Hi, Now when you mention it, you are right! It is when you have a group with an already assigned external resource and link another external resource to the same group that the dynamic membership ruleset is voided.
So the scenario is different. OK, good to hear that you also confirmed the same bug. Mikael Ekblom IT-Service manager Arcada, IT Jan-Magnus Janssons plats 1, FIN-00560 Helsingfors, Finland TFn: +358 207 699 467 Mobil: +358 207 699 467 From: Andrea Patricelli [mailto:[email protected]] Sent: tiistai 13. helmikuuta 2018 16.37 To: [email protected] Subject: Re: Issue SYNCOPE-1235 dynamic group memberships Hi Mikael, I made a check. I confirm you that there is a bug about dynamic memberhsip conditions. But I've been experiencing a bit different behavior: the dynamic membership conditions are voided after assigning or linking the resource to the group. I've not experienced the viceversa, i.e. your problem and what is exposed in SYNCOPE-1235. BTW I've opened [1]. Best regards, Andrea [1] https://issues.apache.org/jira/browse/SYNCOPE-1276 Il 12/02/2018 16:24, Mikael Ekblom ha scritto: Hi, Issue SYNCOPE-1235 I’m sorry to be a party pooper, but this issue with disappearing dynamic group memberships happened to us now again when de unassigned an external resource from a group. Are you sure that it is 100 % fixed? The scenario was as before: unassign an external resource from the group-> no more dynamic memberships and the memberships also. Fortunately, this was for a smaller subproject, but this could potentially be disastrous for us if people suddenly get unassigned from groups and the resource assignments also disappears. This should be a clean 2.0.7-version that I’m testing it on. Regards, Mikael Mikael Ekblom IT-Service manager Arcada, IT Jan-Magnus Janssons plats 1, FIN-00560 Helsingfors, Finland TFn: +358 207 699 467 Mobil: +358 207 699 467 From: Francesco Chicchiriccò [mailto:[email protected]] Sent: keskiviikko 15. marraskuuta 2017 10.21 To: [email protected]<mailto:[email protected]> Subject: Re: Question regarding resource assignment through groups Hi Mikael, bug confirmed: https://issues.apache.org/jira/browse/SYNCOPE-1235 Thanks for reporting. Regards. On 07/11/2017 13:45, Mikael Ekblom wrote: Hi, Now I got it reproduced. I created a group arcadaTest and assigned this group to a resource, resource-testdb within your test environment. Everything went smooth. After that, I then went via the logical interface/user interface and performed an unlink of the assigned resource from the arcadaTest group. When I edited the group itself after that operation, I noticed that the dynamic rule was gone. Maybe I could see some logic to that, but then again maybe not…☺ I think that group membership dynamic rules should be preserved even though we are un-assigning a resource? Regards, Mikael Mikael Ekblom System developer Arcada, IT Jan-Magnus Janssons plats 1, FIN-00560 Helsingfors, Finland TFn: +358 207 699 467 Mobil: +358 207 699 467 From: Francesco Chicchiriccò [mailto:[email protected]] Sent: torstai 2. marraskuuta 2017 15.26 To: [email protected]<mailto:[email protected]> Subject: Re: Question regarding resource assignment through groups On 01/11/2017 10:34, Mikael Ekblom wrote: Hi, We are quite close now to the actual deployment of our solution based on Syncope. It has been quite a search for the right implementations. Hi Mikael, nice to hear that. I'd recommend to stay in touch with upgrades and ensure to always run the latest 2.0.X version. Anyhow, I noticed that if you had assigned an external resource to a group for provision purposes and then removed this same resource again from the assigned group, then the dynamic rules for the group membership were also removed at the same time. We were quite surprised by this when we saw very different results between runs and noticed that well, users were not part of that group anymore and thus not assigned to the external resource as a consequence of that. Is this really part of the implementation as a reaction to the change of assigned external resources? Could you please summarize with a concrete example? Or, if possible, attempt to reproduce the problem via http://syncope-vm.apache.org:9080/syncope-console/ ? Thanks. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/<http://home.apache.org/%7Eilgrosso/> -- Dott. Andrea Patricelli Tel. +39 3204524292 Developer @ Tirasa S.r.l. Viale D'Annunzio 267 - 65127 Pescara Tel +39 0859116307 / FAX +39 0859111173 http://www.tirasa.net Apache Syncope PMC Member
