[midPoint] Timed Org Unit assignment for new users - bulk action problem

Wojciech Staszewski wojciech.staszewski at diagnostyka.pl
Fri Mar 1 11:14:35 CET 2019


OK, thanks! So I am waiting for 4.0 :D
Best regards!
WS

W dniu 01.03.2019 o 11:03, Pavol Mederly pisze:
> Hello Wojciech,
> 
> first of all, this unassign feature is new in 4.0; that's why you get "Unsupported action type: unassign" message. Lukáš has implemented it only a few days ago.
> 
> Looking at the code it seems you can unassign Org assignment simply by specifying its OID under "role" parameter. Perhaps the parameter should be called "abstractRole" instead. (It is a heritage of my own old approach back in ~2014.)
> 
> Best regards,
> 
> Pavol Mederly
> Software developer
> evolveum.com
> 
> On 01.03.2019 10:56, Wojciech Staszewski wrote:
>> Hi!
>>
>> Why bulk actions cannot unassign org unit?
>> In the documentation I see the role and resource as the only applicable parameter for unassign: "Unassigns a role or a resource account from a FocusType. (*) (***)"
>>
>> My bulk actions ends with critical error: Couldn't execute script: Unsupported action type: unassign
>>
>>     <s:action>
>>         <s:type>unassign</s:type>
>>         <s:parameter>
>>             <s:name>org</s:name>
>>             <c:value xsi:type="xsd:string">44fe95f9-6d42-4b21-af93-df245176a08a</c:value>
>>         </s:parameter>
>>     </s:action>
>>
>> Is this a purposeful restriction or bug or am I doing something wrong maybe?
>>
>> Thanks,
>> WS
>>
>> W dniu 27.02.2019 o 14:15, Wojciech Staszewski pisze:
>>> Hello!
>>>
>>> I want to make an Org unit assignment for new users.
>>> This OU should be assigned for new users for 1 day only, then it must be unassigned.
>>>
>>> WHY:
>>> If a new user is created in MP I want to allow him to change his password immediately,
>>> but my default security policy has minAge set to 1D, so I'm looking for a way to bypass it somehow.
>>>
>>> HOW:
>>> 1. Assign NEW_USERS OU by template used for user import task. This OU has different SecurityPolicy specified.
>>> 2. Create a server task for unassign NEW_USERS OU from members created >= 24h ago.
>>>
>>> Is there a better (easier) way to achieve this goal?
>>>
>>> Thanks
>>> WS
>>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Wojciech Staszewski
Administrator Systemów Sieciowych
tel. kom: 663 680 236
www.diagnostyka.pl
Diagnostyka Sp. z o. o.
ul. Prof. M. Życzkowskiego 16, 31-864 Kraków
Numer KRS: 0000381559 (Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XI Wydział Gospodarczy KRS)
NIP: 675-12-65-009; REGON: 356366975
Kapitał zakładowy: 33 756 500 zł.

Pomyśl o środowisku zanim wydrukujesz ten e-mail.



More information about the midPoint mailing list