<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head><body text="#000000" bgcolor="#FFFFFF">Thank you Jason!!<br>
<br>
<span>Jason Everling wrote on 12/6/19 2:17 PM:</span><br>
<blockquote type="cite"
cite="mid:5deab775.1c69fb81.838f8.b56a@mx.google.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Ubuntu;
panose-1:2 11 5 4 3 6 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.DefaultFontHxMailStyle
{mso-style-name:"Default Font HxMail Style";
font-family:"Ubuntu",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1"><p class="MsoNormal"><span
class="DefaultFontHxMailStyle">Within the role definition, this will
update the user attribute with the value defined, when roles I removed
the value is also removed. Its not related to any resource attribute<o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle"><br>
<inducement><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle"> <focusMappings><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
<mapping><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle">
<strength>strong</strength><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
<expression><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle">
<value>FACULTY</value><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
</expression><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle"> <target><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
<c:path
xmlns:bshp=<a class="moz-txt-link-rfc2396E" href="http://midpoint.bshp.edu/xml/ns/bshp">"http://midpoint.bshp.edu/xml/ns/bshp"</a>>$focus/extension/bshp:bshpPersonAffiliation</c:path><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
</target><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle"> </mapping><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
</focusMappings><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle"> <activation><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
<administrativeStatus>enabled</administrativeStatus><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
</activation><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle">
<focusType>c:UserType</focusType><o:p></o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle">
</inducement><o:p></o:p></span></p><p class="MsoNormal"><span
class="DefaultFontHxMailStyle"><o:p> </o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p><div
style="mso-element:para-border-div;border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"
style="border:none;padding:0in"><b>From: </b><a
href="mailto:bhotrock@gmail.com" moz-do-not-send="true">Brad Firestone</a><br><b>Sent:
</b>Friday, December 6, 2019 12:50 PM<br><b>To: </b><a
href="mailto:midpoint@lists.evolveum.com" moz-do-not-send="true">midPoint
General Discussion</a><br><b>Subject: </b>[midPoint] Set midPoint User
attribute when Role assigned</p></div><p class="MsoNormal"><span
class="DefaultFontHxMailStyle"><o:p> </o:p></span></p><p
class="MsoNormal">Hi All,</p><p class="MsoNormal"><o:p> </o:p></p><p
class="MsoNormal">I would like to set an attribute value for a midPoint
User when they </p><p class="MsoNormal">have been assigned a given
role. This attribute value will not be </p><p class="MsoNormal">synced
to any resource. I just want to be able to display it in the </p><p
class="MsoNormal">midPoint GUI. I am using the organizationalUnit
attribute since it's </p><p class="MsoNormal">multi-valued.</p><p
class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">My reason for
doing this is that I've created "Departmental User </p><p
class="MsoNormal">Managers". These people can create new Users, edit
existing Users and </p><p class="MsoNormal">(un)assign Roles that
"belong" to their department. (I'm using subtype </p><p
class="MsoNormal">to define role ownership.) They can only see their
department's Roles </p><p class="MsoNormal">in the GUI, which serves two
purposes: It restricts which Roles they </p><p class="MsoNormal">can
(un)assign, and it hides a large number of Roles which makes things </p><p
class="MsoNormal">quicker and less confusing. Since all Roles are not
visible in the </p><p class="MsoNormal">Roles section, I would like to
use the organizationalUnit attribute </p><p class="MsoNormal">(renamed)
to display ALL roles that a User has. This is helpful to let </p><p
class="MsoNormal">a departmental User Manager see what other Roles (from
other </p><p class="MsoNormal">departments) a certain User has been
assigned.</p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">Ideally,
this attribute value assignment would be part of the Role </p><p
class="MsoNormal">definition. But I can't find a way to do that. It
seems to me all </p><p class="MsoNormal">mapping in Roles is limited to
Resource construction mapping. Is there </p><p class="MsoNormal">a way
to map or construct a midPoint attribute value directly from the Role?</p><p
class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">I could do it
from the User Template, but that means I would have to </p><p
class="MsoNormal">edit the User Template every time I add a new Role. I
also need to </p><p class="MsoNormal">figure out the conditional
structure to evaluate whether a User has a </p><p class="MsoNormal">given
Role assigned.</p><p class="MsoNormal"><o:p> </o:p></p><p
class="MsoNormal">I may be going about this the wrong way and I'm open
to any suggestions </p><p class="MsoNormal">about the best way to do
this. Thanks for any ideas!</p><p class="MsoNormal">Brad</p><p
class="MsoNormal">_______________________________________________</p><p
class="MsoNormal">midPoint mailing list</p><p class="MsoNormal"><a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></p><p
class="MsoNormal"><a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></p><p
class="MsoNormal"><span class="DefaultFontHxMailStyle"><o:p> </o:p></span></p></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body></html>