- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Advanced Query for Rule Condition
Hi all,
I need to define a condition which starts with 'NT-' but there is no option on the role condition options. Type of 'Organization' is String. For instance, on the role's membership rule I can choose 'Starts with' or write advanced query. On the other hand, below operators (=,<>,<,>) are not logical for 'Organization'. Why there is no options like contains or starts with? How can I handle that kind of query?
Any help is appreciated.
- Tags:
- Community Thread
- Discussion
- Forum Thread
- Identity G&L
- Identity Governance & Lifecycle
- IG&L
- IGL
- RSA Identity
- RSA Identity G&L
- RSA Identity Governance & Lifecycle
- RSA Identity Governance and Lifecycle
- RSA IGL
- rule_condition
- Rules
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
I believe this was already discussed in this thread:
https://community.rsa.com/message/943826
Does this answer your question?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Hi Ian,
I've already known 'contains' means %like%. If you check the image I shared above and below eventhough type of 'Organization' is String there is no option 'contains'.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
"Contains" (%like%) is not supported for the string attribute Organization.
This is discussed in the link I provided. Do you need more information?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Thanks Ian. What do (<>,<,>) operators stand for? They are meaningless to string.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Just an idea but in other cases it worked for me. Export the config of the rule membership difference rule with an equation condition and also export another rule where you have a 'like' condition. Check how the condition looks like in xml and copy it into role membership rule xml definition or update it accordingly.
It is definitely not a really supported solution but should work.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
correct, these are int values and applied to numbers not sting values typically.
this is where the advanced editor allows you to do whatever you need
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
That's the point there is no advanced editor on Role Selection.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
I liked your solution but that cannot be done by our operation department. I cannot explain them how a string attribute doesn't support 'like' operator
Thanks by the way.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
They're not meaningless to string. They can definitely be applied to strings if you remember that strings are a sequence of integers.
The < and > operators are, of course, greater than and less than which are applied to one byte at a time in the strings until a difference is found or null. Decribed a little closer here https://docs.oracle.com/cd/E19253-01/817-6223/chp-strings-5/index.html
The <> is a different way of writing !=. When one types "X > Y" you are looking for a condition where X is greater than Y. Obvious statements, I'm getting to a point. One can also use "X >= Y", two operators combined. This one is widely used in development. The phrase "X <> Y" then looks for a condition where X is greater or smaller than Y, i.e anything but equal.
The missing advanced editor sounds like a missing feature and something that should be brought up as an Idea. If you create one and link it here I'll go and vote.
