<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello Jason,<br>
<br>
I quickly hacked a method event.isRelatedToItem(itemPath) that
tells you if the event is somehow related to an item with a given
path.<br>
<br>
It is to be used in the following way:<br>
<br>
<tt> <simpleResourceObjectNotifier></tt><tt><br>
</tt><tt> <expressionFilter></tt><tt><br>
</tt><tt> <script></tt><tt><br>
</tt><tt> <code></tt><tt><br>
</tt><tt><font color="#cc0000"><b>
event.isRelatedToItem(new
com.evolveum.midpoint.prism.path.ItemPath("activation",
"administrativeStatus"))</b></font></tt><tt><br>
</tt><tt> </code></tt><tt><br>
</tt><tt> </script></tt><tt><br>
</tt><tt> </expressionFilter></tt><tt><br>
</tt><tt> ....</tt><tt><br>
</tt><tt> </simpleResourceObjectNotifier></tt><tt><br>
</tt><br>
You can use it with <simpleUserNotifier> as well.<br>
<br>
It seems to work, but I haven't had time to test it thoroughly. I
leave this to you. :-)<br>
<br>
Generally, it is experimental implementation. Known situations
where it does not work is deletion of values: for example, if you
delete an object, this method does not know if there was
activation/administrativeStatus set in that object or not (so it
returns false). In a similar way, if there was a REPLACE delta,
the method knows nothing about the values that were deleted by
execution of such delta. Or, in a DELETE delta where the whole
container (activation in this case) is deleted. Nevertheless, in
your specific case, none of these should occur. :-)<br>
<br>
Hope this helps,<br>
Pavol<br>
<br>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</div>
<blockquote
cite="mid:CAFkZXY7V_AqFuFJysRRzqvSgPMHCu8FOHXMqHE7KAnso+p9ZgQ@mail.gmail.com"
type="cite">
<div dir="ltr">I was actually going over all my user attributes
and after looking at them and thinking about how often they
would be changed and if they would ever be changed I am thinking
I would only need to filter out phone number, the other
attributes should never really change.
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Feb 27, 2015 at 10:12 AM, Jason
Everling <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Yeah I basically only want to send a
notification when their account is disabled or enabled, I
already have notifications working for "ADD" new account
notifications and it works fine. We do not delete
accounts, once a username has been issued it will never be
used again except by that same person if he/she returns to
the school even if it is years down the road. I will
probably create a generic delete notification sent to us
admins just in-case someone deletes something.
<div><br>
</div>
<div>So the workaround would probably work, I would
basically need to filter everything that is not relevant
for the administrative status modifications. If you
could write 1 filter for an attribute I could write the
rest like if I wanted to filter out phone number
changes.</div>
<div><br>
</div>
<div>This notification is only going to be for when the
student/faculty/ or staff's account is disabled or
enabled. So when a student/faculty/staff leaves us they
would get a notification letting them at least know that
their account was disabled and why they are unable to
login. Same for when they return, they would get an
email with a custom body letting them know their
accounts are re-enabled.</div>
<span class="HOEnZb"><font color="#888888">
<div><br>
</div>
<div>JASON</div>
</font></span></div>
<div class="HOEnZb">
<div class="h5">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Feb 27, 2015 at 9:52
AM, Pavol Mederly <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mederly@evolveum.com"
target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Jason,<br>
<br>
I'm not quite sure I understand you correctly.
But these things are clear:<br>
<br>
1) If watchAuxiliaryAttributes = false, only
"user visible" items are taken into account
(i.e. user/account attributes, account
associations, administrativeStatus and a few
others).<br>
2) If watchAuxiliaryAttributes = true, all
these PLUS also auxiliary attributes are taken
into account.<br>
3) If you edit the "bodyExpression", you can
hide all the attributes you don't want to be
present in the message.<br>
4) BUT - as you correctly stated - even if you
are interested only in the activation part,
the message would be generated for ALL changes
(e.g. modifying phone number)<br>
<br>
Just BTW, Ivan noticed this just today and
created a jira issue <a
moz-do-not-send="true"
href="https://jira.evolveum.com/browse/MID-2237"
target="_blank">MID-2237</a> for that.
(Unfortunately because of all the pressures it
is currently scheduled for 3.3.)<br>
<br>
A workaround would be to filter out (via
expressionFilter) all the changes with
attributes that are not relevant for you. <br>
I'm not sure about what midPoint method would
be the most convenient to use. Maybe it does
not exist yet.<br>
<br>
But if you confirm that I understand you
correctly, and if you would send here a
specific list of attributes to be watched, I
could find/provide such a method.<br>
<br>
BTW, what about ADD and DELETE operations?
