If a group stem is create somewhere in an "etc" or "ref" foldercreated somewhere and has etc or ref as an extension, add the do_not_provision_to attribute with values of "ad" and "ldap"
...
Create a rule on some ancestor folder:
Text: note: there are two sets of curlies because if you have multiple statements you need to put them in another set of curlies
Code Block |
---|
rule ruleActAsSubjectId GrouperSystem ruleActAsSubjectSourceId g:isa ruleCheckStemScope SUB ruleCheckType groupCreatestemCreate ruleIfConditionEl ${groupName.contains(":etc:".equals(stem.getExtension()) || groupName.contains(":ref:".equals(stem.getExtension())} ruleThenEl ${ { groupstem.getAttributeValueDelegate().assignValueString("etc:pspng:do_not_provision_to", "ldap"); groupstem.getAttributeDelegate().addAttributeByName("etc:pspng:do_not_provision_to").getAttributeAssign().getValueDelegate().assignValueString("ad"); }} ruleValid T |
If I create a group stem in that parent folder in an with "etc" or a "ref" folderas an extension, it will get some attributes
UI example of a single-assign multi-valued attribute (this is NOT what PSPNG does)
...
Code Block |
---|
rule ruleActAsSubjectId GrouperSystem ruleActAsSubjectSourceId g:isa ruleCheckStemScope SUB ruleCheckType groupCreate ruleIfConditionEl ${groupName.contains(":etc:") || groupName.contains(":ref:")} ruleThenEl ${ { groupstem.getAttributeValueDelegate().addValueString("etc:pspng:do_not_provision_to", "ldap"); groupstem.getAttributeValueDelegate().addValueString("etc:pspng:do_not_provision_to", "ad"); } } ruleValid T |
...