Re: [Unity-idm-discuss] remove elements from groups attribute

[Sander A. <sa....@fz...>]

Hi Krzysztof,

thanks a lot. I was able to remove internal groups from output.

Best regards,
Sander

Am Montag, den 03.04.2017, 20:32 +0200 schrieb Krzysztof Benedyczak:
> Hi,
> 
> W dniu 03.04.2017 o 10:59, Sander Apweiler pisze:
> > Hi Krzysztof,
> > 
> > We have some unity subgroups fro internal usage like enquiry forms.
> > Those groups should not provided to SPs. Is is possible to filter
> > elements from groups attribute?
> > 
> 
> Easy & typical way would be to use subGroups property of the output 
> profile to fill the produced groups attribute. If this is not enough
> and 
> you need to perform more fancy filtering, then you can do basically 
> anything with MVEL.
> 
> For instance something like this (not much tested) should produce a
> list 
> of groups starting with '/foo/':
> 
> ($ in groups if $.startsWith('/foo/'))
> 
> and use this as your membership attribute value.
> 
> See MVEL docs for more examples. There is also MVEL shell available 
> (java -jar mvel-....jar) for easy testing.
> 
> Best
> Krzysztof
-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
-----------------------------------------------------------------------
-----------------------------------------------------------------------