Should they generate any messages? <br>
<br>
Best regards,<br>
Pavol<br>
<br>
</div>
<div>
<div>
<blockquote type="cite">
<div dir="ltr">
<div>Thanks for the clarification,</div>
<div><br>
</div>
So is it on the modify operation I am
assuming. Wouldn't that send a
notification for every modify like phone
or department, I just really want the
activation part of it, the
enable/disable and if any of the other
auxiliaries are changed. I would use a
body expression to specify the message
so that the un-needed items are not
present, something like this but
wouldn't it send for every modify like
stated above?
<div><br>
</div>
<div>
<div> <handler></div>
<div> <expressionFilter></div>
<div> <script></div>
<div><span
style="white-space:pre-wrap"> </span><code></div>
<div><span
style="white-space:pre-wrap"> </span>event.isUserRelated()
&&</div>
<div><span
style="white-space:pre-wrap"> </span>requestee.getCostCenter()
== 'ASHIT'</div>
<div> </code></div>
<div> </script></div>
<div> </expressionFilter></div>
<div>
<simpleUserNotifier></div>
<div> <name>Account
Modified</name></div>
<div>
<operation>modify</operation></div>
<div>
<status>success</status></div>
<div>
<recipientExpression></div>
<div>
<div> <script></div>
<div>
<code></div>
<div>
basic.getExtensionPropertyValue(requestee,
'<a moz-do-not-send="true"
href="http://www.bshp.edu/xml/ns/public/bshp"
target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>',
'otherMailbox')
</code></div>
<div> </script></div>
</div>
<div>
</recipientExpression></div>
<div> <<span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px;white-space:pre-wrap">watchAuxiliaryAttributes>true</</span><span
style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px;white-space:pre-wrap">watchAuxiliaryAttributes></span></div>
<div>
<subjectExpression></div>
<div> <script></div>
<div>
<code>"Your Account has been
modified"</code></div>
<div> </script></div>
<div>
</subjectExpression></div>
<div>
<bodyExpression></div>
<div> <script></div>
<div> <code></div>
<div> "Some
message to the student/faculty or
staff" +</div>
</div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"><br>
</b></div>
<div><b
style="color:rgb(204,0,0);font-family:monospace;font-size:9px"> </b></div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Feb 27,
2015 at 4:39 AM, Pavol Mederly <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mederly@evolveum.com"
target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div bgcolor="#FFFFFF"
text="#000000">
<div>Hello Jason,<br>
<br>
activation/administrativeStatus
is among attributes that are
"watched" by default.<br>
<br>
So, if you change it, you'll get
a notification - like this:<br>
<br>
<small><tt>============================================
Fri Feb 27 11:30:45 CET 2015</tt><tt><br>
</tt><tt>Message{to='[<a
moz-do-not-send="true"
href="mailto:aaa@aaa.sk"
target="_blank">aaa@aaa.sk</a>]',
subject='Account
modification notification',
contentType='null',
body='Notification about
account-related operation</tt><tt><br>
</tt><tt><br>
</tt><tt>User: Boss1 (boss1,
oid
75f2806d-e31b-40c9-8133-85ed4d9e6252)</tt><tt><br>
</tt><tt>Notification created
on: Fri Feb 27 11:30:45 CET
2015</tt><tt><br>
</tt><tt><br>
</tt><tt>Resource: Localhost
CSVfile (oid
ef2bc95b-76e0-48e2-86d6-3d4f02d3fafe)</tt><tt><br>
</tt><tt>Account: boss1</tt><tt><br>
</tt><tt><br>
</tt><tt>The account has been
successfully modified on the
resource. Modified
attributes are:</tt><tt><br>
</tt><tt> -
Activation/Administrative
Status:</tt><tt><br>
</tt><tt> - REPLACE:
DISABLED</tt><tt><br>
</tt><tt><br>
</tt><tt>'}</tt><tt><br>
</tt><tt><br>
</tt></small>Actually, you can
use watchAuxiliaryAttributes,
but this would lead to providing
unimportant messages and/or
attributes in them. For example,
when I enabled it, like this:<br>
<br>
<tt><small>
<notificationConfiguration><br>
<handler><br>
<simpleResourceObjectNotifier><br>
<recipientExpression><br>
<value><a
moz-do-not-send="true"
href="mailto:aaa@aaa.sk"
target="_blank">aaa@aaa.sk</a></value><br>
</recipientExpression><br>
<font color="#cc0000"><b>
<watchAuxiliaryAttributes>true</watchAuxiliaryAttributes></b></font><br>
<transport>mail</transport><br>
</simpleResourceObjectNotifier><br>
</handler><br>
<mail><br>
<debug>false</debug><br>
<redirectToFile>notifications.txt</redirectToFile><br>
</mail><br>
</notificationConfiguration><br>
</small></tt><br>
I'll get the following
notification after re-enabling
the account again:<br>
<br>
<small><tt>============================================
Fri Feb 27 11:31:40 CET 2015</tt><tt><br>
</tt><tt>Message{to='[<a
moz-do-not-send="true"
href="mailto:aaa@aaa.sk"
target="_blank">aaa@aaa.sk</a>]',
subject='Account
modification notification',
contentType='null',
body='Notification about
