<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Pavol, <br>
<br>
thanks for the fast response. I am validating the activation section
on my own, but I didn't see any conditional settings in the Admin-UI
(yet :-)<br>
Would be nice if you can give me a hint what exactly you have in
mind. Do you think it's worth to try out the java connector to
gather the info I need?<br>
<br>
<br>
CU<br>
<br>
Jens<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">Am 08/07/15 um 15:15 schrieb Pavol
Mederly:<br>
</div>
<blockquote cite="mid:559D2289.3020600@evolveum.com" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<div class="moz-cite-prefix">Hello Jens,<br>
<br>
I'm afraid that getting the entire set of valid roles defined
for a particular user (like "Show all assignments" in GUI) is a
bit trickier than simply traversing all role inducements.<br>
<br>
The reason is that some assignments or inducements can be
conditional; i.e. you would have to evaluate these conditions to
see whether they apply or not.<br>
<br>
Fortunately, there is a method called previewChanges (in
ModelController) that is used to do that in GUI and that could
be published via REST/WS interface. However, I don't know
if/when something like that is planned. (<a
moz-do-not-send="true"
href="https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature">https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature</a>).<br>
<br>
Best regards,<br>
Pavol<br>
<br>
PS: As a partial workaround, I originally thought about using
the "
<meta http-equiv="content-type" content="text/html;
charset=utf-8">
resolve" option in GetOperationOptions structure. However, this
is not recursive and moreover, seems to be not working for
multi-segment paths, like assignment/targetRef (<a
moz-do-not-send="true"
href="https://jira.evolveum.com/browse/MID-2435">MID-2435</a>).<br>
<br>
<br>
On 8. 7. 2015 14:18, Jens Breitenstein wrote:<br>
</div>
<blockquote cite="mid:559D150B.9090501@j-b-s.de" type="cite">Hi
midpoint experts, <br>
<br>
we are fairly new to midpoint but we already have a running
instance now, we added some organisational data and added users
and roles using the admin interface. <br>
While investigating the REST connector we are now able to
retrieve all information for a particular user, but it's somehow
cumbersome to "manually" parse / traverse all parentOrgs,
collecting all single roles and again traversing all role
inducements to gather the overall role set. <br>
<br>
Is there any chance to retrieve the entire set of valid roles
defined for a particular user in "one go" without executing
multiple REST calls? <br>
<br>
<br>
Thanks in advance <br>
<br>
Jens <br>
<br>
<br>
_______________________________________________ <br>
midPoint mailing list <br>
<a moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
<br>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>