<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello Jens,<br>
<br>
I'm afraid that getting the entire set of valid roles defined for
a particular user (like "Show all assignments" in GUI) is a bit
trickier than simply traversing all role inducements.<br>
<br>
The reason is that some assignments or inducements can be
conditional; i.e. you would have to evaluate these conditions to
see whether they apply or not.<br>
<br>
Fortunately, there is a method called previewChanges (in
ModelController) that is used to do that in GUI and that could be
published via REST/WS interface. However, I don't know if/when
something like that is planned. (<a
href="https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature">https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature</a>).<br>
<br>
Best regards,<br>
Pavol<br>
<br>
PS: As a partial workaround, I originally thought about using the
"
<meta http-equiv="content-type" content="text/html; charset=utf-8">
resolve" option in GetOperationOptions structure. However, this is
not recursive and moreover, seems to be not working for
multi-segment paths, like assignment/targetRef (<a
href="https://jira.evolveum.com/browse/MID-2435">MID-2435</a>).<br>
<br>
<br>
On 8. 7. 2015 14:18, Jens Breitenstein wrote:<br>
</div>
<blockquote cite="mid:559D150B.9090501@j-b-s.de" type="cite">Hi
midpoint experts,
<br>
<br>
we are fairly new to midpoint but we already have a running
instance now, we added some organisational data and added users
and roles using the admin interface.
<br>
While investigating the REST connector we are now able to retrieve
all information for a particular user, but it's somehow cumbersome
to "manually" parse / traverse all parentOrgs, collecting all
single roles and again traversing all role inducements to gather
the overall role set.
<br>
<br>
Is there any chance to retrieve the entire set of valid roles
defined for a particular user in "one go" without executing
multiple REST calls?
<br>
<br>
<br>
Thanks in advance
<br>
<br>
Jens
<br>
<br>
<br>
_______________________________________________
<br>
midPoint mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
<br>
</blockquote>
<br>
</body>
</html>