Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

If a group stem is create somewhere in an "etc" or "ref" foldercreated somewhere and has etc or ref as an extension, add the do_not_provision_to attribute with values of "ad" and "ldap"

...

Create a rule on some ancestor folder:

Image RemovedImage Added

Text:  note: there are two sets of curlies because if you have multiple statements you need to put them in another set of curlies

Code Block
rule
ruleActAsSubjectId       GrouperSystem 
ruleActAsSubjectSourceId g:isa 
ruleCheckStemScope       SUB 
ruleCheckType            groupCreatestemCreate 
ruleIfConditionEl        ${groupName.contains(":etc:".equals(stem.getExtension()) || groupName.contains(":ref:".equals(stem.getExtension())} 
ruleThenEl               ${ { groupstem.getAttributeValueDelegate().assignValueString("etc:pspng:do_not_provision_to", "ldap"); groupstem.getAttributeDelegate().addAttributeByName("etc:pspng:do_not_provision_to").getAttributeAssign().getValueDelegate().assignValueString("ad"); }} 
ruleValid                T 



If I create a group stem in that parent folder in an with "etc" or a "ref" folderas an extension, it will get some attributes

Image RemovedImage Added

Image RemovedImage Added

UI example of a single-assign multi-valued attribute (this is NOT what PSPNG does)

...

Code Block
rule
ruleActAsSubjectId       GrouperSystem 
ruleActAsSubjectSourceId g:isa 
ruleCheckStemScope       SUB 
ruleCheckType            groupCreate 
ruleIfConditionEl        ${groupName.contains(":etc:") || groupName.contains(":ref:")} 
ruleThenEl               ${ { groupstem.getAttributeValueDelegate().addValueString("etc:pspng:do_not_provision_to", "ldap"); groupstem.getAttributeValueDelegate().addValueString("etc:pspng:do_not_provision_to", "ad"); } } 
ruleValid                T 

...