OIM 11gR2 - Expression Language and Roles

I assume this question is pretty easy for all you developers out there.
I have already found in the forums the answer if you want to hide the Administration tab on the left hand side of the screen from everyone other than the system administrators:
Set the visible property EL to either
#{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}
or
#{oimcontext.currentUser.adminRoles['OrclOIMSystemAdministrator'] != null}
But what would my EL be if I wanted three different roles to be allowed to see it?
EG:
#{oimcontext.currentUser.adminRoles['OrclOIMSystemAdministrator'] != null}
#{oimcontext.currentUser.adminRoles['OrclOIMUserHelpDesk'] != null}
#{oimcontext.currentUser.adminRoles['OrclOIMUserAdmin'] != null}
None of the combinations I'm attempting work to either don't return True or a valid expression.
Any help with the formatting or logic of the string would be very much appreciated.

have you tried like this:
#{ (oimcontext.currentUser.adminRoles['OrclOIMSystemAdministrator'] != null) || (oimcontext.currentUser.adminRoles['OrclOIMUserHelpDesk'] != null) || (oimcontext.currentUser.adminRoles['OrclOIMUserAdmin'] != null) }

Similar Messages

Expression languages and indexed properties

If I have an indexed property of a JavaBean(TM), can I access it via the expression language? For example,
class MyBean
public X getFoo(int n) { . . . }
public void setFoo(int n, X x) { . . . }
It seems logical that
mybean.foo[0]
should call myBean.getFoo(0)
But the PRD2 spec (5.1.2.1, 5.1.2.2) seems to say no. Is that intentional?

The EL in JSTL 1.0 and JSP 2.0 doesn't support indexed properties. What you can do instead (if you're the one developing the bean) is this:
class MyBean {
public X[] getFoos() { . . . }
public void setFoo(int n, X x) { . . . }
}Now you can access an element of "foos" with ${mybean.foos[0]}

OIM synchronization organize information and role information

How to use the OIM to synchronization organize information and role information from the Oracle database？
thanks！

Can you explain little bit about your use case ?

Request dataset in OIM 11gr2

Hi Experts,
I have integrated OIM 11gR2 with Siebel and able to provision by xelsysadm. My requirement is End User will be raising request for siebel resource and approval workflow associated with is triggered.
1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end user
2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?
4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?
Regards
A Abhinay

1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end userEnd user will see Application Instance Form and you can customize the UI to hide attributes
2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
Make your Java Code/Beans/Expression to show/hide attributes conditionally.
3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?Application Instance Form
4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?Approval Policies

Text/expression-language-based paradigma continues?

i've been working with jsp and struts for a while. the most significant drawback of jsp, custom tags/jstl and struts is its "runtime" binding caused by the heavy use of string-attributes and interpreted expressions.
it makes the coding itself harder (loss of compiler support and strong typing), it increases the amount of testing (automated tests, regression tests) extremely, it makes jsp-apps very hard to mantain, it is error-prone when changed or refactored, it is slower in execution and last but not james requires extra developement tools (such as struts-editors) to effectively maintain the applications.
but i like the paradigma of a web application that keeps a view state, handles "events" etc.
the only thing i can't understand is why jsf builds on the error-prone jsp/custom tag paradigma instead of compiled server side ui components. it obviuosly still tries to follow the myth, that web-designers and application developers can share their source (i.e. js-pages) by using tags. imo this is a degeneration of the good idea to leverage html by some custom tags. these tags empower designers to make their pages dynamic. (enterprise) software developement ist very different: complex use cases, business logic and often ui-"logic", integration issues etc...
the life cycle of a jsp with custom tags is weird (even more in struts):
- objects (variables in scriptlets) already existing in the scope of the jsp-execute-method are wrapped into attributes of page, request or application scope.
- tags are defined using string-based attributs, such as <html:write name="pinky" property="brain" />
- the implementation of the tag tries to look up the object in any of the scopes, starting with page scope
- if the object exists, it tries to read/set its property via reflection
so you lose strong typing, compile time checks and performance.
there are several frameworks that do not build upon jsp and tags but put in an extra layer. this layer is similar to a rich client "form" and renders the output into html or any other format.
so i'm not preferring any framework, just looking around and curious why this architecture has been chosen for jsf.
thanks
tom

