<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello Anand,<br>
<br>
as for the losing of inducement details, it seems that you've hit
a bug in midPoint. I've created a <a
href="https://jira.evolveum.com/browse/MID-2113">jira issue</a>
for it. I'm going to have a look at it.<br>
<br>
The exact behavior of midPoint when unassigning the role from a
user depends on assignment enforcement policy that you have set in
system configuration. I.e. whether the account on the resource
should be deleted or not. However, in all cases, because now the
role has no information about the group that it induced (because
the information was lost while editing), the unassigning of the
role will not cause the LDAP group to be unassigned.<br>
<br>
Best regards,<br>
Pavol<br>
<br>
On 12. 12. 2014 5:57, Anand Kothekar wrote:<br>
</div>
<blockquote
cite="mid:CAHUT-CRKh51cOW88gihX_aPf5_BXUw2S1CrwtOwgrJ+gLF=sGQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi
<div><br>
</div>
<div>I have recently started using midpoint for evaluation. I
have a midpoint environment in my system configured with an
ldap resource.</div>
<div><br>
</div>
<div>I was trying to play around with roles and inducement, I
observed one behaviour which i think is an issue with midpoint
UI.</div>
<div><br>
</div>
<div>Problem:</div>
<div><br>
</div>
<div>- When i create a role and add an ldap resource inducement
with some ldap groups, the role is properly created and role
member gets the appropriate account and group membership.</div>
<div>- Now if i modify the role like i change the role
description and save it, the induced groups are removed from
role. role xml gets modified.</div>
<div>- Another observation is like if a user is assigned
multiple roles (roles in hierarchy), and we remove the above
updated role from user then the group removed from role is not
removed from user.</div>
<div><br>
</div>
<div><br>
</div>
<div>I have attached the role xml's for reference, please look
into this and let me know if it is the case i have mentioned
or i am making any mistake.</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards</div>
<div>Anand</div>
<img moz-do-not-send="true" class="mailtrack-img"
src="https://mailtrack.io/trace/mail/3955ae40bfd3d96ad7a24f09942c4998e5f33f03.png"
height="0" width="0"></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>