<div dir="ltr">I was actually going over all my user attributes and after looking at them and thinking about how often they would be changed and if they would ever be changed I am thinking I would only need to filter out phone number, the other attributes should never really change.<div><br></div><div>JASON</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Feb 27, 2015 at 10:12 AM, Jason Everling <span dir="ltr"><<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Yeah I basically only want to send a notification when their account is disabled or enabled, I already have notifications working for "ADD" new account notifications and it works fine. We do not delete accounts, once a username has been issued it will never be used again except by that same person if he/she returns to the school even if it is years down the road. I will probably create a generic delete notification sent to us admins just in-case someone deletes something.<div><br></div><div>So the workaround would probably work, I would basically need to filter everything that is not relevant for the administrative status modifications. If you could write 1 filter for an attribute I could write the rest like if I wanted to filter out phone number changes.</div><div><br></div><div>This notification is only going to be for when the student/faculty/ or staff's account is disabled or enabled. So when a student/faculty/staff leaves us they would get a notification letting them at least know that their account was disabled and why they are unable to login. Same for when they return, they would get an email with a custom body letting them know their accounts are re-enabled.</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>JASON</div></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Feb 27, 2015 at 9:52 AM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <div>Jason,<br>
      <br>
      I'm not quite sure I understand you correctly. But these things
      are clear:<br>
      <br>
      1) If watchAuxiliaryAttributes = false, only "user visible" items
      are taken into account (i.e. user/account attributes, account
      associations, administrativeStatus and a few others).<br>
      2) If watchAuxiliaryAttributes = true, all these PLUS also
      auxiliary attributes are taken into account.<br>
      3) If you edit the "bodyExpression", you can hide all the
      attributes you don't want to be present in the message.<br>
      4) BUT - as you correctly stated - even if you are interested only
      in the activation part, the message would be generated for ALL
      changes (e.g. modifying phone number)<br>
      <br>
      Just BTW, Ivan noticed this just today and created a jira issue <a href="https://jira.evolveum.com/browse/MID-2237" target="_blank">MID-2237</a>
      for that. (Unfortunately because of all the pressures it is
      currently scheduled for 3.3.)<br>
      <br>
      A workaround would be to filter out (via expressionFilter) all the
      changes with attributes that are not relevant for you. <br>
      I'm not sure about what midPoint method would be the most
      convenient to use. Maybe it does not exist yet.<br>
      <br>
      But if you confirm that I understand you correctly, and if you
      would send here a specific list of attributes to be watched, I
      could find/provide such a method.<br>
      <br>
      BTW, what about ADD and DELETE operations? Should they generate
      any messages? <br>
      <br>
      Best regards,<br>
      Pavol<br>
      <br>
    </div><div><div>
    <blockquote type="cite">
      <div dir="ltr">
        <div>Thanks for the clarification,</div>
        <div><br>
        </div>
        So is it on the modify operation I am assuming. Wouldn't that
        send a notification for every modify like phone or department, I
        just really want the activation part of it, the enable/disable
        and if any of the other auxiliaries are changed. I would use a
        body expression to specify the message so that the un-needed
        items are not present, something like this but wouldn't it send
        for every modify like stated above?