the most significant drawback of jsp, custom tags/jstl and struts is its "runtime" binding
caused by the heavy use of string-attributes and interpreted expressions.I second this heartily.
but i like the paradigma of a web application that keeps a view state, handles "events" etc.
the only thing i can't understand is why jsf builds on the error-prone jsp/custom tag
paradigma instead of compiled server side ui components. The JSF - JSP connection is a major problem. More and more developers are starting to express reservations about it, because the two technologies don't play well together. But I think you've hit on an even deeper fundamental flaw in the equation -- the evils of runtime binding. The heavy JSF/JSP reliance on runtime evaluation is a reliability nightmare. Developers choose Java, in part, because of the robustness provided by compile-time checking. We give that up when it comes to JSF/JSP or Struts web applications, and that's an unacceptable state of affairs.
Winer says that "JSF has taken a major step in the right direction with the <managed-bean> and <referenced-bean> configuration elements. These give some hope for development tools to finally provide real code insight (and even error reporting) for EL expressions, because they define both what keys are used in the expression language and what types of objects may be at those keys." However, this will help with only the simplest EL expressions. As soon as an EL expression reaches into nested properties and maps that aren't defined in the config file, we're back to runtime binding and error reporting. The addition of generics to the language with 1.5 might have made it possible to introduce strong EL type checking at page compile time, but Sun's short-sighted type-erasure implementation of generics rules this out permanently.
Look at what Microsoft is doing with ASP.NET. It's not perfect, but the fundamental technology is based on compiled server side ui components. There are places in that framework where you can write expressions aren't evaluated until runtime, but it's certainly not the fundamental basis of the model as it is with JSF/JSP. And the .NET implementation of generics may make it possible to have these dynamic expressions type-checked at page compile time in a future implementation of .NET.
I keep reading comments from the JSF proponents who say things to the effect of "yes, we know JSP doesn't play well with JSF, but JSF allows you to plug in a different rendering technology." Well, we need one, and we need it urgently. ASP.NET has been out for two years now, and was far more polished and useable at its release than JSF is now after a very long development cycle.
Rightly or wrongly, people will judge JSF on the merits of the reference implementation. And I fear that a lot of developers are going to throw up their hands after a taste of the JSF/JSP world and move to .NET.
Stephen Schaub

UIX Arrays in Expression Language

Hi All,
Does anybody know if it is possible to have an array in expressionlanguage?
How for example can you specify a four object array like:
{objectA, objectB, objectC, objectD}Is this possible in expression language and if yes how?
I want to use this for my own EL function, I have specified, that I want to use in a UIX page.
Thanks for any help,
Gideon

Hello,
This is not supported. We'd like to support it, but JSTL doesn't support it yet. I found this thread on the web that you might find interesting.
http://mail-archives.eu.apache.org/mod_mbox/jakarta-taglibs-user/200406.mbox/%[email protected]%3E
Jeanne

Expression Language - Help

I'm a new-comer to the expression language and have found it very hard to get to grips with it! Is there any books or manual that exist out there to help a newby like myself?

Welcome to the club my friend!
I like you was looking everywhere for some additional examples and definitions to bridge the gaps but found nearly nothing out in the real world through Google searches or other IT web forums. Siebel provides very few examples and the documentation reminds me of Windows help in the early nineties (overall not very helpful).
Since then I've just focused on hacking my way through the darkness and just keep trying, sooner or later you'll start to get the hang of the expression language.
Although I am tempted to write the 1st CRM expressions book as it couldn't hurt since there is really nothing else available unless you want to pay the $5K to go through the advanced reporting class. The only reason I haven't gone to that is I suspect nobody over there knows how to really use the language either, otherwise they'd have better documentation.
Let me know if you have any specific questions, maybe I can help.
Dan DeHaven (Desperately Trying to Learn)

JSP/Expression Language in Web AS 6.40

Hello
We are trying to port a Servlet/JSP Application from Tomcat to SAP Web AS. It's based on Spring/Hibernate and we are heavily using JSP with Expression Language and JSTL.
The first problem i had with the "c:forEach" tag, was solved by using the "core" taglib instead of the "core_el" taglib (which means JSTL without Expression Language seems to work)
As i found out SAP Web AS 6.40 complies to the J2EE 1.3 Standard. Therefore it supports JSP 1.2 and not JSP 2.0 with Expression Language EL.
Despite not supporting the current JSP Standard, is there any possibility to get JSP Pages with Expression Language running on Web AS 6.40?
If no, is it planned to support JSP 2.0 in future versions of Web AS and when is it scheduled?
Thanks for answers
Sigmar

Sigmar,
there is already released light version of J2EE engine including J2EE1.4...You can have a look at the begin page of the SDN, or directly download it by link :
https://www.sdn.sap.com/irj/sdn/downloaditem?rid=/webcontent/uuid/64919927-0b01-0010-e9bf-d1570518023d [original link is broken]
As bonus it includes Java EE 5 preview
Regards
Bojidar

Nesting of Rules for Auto Group (Role) Membership Rules in OIM 11gR2

Does anyone know how to nest rules for auto group (role) membership in OIM 11gR2. The General rules in Design Console are no longer used for auto group membership and the rules that can be configured in the Role properties cannot be nested as far as I can see.
Any info is appreciated.
Thanks!

My mistake... this is possible in the web ui.

How to raise create role request in OIM 11gR2?

How can I let a user to raise a create role request in OIM 11gR2?
If I assigned the Role Viewer or Role Authorizer admin role to the user, the create button for role is disabled.
If I assign the user as Role Administrator, the role will be directly created without raising any request.
If I assign the user as SPML Admin, the create button is enabled, but after filling the form and clicking the "save" button, an exception will be thrown saying "IAM-3054100 : The logged-in user AA10127 does not have createRole permission on Role entity."

