Advanced Query for Rule Condition
I need to define a condition which starts with 'NT-' but there is no option on the role condition options. Type of 'Organization' is String. For instance, on the role's membership rule I can choose 'Starts with' or write advanced query. On the other hand, below operators (=,<>,<,>) are not logical for 'Organization'. Why there is no options like contains or starts with? How can I handle that kind of query?
Any help is appreciated.
- Community Thread
- Forum Thread
- Identity G&L
- Identity Governance & Lifecycle
- RSA Identity
- RSA Identity G&L
- RSA Identity Governance & Lifecycle
- RSA Identity Governance and Lifecycle
- RSA IGL
I've already known 'contains' means %like%. If you check the image I shared above and below eventhough type of 'Organization' is String there is no option 'contains'.
"Contains" (%like%) is not supported for the string attribute Organization.
This is discussed in the link I provided. Do you need more information?
Just an idea but in other cases it worked for me. Export the config of the rule membership difference rule with an equation condition and also export another rule where you have a 'like' condition. Check how the condition looks like in xml and copy it into role membership rule xml definition or update it accordingly.
It is definitely not a really supported solution but should work.
correct, these are int values and applied to numbers not sting values typically.
this is where the advanced editor allows you to do whatever you need
I liked your solution but that cannot be done by our operation department. I cannot explain them how a string attribute doesn't support 'like' operator
Thanks by the way.
They're not meaningless to string. They can definitely be applied to strings if you remember that strings are a sequence of integers.
The < and > operators are, of course, greater than and less than which are applied to one byte at a time in the strings until a difference is found or null. Decribed a little closer here https://docs.oracle.com/cd/E19253-01/817-6223/chp-strings-5/index.html
The <> is a different way of writing !=. When one types "X > Y" you are looking for a condition where X is greater than Y. Obvious statements, I'm getting to a point. One can also use "X >= Y", two operators combined. This one is widely used in development. The phrase "X <> Y" then looks for a condition where X is greater or smaller than Y, i.e anything but equal.
The missing advanced editor sounds like a missing feature and something that should be brought up as an Idea. If you create one and link it here I'll go and vote.