Role Based Provisioning Module DAL Global Query from a DNQuery control is not returning the expected results

  • 7016119
  • 29-Jan-2015
  • 29-Jan-2015

Environment


NetIQ Identity Manager Roles Based Provisioning Module

Situation

Customer created a DAL Global Query which would look at Users and take a parameter (Groups) to query against the users groups.

In a workflow they then used that Global Query in a DNQuery control:

DAL global query parameter(s):

(function () {
return {"Groups":
"CN=Grp1,OU=Groups,O=data:
CN=Grp2,OU=Groups,O=data:
CN=Grp3,OU=Groups,O=data:
CN=Grp4,OU=Groups,O=data"}
})();

The result is that the query will only be made against Grp1 and Grp2, the last two parameters of the query will not be used.

Resolution

There are two workarounds for the problem:

1) use a PickList instead, which will handle it correctly

2) add two non-existing groups to the query parameters:

(function () {
return {"Groups":
"CN=Grp1,OU=Groups,O=data:
CN=Grp2,OU=Groups,O=data:
CN=Grp3,OU=Groups,O=data:
CN=Grp4,OU=Groups,O=data:
CN=non-existing-1,OU=Groups,O=data:
CN=non-existing-2,OU=Groups,O=data:"}
})();


Additional Information

This have been reported to engineering, and should get fixed in Identity Manager Role Based Provisioning Module 4.5  Patch 1.