[midPoint] Timed Org Unit assignment for new users - bulk action problem

[Pavol Mederly]

Hello Wojciech,

first of all, this unassign feature is new in 4.0; that's why you get 
"Unsupported action type: unassign" message. Lukáš has implemented it 
only a few days ago.

Looking at the code it seems you can unassign Org assignment simply by 
specifying its OID under "role" parameter. Perhaps the parameter should 
be called "abstractRole" instead. (It is a heritage of my own old 
approach back in ~2014.)

Best regards,

Pavol Mederly
Software developer
evolveum.com

On 01.03.2019 10:56, Wojciech Staszewski wrote:
> Hi!
>
> Why bulk actions cannot unassign org unit?
> In the documentation I see the role and resource as the only 
> applicable parameter for unassign: "Unassigns a role or a resource 
> account from a FocusType. (*) (***)"
>
> My bulk actions ends with critical error: Couldn't execute script: 
> Unsupported action type: unassign
>
>     <s:action>
>         <s:type>unassign</s:type>
>         <s:parameter>
>             <s:name>org</s:name>
>             <c:value 
> xsi:type="xsd:string">44fe95f9-6d42-4b21-af93-df245176a08a</c:value>
>         </s:parameter>
>     </s:action>
>
> Is this a purposeful restriction or bug or am I doing something wrong 
> maybe?
>
> Thanks,
> WS
>
> W dniu 27.02.2019 o 14:15, Wojciech Staszewski pisze:
>> Hello!
>>
>> I want to make an Org unit assignment for new users.
>> This OU should be assigned for new users for 1 day only, then it must 
>> be unassigned.
>>
>> WHY:
>> If a new user is created in MP I want to allow him to change his 
>> password immediately,
>> but my default security policy has minAge set to 1D, so I'm looking 
>> for a way to bypass it somehow.
>>
>> HOW:
>> 1. Assign NEW_USERS OU by template used for user import task. This OU 
>> has different SecurityPolicy specified.
>> 2. Create a server task for unassign NEW_USERS OU from members 
>> created >= 24h ago.
>>
>> Is there a better (easier) way to achieve this goal?
>>
>> Thanks
>> WS
>