Search based on Extended Attribute

I have code like the following

<code>

<invoke name='listObjects'>

<ref>context</ref>

<s>User</s>

<map>

<s>conditions</s>

<new class='com.waveset.object.AttributeCondition'>

<s>manager</s>

<s>startsWith</s>

<ref>managerName

</new>

</map>

</code>

<code>manager</code> is an extended attribute. My intention is to list the users having the their manager's name starts with a string. But this does not works. But it works if I change <code>manager</code> to firstname, lastname etc.

In order to get the object what should I do ? I have added it in the queriableattributes, in UserUIConfig object.

Thanks

[855 byte] By [Prakash_Menon] at [2007-11-25 19:20:56]
# 1

I'm sorry this is the code..

<invoke name='listObjects'>

<ref>context</ref>

<s>User</s>

<map>

<s>conditions </s>

<new 'waveset.object.AttributeCondition'>

<s>manager</s>

<s>startsWith</s>

<ref>managerName </ref>

</new>

</map>

</invoke>

Prakash_Menon at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

I got the answer. Actually I've added this attribute in Repository Index also. But I was trying to retrieve the user object that are already present in the repository. But they were not indexed based on the new attribute. its working for the new Users.

Any idea how to reindex the repository objects ?

Prakash_Menon at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3
You need to export and import all users to make new indexes. :( But be aware, you can have only 5 index attributes.
VIXik at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 4
btw. I'm not sure you need the indexing for this.In UserUIConfig, there is couple of other attribute sets, some of them are related to searching. I don't have docs here right now, so I cannot help you more now...
VIXik at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 5
You should add your manager attribute to extended attributes (like you already did) and within the UserUIConfig to the lists of QueryableAttrNames, RepoIndexAttrs and SummaryAttrNames becuase your 'own made IDM attribute' should be queryable..Elger
evanvooren at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 6

Hi

I have a similar problem. When clicking the accounts tab, I want only those user accounts to be listed which has the logged on administrator's name as the manager name in the user accounts.

Please let me know if this is feasible. Whether this can be extended to restrict the same for find users tab also.

What are the changes that I need to make.

Any help would be great.

Thanks

Bushra

nv_bushra at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 7
Do you have the users distributed in several organizations, which have delegated administrators (i.e. managers)?
VIXik at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 8
yes, users r in different organizations. when a manager logs in .. if he is assigned as a controller for the organization, then he will be able to see all the users under this org.. but I want only those users whose manager is the same as the person logged in
nv_bushra at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 9

we've had similar problem. haven't found useful solution in the IDM out-of-the-box, so we've developed our own pages in user interface (http://url/idm/user/) which restricts user list on behalf of the administrator.

maybe there's a way to do this in newer servicepacks... not sure.:(

VIXik at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 10
HI,I need that to be done as a new search criteria meaning that i need a checkbox, then a label with name user type , followed by a dropdown with all the usertype values, how to go about that ?Anyone to guide me on this ?Regards,Siva
k_siva_murugan at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 11

You need to use dynamic organizations. These are rule based orgs. Do an Edit on an organization (Post 5.0 sp2 i think) You will see a drop down box for a rule. This will allow youto create dynamic rules based organizations.

There should be examples on how to do it. Is pretty simple. Inside the rule you will create an ldap query or any other query to bring back a result set of user names on a resource. These users will be mapped to LH users behind the scenes and that grouping will show up when you click the organiztion.

in this way you can query idm to get all users that are in a certain org. In this manner a user can be in x number of orgs.

Good luck. Should be a simple fix for you.

Dana Reed

AegisUSA

Denver, CO

773.412.3782

danareed at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 12
You can also use the LH console and "refresh user". That should reindex all your users without exporting and reimporting them.
Brian.Taylor at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...
# 13

Vixik, do you know how to export/import the user to rebuild the index? I have exported all users to an xml file by lh console with "export -v c:\temp\user.xml User". Anyway, when I tried to import the files, it says "no changes to all users". I don't see any changes on the 5 attributes column in userobj table (I have purposely shuffled the attributes order in RepoIndex).

Is that not the way to do export/import?

steveloh at 2007-7-3 23:36:57 > top of Java-index,Web & Directory Servers,Directory Servers...