Uploaded image for project: 'MidPoint'
  1. MidPoint
  2. MID-1897

Creating user at the same time as assigning organization and role does not create association (does not add to group)

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 3.0 (Newton)
    • 3.0 (Newton)
    • None
    • None
    • git-v2.3devel-2114-gad86e31

    Description

      Assumptions:

      • user template generates user name according to organization where used is assigned
      • user template has mapping for user/name with "<evaluationPhase>afterAssignments</evaluationPhase>" tag
      • DN in OpenDJ depends on organization
      • assigning organization sets user's organization property
      • the role will assign the resource account, where DN depends on organization and also an association for group, which DN depends on user's organizational attribute

      If user is created at the same time as organization is assigned and role is assigned, the following happens:

      • organization is assigned, user/organization attribute is filled with the organization name
      • username is ok (generated by prepending an attribute from assigned organization - fetched via <source>organization</source>)
      • role is assigned - account in OpenDJ is created, icfs:name is ok (depends on organization attribute), but association given byt the same role is NOT added (user will NOT be in group)

      If user is created at the same time as organization is assigned, then saved, and in next step the role is assigned, the OpenDJ account AND association are ok. User IS added to the group.

      I can send my examples/resource/role... privately.

      Attachments

        Issue Links

          Activity

            People

              vix Ivan Noris
              vix Ivan Noris
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: