<div dir="ltr">Yeah I basically only want to send a notification when their account is disabled or enabled, I already have notifications working for "ADD" new account notifications and it works fine. We do not delete accounts, once a username has been issued it will never be used again except by that same person if he/she returns to the school even if it is years down the road. I will probably create a generic delete notification sent to us admins just in-case someone deletes something.<div><br></div><div>So the workaround would probably work, I would basically need to filter everything that is not relevant for the administrative status modifications. If you could write 1 filter for an attribute I could write the rest like if I wanted to filter out phone number changes.</div><div><br></div><div>This notification is only going to be for when the student/faculty/ or staff's account is disabled or enabled. So when a student/faculty/staff leaves us they would get a notification letting them at least know that their account was disabled and why they are unable to login. Same for when they return, they would get an email with a custom body letting them know their accounts are re-enabled.</div><div><br></div><div>JASON</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Feb 27, 2015 at 9:52 AM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Jason,<br>
<br>
I'm not quite sure I understand you correctly. But these things
are clear:<br>
<br>
1) If watchAuxiliaryAttributes = false, only "user visible" items
are taken into account (i.e. user/account attributes, account
associations, administrativeStatus and a few others).<br>
2) If watchAuxiliaryAttributes = true, all these PLUS also
auxiliary attributes are taken into account.<br>
3) If you edit the "bodyExpression", you can hide all the
attributes you don't want to be present in the message.<br>
4) BUT - as you correctly stated - even if you are interested only
in the activation part, the message would be generated for ALL
changes (e.g. modifying phone number)<br>
<br>
Just BTW, Ivan noticed this just today and created a jira issue <a href="https://jira.evolveum.com/browse/MID-2237" target="_blank">MID-2237</a>
for that. (Unfortunately because of all the pressures it is
currently scheduled for 3.3.)<br>
<br>
A workaround would be to filter out (via expressionFilter) all the
changes with attributes that are not relevant for you. <br>
I'm not sure about what midPoint method would be the most
convenient to use. Maybe it does not exist yet.<br>
<br>
But if you confirm that I understand you correctly, and if you
would send here a specific list of attributes to be watched, I
could find/provide such a method.<br>
<br>
BTW, what about ADD and DELETE operations? Should they generate
any messages? <br>
<br>
Best regards,<br>
Pavol<br>
<br>
</div><div><div class="h5">
<blockquote type="cite">
<div dir="ltr">
<div>Thanks for the clarification,</div>
<div><br>
</div>
So is it on the modify operation I am assuming. Wouldn't that
send a notification for every modify like phone or department, I
just really want the activation part of it, the enable/disable
and if any of the other auxiliaries are changed. I would use a
body expression to specify the message so that the un-needed
items are not present, something like this but wouldn't it send
for every modify like stated above?
<div><br>
</div>
<div>
<div> <handler></div>
<div> <expressionFilter></div>
<div> <script></div>
<div><span style="white-space:pre-wrap"> </span><code></div>
<div><span style="white-space:pre-wrap"> </span>event.isUserRelated()
&&</div>
<div><span style="white-space:pre-wrap"> </span>requestee.getCostCenter()
== 'ASHIT'</div>
<div> </code></div>
<div> </script></div>
<div> </expressionFilter></div>
<div> <simpleUserNotifier></div>
<div> <name>Account Modified</name></div>
<div> <operation>modify</operation></div>
<div> <status>success</status></div>
<div> <recipientExpression></div>
<div>
<div> <script></div>
<div> <code></div>
<div>
basic.getExtensionPropertyValue(requestee, '<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>',
'otherMailbox') </code></div>
<div> </script></div>
</div>
<div> </recipientExpression></div>
<div> <<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px;white-space:pre-wrap">watchAuxiliaryAttributes>true</</span><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px;white-space:pre-wrap">watchAuxiliaryAttributes></span></div>
<div> <subjectExpression></div>
<div> <script></div>
<div> <code>"Your Account has been
modified"</code></div>
<div> </script></div>
<div> </subjectExpression></div>
<div> <bodyExpression></div>
<div> <script></div>
<div> <code></div>
<div> "Some message to the
student/faculty or staff" +</div>
</div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b style="color:rgb(204,0,0);font-family:monospace;font-size:9px"> </b></div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Feb 27, 2015 at 4:39 AM, Pavol
Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Jason,<br>
<br>
activation/administrativeStatus is among attributes that
are "watched" by default.<br>
<br>
So, if you change it, you'll get a notification - like
this:<br>
<br>
<small><tt>============================================
Fri Feb 27 11:30:45 CET 2015</tt><tt><br>
</tt><tt>Message{to='[<a href="mailto:aaa@aaa.sk" target="_blank">aaa@aaa.sk</a>]',
subject='Account modification notification',
contentType='null', body='Notification about
account-related operation</tt><tt><br>