account-related operation</tt><tt><br>
</tt><tt><br>
</tt><tt>User: Boss1 (boss1,
oid
75f2806d-e31b-40c9-8133-85ed4d9e6252)</tt><tt><br>
</tt><tt>Notification created
on: Fri Feb 27 11:31:40 CET
2015</tt><tt><br>
</tt><tt><br>
</tt><tt>Resource: Localhost
CSVfile (oid
ef2bc95b-76e0-48e2-86d6-3d4f02d3fafe)</tt><tt><br>
</tt><tt>Account: boss1</tt><tt><br>
</tt><tt><br>
</tt><tt>The account has been
successfully modified on the
resource. Modified
attributes are:</tt><tt><br>
</tt><tt> -
Activation/Administrative
Status:</tt><tt><br>
</tt><tt> - REPLACE: ENABLED</tt><tt><br>
</tt><tt> -
Activation/enableTimestamp:</tt><tt><br>
</tt><tt> - REPLACE:
27.2.2015 11:31:40</tt><tt><br>
</tt><tt> -
Metadata/modifyChannel:</tt><tt><br>
</tt><tt> - REPLACE: <a
moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user"
target="_blank">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></tt><tt><br>
</tt><tt> -
Metadata/modifyTimestamp:</tt><tt><br>
</tt><tt> - REPLACE:
27.2.2015 11:31:40</tt><tt><br>
</tt><tt> -
Metadata/modifierRef:</tt><tt><br>
</tt><tt> - REPLACE:
administrator (user)</tt><tt><br>
</tt><tt><br>
</tt><tt>'}</tt><tt><br>
</tt></small><br>
Just BTW, these attributes are
currently considered auxiliary:<br>
<br>
- metadata container<br>
- activation/validityStatus<br>
-
activation/validityChangeTimestamp<br>
- activation/effectiveStatus
(this is not the same as
administrativeStatus!)<br>
- activation/disableTimestamp<br>
- activation/enableTimestamp<br>
- activation/archiveTimestamp<br>
- iteration<br>
- iterationToken<br>
- linkRef (for focal objects)<br>
- trigger<br>
<br>
And these are considered
synchronization-related
(notifications for them are also
disabled by default):<br>
<br>
- synchronizationSituation<br>
-
synchronizationSituationDescription<br>
- synchronizationTimestamp<br>
- fullSynchronizationTimestamp<br>
<br>
Hope this helps,<br>
Pavol
<div>
<div><br>
<br>
On 26. 2. 2015 15:36, Jason
Everling wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">
<pre><font color="#333333" face="Arial, sans-serif"><span style="font-size:14px;line-height:20px;white-space:normal">Would you happen to have a sample or provide one for use the </span></font><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">watchAuxiliaryAttributes in a notification?</span></pre>
<pre><font color="#333333" face="Arial, sans-serif"><span style="font-size:14px;line-height:20px;white-space:normal">What I was mainly looking for is a way to send a notification when the activation/administrativeStatus has changed for an account. I have my other notifiers for account adds but this would make a wonderful addition so when withdrawn students return they would get a notification letting them know their accounts have been re-enabled.</span></font></pre>
<pre>JASON</pre>
</div>
<br>
</div>
</div>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any
attachments is proprietary and
confidential; intended for
only the recipient(s) named
above and may contain
information that is
privileged. You should not
retain, copy or use this
e-mail or any attachments for
any purpose, or disclose all
or any part of the contents to
any person. Any views or
opinions expressed in this
e-mail are those of the author
and do not represent those of
the Baptist School of Health
Professions. If you have
received this e-mail in error,
or are not the named
recipient(s), you are hereby
notified that any review,
dissemination, distribution or
copying of this communication
is prohibited by the sender
and to do so might constitute
a violation of the Electronic
Communications Privacy Act, 18
U.S.C. section 2510-2521.
Please immediately notify the
sender and delete this e-mail
and any attachments from your
computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any
attachments is proprietary and
confidential; intended for only the
recipient(s) named above and may contain
information that is privileged. You
should not retain, copy or use this
e-mail or any attachments for any
purpose, or disclose all or any part of
the contents to any person. Any views or
opinions expressed in this e-mail are
those of the author and do not represent
those of the Baptist School of Health
Professions. If you have received this
e-mail in error, or are not the named
recipient(s), you are hereby notified
that any review, dissemination,
distribution or copying of this
communication is prohibited by the
sender and to do so might constitute a
violation of the Electronic
Communications Privacy Act, 18 U.S.C.
section 2510-2521. Please immediately
notify the sender and delete this e-mail
and any attachments from your computer.
</font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<font size="2"><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>