Hi,
i have changed identity page logo by using customize option, But in sysadmin page there no such option, is it possible to change image same as identity console.

System Administrator role OIM 11gR2

Hi experts,
I am trying to figure out which table in OIM 11gR2 stores the information for roles assigned to the user.
I am specifically looking for users who have system administrator role assigned. The way to assign is through organizations, but not sure which table stores it.
Thanks
Kunal Jain

Below is table names and description used to obtain admin role and user information:
ADMIN_ROLE - stores information about admin roles available in system
USR - user infromation
ADMIN_ROLE_MEMBERSHIP - USer and admin role mappings
regards,
GP

OIM 11gR2 Request Validator Plugin and Axis based Web Service Client

Hi,
I am trying call a web service client generated using axis2 from a request validator plugin in OIM 11gR2 and I have all the axis related jar files under the plugin lib folder but it fails due to the axis reference issues.
I tried putting the jar files under different locations like thirdparty folder, server lib etc. But it is giving issues every where. Please let me know if you have some solution.
Thanks in advance,

Haven't worked on this, but have you tried by putting the axis libraries inside the plugin lib folder when you are building up the plugin? Also you need to check asix2 compatibility with weblogic version with R2.
-Bikash

Navigation List and Expression Language

Hi,
I have a navigation list with 3 attributes: id, name, telephone.
I display the name and i want using expression language, based on the selected name value in the navigation list to get the id.
Please note that i have a form that i edit a record and i want to include another view as a navigation list. The id from the navigation list i will pass it using a custom method (dropped as a command button) in my application module to proceed from there on.
How can i do this?
Thanks
Antonis
Message was edited by:
Antonis Antoniou

Sorted out.

Replicating the app functionality from OIM 10g to OIM 11gR2

Hi,
I have a resource object with an object form and a process form and approval, provisioning configured in OIM 10g design console. Provisioning is manual provisioning assigned to a particular group based on a task assignment adapter. For replicating the same in OIM 11gR2 i followed the following steps.
1. Created a Resource object in Design console.
2. Created a dummy IT Resource ( Since while creating app instance it is having IT Resource as Mandatory field. * Is there any way to skip this as i do not have any IT resource in my original app as it is going for manual provisioning?)*
3. Created a process form in Design Console with the same fields as present in my 10g app process form.
4. Now i need to Create an app instance and select the created resource object and IT resoource. Also i need to create a form associated with the app instance in which i will add the fields as present in the object form in my 10g app. ( Here i am not understanding how data will flow from object form to process form since there is no data flow mapping here)
5. Other steps like creating the SOA composite with human tasks and deploying it and after that creating approval policies is pretty much clear.
Please clarify whether the steps are correct and also the queries which i have posted in between. Thanks in advance.
Regards,
Durgaprasad
Edited by: Durgaprasad on Jan 17, 2013 3:38 AM

Thanks Gyanprakash. Wll disconnected resource trigger our custom approval process if we select the resource name properly in scope in operational level approval policy. Have you tried a disconnected resource with your custom approval process. Because i read the following lines in admin guide
Oracle Identity Manager supports provisioning of disconnected resources by using the SOA worklist for manual provisioning of disconnected resources. After the role-based provisioning decision or SOA request approval is complete and the corresponding application instance is determined to be a disconnected application instance, a new SOA workflow is started. This new SOA workflow is assigned to the manual provisioning administrator.
So i thought disconnected app instance will have its own approval process configured during the creation and it will route accordingly. So just wanted to clarify how to make disconnected app instance to trigger our approval. will approval policay take care of it as i am going to select the name of the disconnected app in the scope field.

Authorization Policy for Modify user in OIM 11gR2

Hi Experts,
Requirement: I want the users in particular org not to modify certain user attributes and users from other org should be allowed to modify user.
I have created user1 whose organization is org1 and role is role1. I have also created user user2 under same org and same role. I assigned the Admin Role "User Administrator" role to user2.
So If user2 from same org1 tries to modify certain attributes then OIM should throw error message. I have completed till this.
But when the user from diff org say org2 with Admin Role "User Administrator" tries to modify user, OIM is not allowing to modify user which should not be the case.
I want the Auth Policy to trigger only for Org1. I have specified the below condition for my custom policy in OES admin console but it is not triggering.
The condition is
IF ( OrclOIMTargetEntity = 'true' AND OrclOIMUserOrganizations = 'true' AND STRING_AT_LEAST_ONE_MEMBER_OF(OrclOIMUserOrganizations,['25','1000000']) = true )
What am I missing?
Any help is much appreciated.

Hi
Can anyone let me know the steps to restrict modify user operation for the users belonging to specific organization in OIM 11gR2. The condition which I specified under Authorization Policy in APM console is not triggering at all.
Thanks!

OIM 11gR2 - Expression Language and Roles

Similar Messages

Maybe you are looking for