Merge branch 'master' of github.com:Evolveum/midpoint

samples/tasks/bulk-actions/modify-selected-users-unassign-role.xml

@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2010-2015 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<!-- Unassigns End User role from a set of users. NOTE the assignment being removed must exactly match the one mentioned in itemDelta
+     - i.e. if a user has an assignment with e.g. validFrom or validTo specified, it will NOT get unassigned.
+
+     An action that would remove all assignments of a given role/org regardless of "details" in planned (MID-2249) -->
+
+<objects xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+         xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+         xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+         xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+
+    <task>
+        <name>Unassign "End User" role from users starting with 'a'</name>
+		<extension>
+            <scext:executeScript xmlns:scext="http://midpoint.evolveum.com/xml/ns/public/model/scripting/extension-3">
+                <s:search xmlns:s="http://midpoint.evolveum.com/xml/ns/public/model/scripting-3">
+                    <s:type>c:UserType</s:type>
+                    <s:searchFilter>
+                        <q:substring>
+                            <q:matching>polyStringNorm</q:matching>
+                            <q:path>c:name</q:path>
+                            <q:value>a</q:value>
+                            <q:anchorStart>true</q:anchorStart>
+                        </q:substring>
+                    </s:searchFilter>
+                    <s:action>
+                        <s:type>modify</s:type>
+                        <s:parameter>
+                            <s:name>delta</s:name>
+                            <c:value xsi:type="t:ObjectDeltaType">
+                                <t:changeType>modify</t:changeType>     <!-- this is the default, can be omitted -->
+                                <!-- objectType and oid are taken from the object being modified -->
+                                <t:itemDelta>
+                                    <t:modificationType>delete</t:modificationType>
+                                    <t:path>c:assignment</t:path>
+                                    <t:value xsi:type="c:AssignmentType">
+                                        <targetRef oid="00000000-0000-0000-0000-000000000008" type="c:RoleType"/>
+                                    </t:value>
+                                </t:itemDelta>
+                            </c:value>
+                        </s:parameter>
+                    </s:action>
+                </s:search>
+            </scext:executeScript>
+		</extension>
+        <ownerRef oid="00000000-0000-0000-0000-000000000002"/>
+        <executionStatus>runnable</executionStatus>
+
+        <category>BulkActions</category>
+        <handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/scripting/handler-3</handlerUri>
+        <recurrence>single</recurrence>
+    </task>
+
+</objects>