Skip to content

Commit

Permalink
minor formatting fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
virgo47 committed Nov 24, 2021
1 parent 926248f commit f040267
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 6 deletions.
2 changes: 1 addition & 1 deletion docs/expressions/function-libraries/configuration.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -140,7 +140,7 @@ It consists of the name and the value.
Name of the parameter must be the same as it is defined for the function in the function library object.
When you look on the example above showing the usage of the function evaluator and the example of the function library object, you can see that the parameter name _location_ coincide with the name of the parameter _location_ in the function _getLocality_. The value used for the parameter itself is xref:/midpoint/reference/expressions/expressions/[expression]. So you can use each expression evaluator here to get a value for the parameter.
E.g. in the example above the path expression evaluator is used to get the value from user's locality attribute.
So at the end you can interpret the example above like calling the function _getLocality_ from the function _library_ identified by _the oid=c0c010c0-d34d-b33f-f00d-999999999999 _and passing the value of user's locality attribute as a parameter to this function.
So at the end you can interpret the example above like calling the function _getLocality_ from the function _library_ identified by the _oid=c0c010c0-d34d-b33f-f00d-999999999999_ and passing the value of user's locality attribute as a parameter to this function.


=== Invoking function from a script
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ No suffix specified.

|===

Channels for _rest _and_ actuator_ default don't create audit records about session creation or termination.
Channels for _rest_ and _actuator_ default don't create audit records about session creation or termination.
You can turn on it via variable in System Configuration _audit->eventRecording->recordSessionlessAccess_.


Expand Down Expand Up @@ -288,7 +288,7 @@ This module contains next attributes:
| `pattern`
| The filter expression used in the user search.
This is an LDAP search filter (as defined in 'RFC 2254') with optional arguments.
Example (uid={0})
Example: `(uid=\{0})`
| true
| _String_

Expand Down Expand Up @@ -755,7 +755,7 @@ For example 'uid'.
===== AuthenticationModuleSaml2ProviderMetadataType

_AuthenticationModuleSaml2ProviderMetadataType_ represents metadata of provider.
You can choose from one definition for metadata: _metadataUrl_, _xml _and _pathToFile_.
You can choose from one definition for metadata: _metadataUrl_, _xml_ and _pathToFile_.

[%autowidth]
|===
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -182,10 +182,12 @@ Recomputation on membership change (covering situations #2-4 above, at least in
The `alwaysTrue` experimental policy constraint is designed to trigger any time it is evaluated (in the context of object, not an assignment).
So this rule is really always triggered.

And what it does? It takes all targets that match rule assignment (i.e. all tokens in this case) _and _whose membership status changed.
And what it does?
It takes all targets that match rule assignment (i.e. all tokens in this case) _and_ whose membership status changed.
This should cover situations #2, #3, and #4.

*(Temporary) workaround for situation #4:* However, because assignment evaluator skips evaluating assignments when object is deleted, the respective policy rule must be attached to the object in some other way.
*(Temporary) workaround for situation #4:*
However, because assignment evaluator skips evaluating assignments when object is deleted, the respective policy rule must be attached to the object in some other way.

So this global policy rule has to be used:

Expand Down

0 comments on commit f040267

Please sign in to comment.