Major Description
The following mapping:
<activation>
<administrativeStatus>
<outbound>
<strength>strong</strength>
<source>
<c:path>assignment</c:path>
</source>
<expression>
<value>enabled</value>
</expression>
<condition>
<script>
<code>
!midpoint.isDirectlyAssigned(user, 'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')
</code>
</script>
</condition>
</outbound>
<outbound>
<strength>strong</strength>
<source>
<c:path>assignment</c:path>
</source>
<expression>
<value>disabled</value>
</expression>
<condition>
<script>
<code>
midpoint.isDirectlyAssigned(user, 'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')
</code>
</script>
</condition>
</outbound>
</administrativeStatus>
</activation>
Works only when "Reconcile" option is selected, not under normal circumstances.
The reason is probably in the code of MappingEvaluationHelper:290 where we require full account in order to apply the change.