MidPoint 4.2 and later
This feature is experimental. It means that it is not intended for production use. The feature is not finished. It is not stable. The implementation may contain bugs, the configuration may change at any moment without any warning and it may not work at all. Use at your own risk. This feature is not covered by midPoint support. In case that you are interested in supporting development of this feature, please consider purchasing midPoint Platform subscription.
Is it possible to delete an organization in such a way that all its members (users, child orgs, and other objects) will not end up in an inconsistent state? I.e. that their assignments to the particular org will be deleted, instead of becoming hanging?
Yes, using a simple policy rule this can be easily implemented.
Implementation of this scenario consists of a single global policy rule.
Complete configuration for this scenario is in https://github.com/Evolveum/midpoint/tree/master/model/model-intest/src/test/resources/linked/orgs directory (and associated system configuration file).
This scenario works in the majority of cases. More specifically, it assumes that "assigned" is the same as "linked":
- All assignments are effective (valid and conditions evaluated to true), so they are reflected in links.
- All links are backed by assignments, i.e. there are no links created by inducements or created manually (editing
But the scenario can be extended and made more robust, by:
linkSourcespecification by custom query looking after
- Creating additional global policy rule that will clean up the inducements for organization being deleted.