</tt><tt><br>
</tt><tt>User: Boss1 (boss1, oid
75f2806d-e31b-40c9-8133-85ed4d9e6252)</tt><tt><br>
</tt><tt>Notification created on: Fri Feb 27 11:30:45
CET 2015</tt><tt><br>
</tt><tt><br>
</tt><tt>Resource: Localhost CSVfile (oid
ef2bc95b-76e0-48e2-86d6-3d4f02d3fafe)</tt><tt><br>
</tt><tt>Account: boss1</tt><tt><br>
</tt><tt><br>
</tt><tt>The account has been successfully modified on
the resource. Modified attributes are:</tt><tt><br>
</tt><tt> - Activation/Administrative Status:</tt><tt><br>
</tt><tt> - REPLACE: DISABLED</tt><tt><br>
</tt><tt><br>
</tt><tt>'}</tt><tt><br>
</tt><tt><br>
</tt></small>Actually, you can use
watchAuxiliaryAttributes, but this would lead to
providing unimportant messages and/or attributes in
them. For example, when I enabled it, like this:<br>
<br>
<tt><small> <notificationConfiguration><br>
<handler><br>
<simpleResourceObjectNotifier><br>
<recipientExpression><br>
<value><a href="mailto:aaa@aaa.sk" target="_blank">aaa@aaa.sk</a></value><br>
</recipientExpression><br>
<font color="#cc0000"><b>
<watchAuxiliaryAttributes>true</watchAuxiliaryAttributes></b></font><br>
<transport>mail</transport><br>
</simpleResourceObjectNotifier><br>
</handler><br>
<mail><br>
<debug>false</debug><br>
<redirectToFile>notifications.txt</redirectToFile><br>
</mail><br>
</notificationConfiguration><br>
</small></tt><br>
I'll get the following notification after re-enabling
the account again:<br>
<br>
<small><tt>============================================
Fri Feb 27 11:31:40 CET 2015</tt><tt><br>
</tt><tt>Message{to='[<a href="mailto:aaa@aaa.sk" target="_blank">aaa@aaa.sk</a>]',
subject='Account modification notification',
contentType='null', body='Notification about
account-related operation</tt><tt><br>
</tt><tt><br>
</tt><tt>User: Boss1 (boss1, oid
75f2806d-e31b-40c9-8133-85ed4d9e6252)</tt><tt><br>
</tt><tt>Notification created on: Fri Feb 27 11:31:40
CET 2015</tt><tt><br>
</tt><tt><br>
</tt><tt>Resource: Localhost CSVfile (oid
ef2bc95b-76e0-48e2-86d6-3d4f02d3fafe)</tt><tt><br>
</tt><tt>Account: boss1</tt><tt><br>
</tt><tt><br>
</tt><tt>The account has been successfully modified on
the resource. Modified attributes are:</tt><tt><br>
</tt><tt> - Activation/Administrative Status:</tt><tt><br>
</tt><tt> - REPLACE: ENABLED</tt><tt><br>
</tt><tt> - Activation/enableTimestamp:</tt><tt><br>
</tt><tt> - REPLACE: 27.2.2015 11:31:40</tt><tt><br>
</tt><tt> - Metadata/modifyChannel:</tt><tt><br>
</tt><tt> - REPLACE: <a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></tt><tt><br>
</tt><tt> - Metadata/modifyTimestamp:</tt><tt><br>
</tt><tt> - REPLACE: 27.2.2015 11:31:40</tt><tt><br>
</tt><tt> - Metadata/modifierRef:</tt><tt><br>
</tt><tt> - REPLACE: administrator (user)</tt><tt><br>
</tt><tt><br>
</tt><tt>'}</tt><tt><br>
</tt></small><br>
Just BTW, these attributes are currently considered
auxiliary:<br>
<br>
- metadata container<br>
- activation/validityStatus<br>
- activation/validityChangeTimestamp<br>
- activation/effectiveStatus (this is not the same as
administrativeStatus!)<br>
- activation/disableTimestamp<br>
- activation/enableTimestamp<br>
- activation/archiveTimestamp<br>
- iteration<br>
- iterationToken<br>
- linkRef (for focal objects)<br>
- trigger<br>
<br>
And these are considered synchronization-related
(notifications for them are also disabled by default):<br>
<br>
- synchronizationSituation<br>
- synchronizationSituationDescription<br>
- synchronizationTimestamp<br>
- fullSynchronizationTimestamp<br>
<br>
Hope this helps,<br>
Pavol
<div>
<div><br>
<br>
On 26. 2. 2015 15:36, Jason Everling wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">
<pre><font color="#333333" face="Arial, sans-serif"><span style="font-size:14px;line-height:20px;white-space:normal">Would you happen to have a sample or provide one for use the </span></font><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">watchAuxiliaryAttributes in a notification?</span></pre>
<pre><font color="#333333" face="Arial, sans-serif"><span style="font-size:14px;line-height:20px;white-space:normal">What I was mainly looking for is a way to send a notification when the activation/administrativeStatus has changed for an account. I have my other notifiers for account adds but this would make a wonderful addition so when withdrawn students return they would get a notification letting them know their accounts have been re-enabled.</span></font></pre>
<pre>JASON</pre>
</div>
<br>
</div>
</div>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is
proprietary and confidential; intended for only the
recipient(s) named above and may contain information
that is privileged. You should not retain, copy or use
this e-mail or any attachments for any purpose, or
disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail
are those of the author and do not represent those of
the Baptist School of Health Professions. If you have
received this e-mail in error, or are not the named
recipient(s), you are hereby notified that any review,
dissemination, distribution or copying of this
communication is prohibited by the sender and to do so
might constitute a violation of the Electronic
Communications Privacy Act, 18 U.S.C. section
2510-2521. Please immediately notify the sender and
delete this e-mail and any attachments from your
computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div></div></div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
<br>
<font size="2"><br><br>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </font><br>