<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Hi Daniel,<br>
      <br>
      I have fixed this issue right now.<br>
      Thank you for your support. Enjoy your midPoint subscription.<br>
      <br>
      <pre class="moz-signature" cols="72">-- 
Radovan Semancik
Software Architect
evolveum.com</pre>
      <br>
      <br>
      On 06/27/2017 05:03 PM, Ivan Noris wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:200901499.778269.1498575806809.JavaMail.zimbra@evolveum.com">
      <div style="font-family: times new roman, new york, times, serif;
        font-size: 12pt; color: #000000">
        <div>Hi Daniel,<br>
        </div>
        <div><br>
        </div>
        <div>I have just reproduced it with recent 3.6 SNAPSHOT and it
          looks like you've hit a bug. I have created <a
            href="https://jira.evolveum.com/browse/MID-4021"
            moz-do-not-send="true">https://jira.evolveum.com/browse/MID-4021</a>
          - feel free to add to watchers. Also if there is anything
          missing in the issue description feel free to update.<br>
        </div>
        <div><br>
        </div>
        <div>Thank you for reporting!<br>
        </div>
        <div><br>
        </div>
        <div>Best regards,<br>
        </div>
        <div>Ivan<br>
        </div>
        <div><br>
        </div>
        <hr id="zwchr">
        <blockquote style="border-left:2px solid
#1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From:
          </b>"Daniel Sommer" <a class="moz-txt-link-rfc2396E" href="mailto:Daniel.Sommer@itconcepts.net"><Daniel.Sommer@itconcepts.net></a><br>
          <b>To: </b><a class="moz-txt-link-abbreviated" href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><br>
          <b>Sent: </b>Tuesday, June 27, 2017 4:24:57 PM<br>
          <b>Subject: </b>[midPoint] Midpoint Concept What is vs. What
          should be - towards        account entitlements<br>
          <div><br>
          </div>
          <span data-mce-style="font-family: Default Sans
            Serif,Verdana,Arial,Helvetica,sans-serif; font-size: small;"
            style="font-family: Default Sans
            Serif,Verdana,Arial,Helvetica,sans-serif; font-size: small;"
            size="2">Hello,
            <div><br>
            </div>
            <div><br>
            </div>
            <div>we have connected Midpoint to an active directory. It
              has accounts and group entitlements. We are able to set
              accounts to users (and the group to a role).</div>
            <div>We can assign such entitlement to a user by adding a
              role with specific second order inducement. So far, so
              good.</div>
            <div><br>
            </div>
            <div>Now we set the value in the config object to "none": "<span
                style="font-family: "Courier New"; font-size:
                12.8px; font-weight: bold;"><span data-mce-style="color:
                  #008000;" style="color: #008000;">globalAccountSynchronizationSettings/</span></span><span
                style="font-family: "Courier New"; font-size:
                12.8px; font-weight: bold;"><span data-mce-style="color:
                  #008000;" style="color: #008000;">assignmentPolicyEnforcement"</span></span></div>
            <div><span style="font-family: "Courier New";
                font-size: 12.8px; font-weight: bold;"><span
                  data-mce-style="color: #008000;" style="color:
                  #008000;"><br>
                </span></span></div>
            <div><span style="font-size: 12.8px;">If we now remove the
                role for the user again, the accounts (projections) stay
                - as expected. But what gets lost is the entitlement !</span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;">The user is not in a
                group anymore. So what is the problem:</span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;">Does not apply your
                concept of what is and should be to entitlements?</span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;">Is there a place in
                shadows or similar where the (real what is) state is
                saved within midpoint towards account entitlements
                (group memberships)?</span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;">Best regards and thx
                in advance,</span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;"><br>
              </span></div>
            <div><span style="font-size: 12.8px;">Daniel</span></div>
            <div><br>
            </div>
          </span>
          <p><span style="font-family: Arial;"><span style="color:
                rgb(153, 153, 153);">Daniel Sommer <br>
                Office: +49 228 908733 0 </span></span><span
              style="font-family: Arial;"><span style="color: rgb(153,
                153, 153);">| </span></span><span style="font-family:
              Arial;"><span style="color: rgb(153, 153, 153);">Fax: +49
