski]

Hi!

Why bulk actions cannot unassign org unit?
In the documentation I see the role and resource as the only applicable parameter for unassign: "Unassigns a role or a resource account from a FocusType. (*) (***)"

My bulk actions ends with critical error: Couldn't execute script: Unsupported action type: unassign

     <s:action>
         <s:type>unassign</s:type>
         <s:parameter>
             <s:name>org</s:name>
             <c:value xsi:type="xsd:string">44fe95f9-6d42-4b21-af93-df245176a08a</c:value>
         </s:parameter>
     </s:action>

Is this a purposeful restriction or bug or am I doing something wrong maybe?

Thanks,
WS

W dniu 27.02.2019 o 14:15, Wojciech Staszewski pisze:
> Hello!
> 
> I want to make an Org unit assignment for new users.
> This OU should be assigned for new users for 1 day only, then it must be unassigned.
> 
> WHY:
> If a new user is created in MP I want to allow him to change his password immediately,
> but my default security policy has minAge set to 1D, so I'm looking for a way to bypass it somehow.
> 
> HOW:
> 1. Assign NEW_USERS OU by template used for user import task. This OU has different SecurityPolicy specified.
> 2. Create a server task for unassign NEW_USERS OU from members created >= 24h ago.
> 
> Is there a better (easier) way to achieve this goal?
> 
> Thanks
> WS

-- 
Wojciech Staszewski
Administrator Systemów Sieciowych
tel. kom: 663 680 236
www.diagnostyka.pl
Diagnostyka Sp. z o. o.
ul. Prof. M. Życzkowskiego 16, 31-864 Kraków
Numer KRS: 0000381559 (Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XI Wydział Gospodarczy KRS)
NIP: 675-12-65-009; REGON: 356366975
Kapitał zakładowy: 33 756 500 zł.

Pomyśl o środowisku zanim wydrukujesz ten e-mail.