        <div><br>
        </div>
        <div>
          <div>    <handler></div>
          <div>        <expressionFilter></div>
          <div>            <script></div>
          <div><span style="white-space:pre-wrap"> </span><code></div>
          <div><span style="white-space:pre-wrap"> </span>event.isUserRelated()
            &amp;&amp;</div>
          <div><span style="white-space:pre-wrap"> </span>requestee.getCostCenter()
            == 'ASHIT'</div>
          <div>                </code></div>
          <div>            </script></div>
          <div>        </expressionFilter></div>
          <div>        <simpleUserNotifier></div>
          <div>            <name>Account Modified</name></div>
          <div>            <operation>modify</operation></div>
          <div>            <status>success</status></div>
          <div>            <recipientExpression></div>
          <div>
            <div>                <script></div>
            <div>                    <code></div>
            <div>                     
               basic.getExtensionPropertyValue(requestee, '<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>',
              'otherMailbox')                             </code></div>
            <div>                </script></div>
          </div>
          <div>            </recipientExpression></div>
          <div>            <<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px;white-space:pre-wrap">watchAuxiliaryAttributes>true</</span><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px;white-space:pre-wrap">watchAuxiliaryAttributes></span></div>
          <div>            <subjectExpression></div>
          <div>                <script></div>
          <div>                    <code>"Your Account has been
            modified"</code></div>
          <div>                </script></div>
          <div>            </subjectExpression></div>
          <div>            <bodyExpression></div>
          <div>                <script></div>
          <div>                    <code></div>
          <div>                        "Some message to the
            student/faculty or staff" +</div>
        </div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
          </b></div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
          </b></div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
          </b></div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
          </b></div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
          </b></div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
          </b></div>
        <div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"> </b></div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Fri, Feb 27, 2015 at 4:39 AM, Pavol
          Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000">
              <div>Hello Jason,<br>
                <br>
                activation/administrativeStatus is among attributes that
                are "watched" by default.<br>
                <br>
                So, if you change it, you'll get a notification - like
                this:<br>
                <br>
                <small><tt>============================================
                    Fri Feb 27 11:30:45 CET 2015</tt><tt><br>
                  </tt><tt>Message{to='[<a href="mailto:aaa@aaa.sk" target="_blank">aaa@aaa.sk</a>]',
                    subject='Account modification notification',
                    contentType='null', body='Notification about
                    account-related operation</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>User: Boss1 (boss1, oid
                    75f2806d-e31b-40c9-8133-85ed4d9e6252)</tt><tt><br>
                  </tt><tt>Notification created on: Fri Feb 27 11:30:45
                    CET 2015</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>Resource: Localhost CSVfile (oid
                    ef2bc95b-76e0-48e2-86d6-3d4f02d3fafe)</tt><tt><br>
                  </tt><tt>Account: boss1</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>The account has been successfully modified on
                    the resource. Modified attributes are:</tt><tt><br>
                  </tt><tt> - Activation/Administrative Status:</tt><tt><br>
                  </tt><tt>   - REPLACE: DISABLED</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>'}</tt><tt><br>
                  </tt><tt><br>
                  </tt></small>Actually, you can use
                watchAuxiliaryAttributes, but this would lead to
                providing unimportant messages and/or attributes in
                them. For example, when I enabled it, like this:<br>
                <br>
                <tt><small>  <notificationConfiguration><br>
                          <handler><br>
                             <simpleResourceObjectNotifier><br>
                                <recipientExpression><br>
                                   <value><a href="mailto:aaa@aaa.sk" target="_blank">aaa@aaa.sk</a></value><br>
                                </recipientExpression><br>
                    <font color="#cc0000"><b>           
                        <watchAuxiliaryAttributes>true</watchAuxiliaryAttributes></b></font><br>
                                <transport>mail</transport><br>
                             </simpleResourceObjectNotifier><br>
                          </handler><br>
                          <mail><br>
                             <debug>false</debug><br>
                            
                    <redirectToFile>notifications.txt</redirectToFile><br>
                          </mail><br>
                       </notificationConfiguration><br>
                  </small></tt><br>
                I'll get the following notification after re-enabling
                the account again:<br>
                <br>
                <small><tt>============================================
                    Fri Feb 27 11:31:40 CET 2015</tt><tt><br>
                  </tt><tt>Message{to='[<a href="mailto:aaa@aaa.sk" target="_blank">aaa@aaa.sk</a>]',
                    subject='Account modification notification',
                    contentType='null', body='Notification about
                    account-related operation</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>User: Boss1 (boss1, oid
                    75f2806d-e31b-40c9-8133-85ed4d9e6252)</tt><tt><br>
                  </tt><tt>Notification created on: Fri Feb 27 11:31:40
                    CET 2015</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>Resource: Localhost CSVfile (oid