                228 908733 1</span></span><span style="font-family:
              Arial;"><span style="color: rgb(153, 153, 153);"> | Mobil:
                +49 176 162086 79</span></span></p>
          <p><span style="font-family: Arial;"><span style="color:
                rgb(153, 153, 153);">ITConcepts Professional GmbH -  In
                den Dauen 6 - DE 53117 Bonn</span></span></p>
          <p><span style="font-family: Arial;"><span style="color:
                rgb(153, 153, 153);">Website </span></span><span
              style="color: rgb(153, 153, 153);"><a
                href="http://www.itconcepts.net" target="_blank"
                moz-do-not-send="true"><span style="font-family: Arial;">www.itconcepts.net</span></a><br>
              <br>
              <a href="http://www.itconcepts.net/" target="_blank"
                moz-do-not-send="true"><img
                  src="cid:part3.B06E9467.70B44FA5@evolveum.com" alt=""
                  class="" border="0"></a>   <a
                href="http://www.itconcepts.net/index.php/about-cognitum"
                target="_blank" moz-do-not-send="true"><img
                  src="cid:part5.4C7386E4.B2138151@evolveum.com" alt=""
                  class="" border="0"></a><br>
              Besuchen Sie uns auch auf <a
                href="http://www.xing.com/companies/itconceptsprofessionalgmbh/updates"
                target="_blank" moz-do-not-send="true"><img
                  src="cid:part7.657AEC9B.6F0F8919@evolveum.com" alt=""
                  class="" border="0"></a>   <a
                href="http://www.linkedin.com/company/itconcepts"
                target="_blank" moz-do-not-send="true"><img
                  src="cid:part9.E7102689.44943BFD@evolveum.com" alt=""
                  class="" border="0"></a></span>   <a
              href="https://www.facebook.com/ITConcepts-Karriere-274907129252667/"
              target="_blank" moz-do-not-send="true"><img
                style="border-width: 0px; border-style: solid;"
                src="cid:part11.9DDA745F.53037757@evolveum.com" class=""
                height="20" width="20"></a>   <a
              href="https://twitter.com/ITConceptsJobs" target="_blank"
              moz-do-not-send="true"><img style="border-width: 0px;
                border-style: solid;"
                src="cid:part13.5EBAC6B8.CC285D13@evolveum.com" class=""
                height="20" width="20"></a><br data-mce-bogus="1">
          </p>
          <p><span style="display: none;"> </span><span style="color:
              rgb(169, 169, 169);"><span style="font-size: 12px;">Events
                mit ITConcepts</span></span><span style="font-size:
              12px;"><span style="color: rgb(169, 169, 169);"><span
                  data-mce-style="font-family: Arial;"
                  style="font-family: Arial;"><span
                    data-mce-style="font-family: Arial;"
                    style="font-family: Arial;"><span
                      data-mce-style="font-family: Arial;"
                      style="font-family: Arial;"> </span></span></span></span><span
                data-mce-style="color: #a2a2a2; font-family: Arial;"
                style="color: #a2a2a2; font-family: Arial;"
                color="#a2a2a2"><span data-mce-style="color: #a2a2a2;
                  font-family: Arial;" style="color: #a2a2a2;
                  font-family: Arial;" color="#a2a2a2"><span
                    data-mce-style="color: #a2a2a2; font-family: Arial;"
                    style="color: #a2a2a2; font-family: Arial;"
                    color="#a2a2a2"> </span></span></span><span
                data-mce-style="color: #a2a2a2; font-family: Arial;"
                style="color: #a2a2a2; font-family: Arial;"
                color="#a2a2a2"><span data-mce-style="color: #a2a2a2;
                  font-family: Arial;" style="color: #a2a2a2;
                  font-family: Arial;" color="#a2a2a2"><span
                    data-mce-style="color: #a2a2a2; font-family: Arial;"
                    style="color: #a2a2a2; font-family: Arial;"
                    color="#a2a2a2">.</span></span></span></span><br>
            <span style="font-size: 12px;"><span data-mce-style="color:
                #a2a2a2; font-family: Arial;" style="color: #a2a2a2;
                font-family: Arial;" color="#a2a2a2"><span
                  data-mce-style="color: #a2a2a2; font-family: Arial;"
                  style="color: #a2a2a2; font-family: Arial;"
                  color="#a2a2a2"><span data-mce-style="color: #a2a2a2;
                    font-family: Arial;" style="color: #a2a2a2;
                    font-family: Arial;" color="#a2a2a2">29. Juni: IT
                    Security Management & Technology Conference 2017
                    in Hanau. Mehr Infos </span></span></span><a
href="http://www.itconcepts.de/index.php/itconcepts-events/details/72-it-security-conference"
                target="_blank" moz-do-not-send="true"><span
                  data-mce-style="text-decoration: underline;"
                  style="text-decoration: underline;"><span
