This is here for historical purposes.
If a group is created somewhere in an "etc" or "ref" folder, add the do_not_provision_to attribute with values of "ad" and "ldap"
Note, make sure you are not using "smart quotes or dashes". You can disable these in a Mac in Preferences->keyboard-text.
Setup
First off you need GrouperSystem to be able to access the API in rules:
grouper.properties:
# configure some group rules.accessToApiInEl.group = etc:hasAccessToApiInEl
put GrouperSysAdmin in that group:
Example1: UI example of a multi-assign single-valued attribute (this IS what PSPNG does)
Create a rule on some ancestor folder:
Text: note: there are two sets of curlies because if you have multiple statements you need to put them in another set of curlies
rule ruleActAsSubjectId GrouperSystem ruleActAsSubjectSourceId g:isa ruleCheckStemScope SUB ruleCheckType groupCreate ruleIfConditionEl ${groupName.contains(":etc:") || groupName.contains(":ref:")} ruleThenEl ${ { group.getAttributeValueDelegate().assignValueString("etc:pspng:do_not_provision_to", "ldap"); group.getAttributeDelegate().addAttributeByName("etc:pspng:do_not_provision_to").getAttributeAssign().getValueDelegate().assignValueString("ad"); }} ruleValid T
If I create a group in that parent folder in an "etc" or a "ref" folder, it will get some attributes
Example2: UI example of a single-assign multi-valued attribute (this is NOT what PSPNG does)
Create a rule on some ancestor folder:
Text: note: there are two sets of curlies because if you have multiple statements you need to put them in another set of curlies
rule ruleActAsSubjectId GrouperSystem ruleActAsSubjectSourceId g:isa ruleCheckStemScope SUB ruleCheckType groupCreate ruleIfConditionEl ${groupName.contains(":etc:") || groupName.contains(":ref:")} ruleThenEl ${ { group.getAttributeValueDelegate().addValueString("etc:pspng:do_not_provision_to", "ldap"); group.getAttributeValueDelegate().addValueString("etc:pspng:do_not_provision_to", "ad"); } } ruleValid T
If I create a group in that parent folder in an "etc" or a "ref" folder, it will get some attributes