                    ef2bc95b-76e0-48e2-86d6-3d4f02d3fafe)</tt><tt><br>
                  </tt><tt>Account: boss1</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>The account has been successfully modified on
                    the resource. Modified attributes are:</tt><tt><br>
                  </tt><tt> - Activation/Administrative Status:</tt><tt><br>
                  </tt><tt>   - REPLACE: ENABLED</tt><tt><br>
                  </tt><tt> - Activation/enableTimestamp:</tt><tt><br>
                  </tt><tt>   - REPLACE: 27.2.2015 11:31:40</tt><tt><br>
                  </tt><tt> - Metadata/modifyChannel:</tt><tt><br>
                  </tt><tt>   - REPLACE: <a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></tt><tt><br>
                  </tt><tt> - Metadata/modifyTimestamp:</tt><tt><br>
                  </tt><tt>   - REPLACE: 27.2.2015 11:31:40</tt><tt><br>
                  </tt><tt> - Metadata/modifierRef:</tt><tt><br>
                  </tt><tt>   - REPLACE: administrator (user)</tt><tt><br>
                  </tt><tt><br>
                  </tt><tt>'}</tt><tt><br>
                  </tt></small><br>
                Just BTW, these attributes are currently considered
                auxiliary:<br>
                <br>
                - metadata container<br>
                - activation/validityStatus<br>
                - activation/validityChangeTimestamp<br>
                - activation/effectiveStatus (this is not the same as
                administrativeStatus!)<br>
                - activation/disableTimestamp<br>
                - activation/enableTimestamp<br>
                - activation/archiveTimestamp<br>
                - iteration<br>
                - iterationToken<br>
                - linkRef (for focal objects)<br>
                - trigger<br>
                <br>
                And these are considered synchronization-related
                (notifications for them are also disabled by default):<br>
                <br>
                - synchronizationSituation<br>
                - synchronizationSituationDescription<br>
                - synchronizationTimestamp<br>
                - fullSynchronizationTimestamp<br>
                <br>
                Hope this helps,<br>
                Pavol
                <div>
                  <div><br>
                    <br>
                    On 26. 2. 2015 15:36, Jason Everling wrote:<br>
                  </div>
                </div>
              </div>
              <blockquote type="cite">
                <div>
                  <div>
                    <div dir="ltr">
                      <pre><font color="#333333" face="Arial, sans-serif"><span style="font-size:14px;line-height:20px;white-space:normal">Would you happen to have a sample or provide one for use the </span></font><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">watchAuxiliaryAttributes in a notification?</span></pre>
                      <pre><font color="#333333" face="Arial, sans-serif"><span style="font-size:14px;line-height:20px;white-space:normal">What I was mainly looking for is a way to send a notification when the activation/administrativeStatus has changed for an account. I have my other notifiers for account adds but this would make a wonderful addition so when withdrawn students return they would get a notification letting them know their accounts have been re-enabled.</span></font></pre>
                      <pre>JASON</pre>
                    </div>
                    <br>
                  </div>
                </div>
                <font><br>
                  <br>
                  CONFIDENTIALITY NOTICE:<br>
                  This e-mail together with any attachments is
                  proprietary and confidential; intended for only the
                  recipient(s) named above and may contain information
                  that is privileged. You should not retain, copy or use
                  this e-mail or any attachments for any purpose, or
                  disclose all or any part of the contents to any
                  person. Any views or opinions expressed in this e-mail
                  are those of the author and do not represent those of
                  the Baptist School of Health Professions. If you have
                  received this e-mail in error, or are not the named
                  recipient(s), you are hereby notified that any review,
                  dissemination, distribution or copying of this
                  communication is prohibited by the sender and to do so
                  might constitute a violation of the Electronic
                  Communications Privacy Act, 18 U.S.C. section
                  2510-2521. Please immediately notify the sender and
                  delete this e-mail and any attachments from your
                  computer. </font><br>
                <br>
                <fieldset></fieldset>
                <br>
                <pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
              </blockquote>
              <br>
            </div>
            <br>
            _______________________________________________<br>
            midPoint mailing list<br>
            <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
            <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <font><br>
        <br>
        CONFIDENTIALITY NOTICE:<br>
        This e-mail together with any attachments is proprietary and
        confidential; intended for only the recipient(s) named above and
        may contain information that is privileged. You should not
        retain, copy or use this e-mail or any attachments for any
        purpose, or disclose all or any part of the contents to any
        person. Any views or opinions expressed in this e-mail are those
        of the author and do not represent those of the Baptist School
        of Health Professions. If you have received this e-mail in
        error, or are not the named recipient(s), you are hereby
        notified that any review, dissemination, distribution or copying
        of this communication is prohibited by the sender and to do so
        might constitute a violation of the Electronic Communications
        Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
        notify the sender and delete this e-mail and any attachments
        from your computer. </font><br>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <br>
  </div></div></div>

<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>

<br>
<font size="2"><br><br>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </font><br>