                    data-mce-style="color: #0000ff; font-family: Arial;"
                    style="color: #0000ff; font-family: Arial;"
                    color="#0000ff"><span data-mce-style="color:
                      #0000ff; font-family: Arial;" style="color:
                      #0000ff; font-family: Arial;" color="#0000ff"><span
                        data-mce-style="color: #0000ff; font-family:
                        Arial;" style="color: #0000ff; font-family:
                        Arial;" color="#0000ff">hier:</span></span></span></span></a><span
                data-mce-style="font-family: Helv;" style="font-family:
                Helv;"><span data-mce-style="font-family: Helv;"
                  style="font-family: Helv;"> </span></span><br>
              <span data-mce-style="color: #a2a2a2; font-family: Arial;"
                style="color: #a2a2a2; font-family: Arial;"
                color="#a2a2a2"><span data-mce-style="color: #a2a2a2;
                  font-family: Arial;" style="color: #a2a2a2;
                  font-family: Arial;" color="#a2a2a2"><span
                    data-mce-style="color: #a2a2a2; font-family: Arial;"
                    style="color: #a2a2a2; font-family: Arial;"
                    color="#a2a2a2">13. Juli: IT Security Management
                    & Technology Conference 2017 in Hamburg. Mehr
                    Infos </span></span></span><a
href="http://www.itconcepts.de/index.php/itconcepts-events/details/75-it-security-conference"
                target="_blank" moz-do-not-send="true"><span
                  data-mce-style="text-decoration: underline;"
                  style="text-decoration: underline;"><span
                    data-mce-style="color: #0000ff; font-family: Arial;"
                    style="color: #0000ff; font-family: Arial;"
                    color="#0000ff"><span data-mce-style="color:
                      #0000ff; font-family: Arial;" style="color:
                      #0000ff; font-family: Arial;" color="#0000ff"><span
                        data-mce-style="color: #0000ff; font-family:
                        Arial;" style="color: #0000ff; font-family:
                        Arial;" color="#0000ff">hier:</span></span></span></span></a><span
                data-mce-style="font-family: Helv;" style="font-family:
                Helv;"><span data-mce-style="font-family: Helv;"
                  style="font-family: Helv;"> </span></span></span></p>
          <p><span style="font-size: x-small;"><span style="font-family:
                Arial;"><span style="color: rgb(153, 153, 153);">ITConcepts
                  Professional GmbH Gf.: Sven Moog, Sitz Bonn, AG Bonn
                  HRB 12947 - Ust-Id Nr: DE211482933<br>
                  ITConcepts Automotive GmbH Gf.: Sven Moog, Sitz
                  Wolfsburg, AG Braunschweig HRB 204188 - Ust-Id Nr:
                  DE223888748<br>
                  ITConcepts Operations GmbH Gf.: Sven Moog, Sitz Bonn,
                  AG Bonn HRB 15454 - St.-Nr: 205/5726/0602</span></span></span></p>
          <p><span style="font-size: x-small;"><span style="font-family:
                Arial;"><span style="color: rgb(153, 153, 153);">Diese
                  E-Mail enthält vertrauliche und/oder rechtlich
                  geschützte Informationen. Wenn Sie nicht der richtige
                  Adressat sind<br>
                  oder diese E-Mail irrtümlich erhalten haben,
                  informieren Sie bitte sofort den Absender und
                  vernichten Sie diese Mail.<br>
                  Das unerlaubte Kopieren sowie die unbefugte Weitergabe
                  dieser E-Mail sind nicht gestattet.</span></span></span></p>
          <p><span style="font-size: x-small;"><span style="font-family:
                Arial;"><span style="color: rgb(153, 153, 153);">This
                  e-mail may contain confidential and/or privileged
                  information. If you are not the intended recipient<br>
                  (or have received this e-mail in error) please notify
                  the sender immediately and destroy this e-mail.</span><br>
                <span style="color: rgb(153, 153, 153);">Any
                  unauthorised copying, disclosure or distribution of
                  the material in this e-mail is strictly forbidden.</span></span></span></p>
          <br>
          _______________________________________________<br>
          midPoint mailing list<br>
          <a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
          <a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
        </blockquote>
        <div><br>
          <br>
        </div>
        <div><br>
        </div>
        <div>-- <br>
        </div>
        <div><span name="x"></span>Ivan Noris<br>
          Senior Identity Engineer<br>
          evolveum.com<span name="x"></span><br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <br>
    <br>
    <pre class="moz-signature" cols="72">
</pre>
  </body>
</html>