Hi Mikael,
I made a check. I confirm you that there is a bug about dynamic
memberhsip conditions. But I've been experiencing a bit different
behavior: the dynamic membership conditions are voided after assigning
or linking the resource to the group.
I've *not* experienced the viceversa, i.e. your problem and what is
exposed in SYNCOPE-1235.
BTW I've opened [1].
Best regards,
Andrea
[1] https://issues.apache.org/jira/browse/SYNCOPE-1276
Il 12/02/2018 16:24, Mikael Ekblom ha scritto:
Hi,
Issue SYNCOPE-1235
I’m sorry to be a party pooper, but this issue with disappearing
dynamic group memberships happened to us now again when de unassigned
an external resource from a group. Are you sure that it is 100 %
fixed? The scenario was as before: unassign an external resource from
the group-> no more dynamic memberships and the memberships also.
Fortunately, this was for a smaller subproject, but this could
potentially be disastrous for us if people suddenly get unassigned
from groups and the resource assignments also disappears.
This should be a clean 2.0.7-version that I’m testing it on.
Regards,
Mikael
*Mikael Ekblom *
IT-Service manager
Arcada, IT
Jan-Magnus Janssons plats 1,
FIN-00560 Helsingfors,
Finland
TFn: +358 207 699 467
Mobil: +358 207 699 467
*From:*Francesco Chicchiriccò [mailto:[email protected]]
*Sent:* keskiviikko 15. marraskuuta 2017 10.21
*To:* [email protected]
*Subject:* Re: Question regarding resource assignment through groups
Hi Mikael,
bug confirmed:
https://issues.apache.org/jira/browse/SYNCOPE-1235
Thanks for reporting.
Regards.
On 07/11/2017 13:45, Mikael Ekblom wrote:
Hi,
Now I got it reproduced. I created a group arcadaTest and
assigned this group to a resource, resource-testdb within your
test environment. Everything went smooth. After that, I then went
via the logical interface/user interface and performed an unlink
of the assigned resource from the arcadaTest group. When I edited
the group itself after that operation, I noticed that the dynamic
rule was gone.
Maybe I could see some logic to that, but then again maybe not…JI
think that group membership dynamic rules should be preserved even
though we are un-assigning a resource?
Regards,
Mikael
*Mikael Ekblom *
System developer
Arcada, IT
Jan-Magnus Janssons plats 1,
FIN-00560 Helsingfors,
Finland
TFn: +358 207 699 467
Mobil: +358 207 699 467
*From:*Francesco Chicchiriccò [mailto:[email protected]]
*Sent:* torstai 2. marraskuuta 2017 15.26
*To:* [email protected] <mailto:[email protected]>
*Subject:* Re: Question regarding resource assignment through groups
On 01/11/2017 10:34, Mikael Ekblom wrote:
Hi,
We are quite close now to the actual deployment of our
solution based on Syncope. It has been quite a search for the
right implementations.
Hi Mikael, nice to hear that.
I'd recommend to stay in touch with upgrades and ensure to always
run the latest 2.0.X version.
Anyhow, I noticed that if you had assigned an external
resource to a group for provision purposes and then removed
this same resource again from the assigned group, then the
dynamic rules for the group membership were also removed at
the same time. We were quite surprised by this when we saw
very different results between runs and noticed that well,
users were not part of that group anymore and thus not
assigned to the external resource as a consequence of that.
Is this really part of the implementation as a reaction to the
change of assigned external resources?
Could you please summarize with a concrete example? Or, if
possible, attempt to reproduce the problem via
http://syncope-vm.apache.org:9080/syncope-console/
?
Thanks.
Regards.
--
Francesco Chicchiriccò
Tirasa - Open Source Excellence
http://www.tirasa.net/
Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/ <http://home.apache.org/%7Eilgrosso/>
--
Dott. Andrea Patricelli
Tel. +39 3204524292
Developer @ Tirasa S.r.l.
Viale D'Annunzio 267 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net
Apache Syncope PMC Member
