Hmm, thanks for your reply; this is bad luck for me. I now understand the "Resource Object Management None" on the Database table documentation.
I need to make this UserMembersRule to add all users that have a certain resource to a virtual organization. My problem is that whatever the condition GetUsers() returns all users. The manual and javadoc did not help me much. Do you have an idea how to fix this?
BTW I run IDM version 5.0 SP5.
This is my rule so far:
<Rule authType='UserMembersRule' name='GetEmployees' >
<block trace='true'>
<defvar name='Employees'>
<defvar name='employeeList'>
<list/>
</defvar>
<dolist name='users'>
<invoke name='getUsers' class='com.waveset.ui.FormUtil'>
<ref>context</ref>
<map>
<s>conditions </s>
<list>
<new class='com.waveset.object.AttributeCondition'>
<s>user_resources</s>
<s>contains</s>
<s>NL Employees</s>
</new>
</list>
</map>
</invoke>
<append name='employeeList'>
<concat>
<ref>users</ref>
<s>:NL Employees</s>
</concat>
</append>
</dolist>
<ref>employeeList</ref>
</defvar>
<ref>Employees</ref>
</block>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</Rule>