Examples with ExpressionVariables com.evolveum.midpoint.repo.common.expression.ExpressionVariables used on opensource projects

Example 1 with ExpressionVariables

use of com.evolveum.midpoint.repo.common.expression.ExpressionVariables in project midpoint by Evolveum.

the class ProjectionValuesProcessor method formatIterationToken.

private <F extends ObjectType> String formatIterationToken(LensContext<F> context, LensProjectionContext accountContext, int iteration, Task task, OperationResult result) throws SchemaException, ObjectNotFoundException, ExpressionEvaluationException {
    ResourceObjectTypeDefinitionType accDef = accountContext.getResourceObjectTypeDefinitionType();
    if (accDef == null) {
        return LensUtil.formatIterationTokenDefault(iteration);
    }
    IterationSpecificationType iterationType = accDef.getIteration();
    ExpressionVariables variables = createExpressionVariables(context, accountContext);
    return LensUtil.formatIterationToken(context, accountContext, iterationType, iteration, expressionFactory, variables, task, result);
}

Example 2 with ExpressionVariables

use of com.evolveum.midpoint.repo.common.expression.ExpressionVariables in project midpoint by Evolveum.

the class FocusProcessor method processFocusFocus.

private <F extends FocusType> void processFocusFocus(LensContext<F> context, String activityDescription, XMLGregorianCalendar now, Task task, OperationResult result) throws ObjectNotFoundException, SchemaException, ExpressionEvaluationException, PolicyViolationException, ObjectAlreadyExistsException, CommunicationException, ConfigurationException, SecurityViolationException {
    LensFocusContext<F> focusContext = context.getFocusContext();
    ObjectTemplateType objectTemplate = context.getFocusTemplate();
    PartialProcessingOptionsType partialProcessingOptions = context.getPartialProcessingOptions();
    // This is fixed now. TODO: make it configurable
    boolean resetOnRename = true;
    int maxIterations = 0;
    IterationSpecificationType iterationSpecificationType = null;
    if (objectTemplate != null) {
        iterationSpecificationType = objectTemplate.getIteration();
        maxIterations = LensUtil.determineMaxIterations(iterationSpecificationType);
    }
    int iteration = focusContext.getIteration();
    String iterationToken = focusContext.getIterationToken();
    boolean wasResetIterationCounter = false;
    PrismObject<F> focusCurrent = focusContext.getObjectCurrent();
    if (focusCurrent != null && iterationToken == null) {
        Integer focusIteration = focusCurrent.asObjectable().getIteration();
        if (focusIteration != null) {
            iteration = focusIteration;
        }
        iterationToken = focusCurrent.asObjectable().getIterationToken();
    }
    while (true) {
        ObjectPolicyConfigurationType objectPolicyConfigurationType = focusContext.getObjectPolicyConfigurationType();
        applyObjectPolicyConstraints(focusContext, objectPolicyConfigurationType);
        ExpressionVariables variablesPreIteration = Utils.getDefaultExpressionVariables(focusContext.getObjectNew(), null, null, null, context.getSystemConfiguration(), focusContext);
        if (iterationToken == null) {
            iterationToken = LensUtil.formatIterationToken(context, focusContext, iterationSpecificationType, iteration, expressionFactory, variablesPreIteration, task, result);
        }
        // We have to remember the token and iteration in the context.
        // The context can be recomputed several times. But we always want
        // to use the same iterationToken if possible. If there is a random
        // part in the iterationToken expression that we need to avoid recomputing
        // the token otherwise the value can change all the time (even for the same inputs).
        // Storing the token in the secondary delta is not enough because secondary deltas can be dropped
        // if the context is re-projected.
        focusContext.setIteration(iteration);
        focusContext.setIterationToken(iterationToken);
        LOGGER.trace("Focus {} processing, iteration {}, token '{}'", focusContext.getHumanReadableName(), iteration, iterationToken);
        String conflictMessage;
        if (!LensUtil.evaluateIterationCondition(context, focusContext, iterationSpecificationType, iteration, iterationToken, true, expressionFactory, variablesPreIteration, task, result)) {
            conflictMessage = "pre-iteration condition was false";
            LOGGER.debug("Skipping iteration {}, token '{}' for {} because the pre-iteration condition was false", iteration, iterationToken, focusContext.getHumanReadableName());
        } else {
            if (consistencyChecks)
                context.checkConsistence();
            LensUtil.partialExecute("inbound", () -> {
                // Loop through the account changes, apply inbound expressions
                inboundProcessor.processInbound(context, now, task, result);
                if (consistencyChecks)
                    context.checkConsistence();
                context.recomputeFocus();
                LensUtil.traceContext(LOGGER, activityDescription, "inbound", false, context, false);
                if (consistencyChecks)
                    context.checkConsistence();
            }, partialProcessingOptions::getInbound);
            // ACTIVATION
            LensUtil.partialExecute("focusActivation", () -> processActivation(context, now, result), partialProcessingOptions::getFocusActivation);
            // OBJECT TEMPLATE (before assignments)
            LensUtil.partialExecute("objectTemplateBeforeAssignments", () -> objectTemplateProcessor.processTemplate(context, ObjectTemplateMappingEvaluationPhaseType.BEFORE_ASSIGNMENTS, now, task, result), partialProcessingOptions::getObjectTemplateBeforeAssignments);
            // process activation again. Object template might have changed it.
            context.recomputeFocus();
            LensUtil.partialExecute("focusActivation", () -> processActivation(context, now, result), partialProcessingOptions::getFocusActivation);
            // ASSIGNMENTS
            LensUtil.partialExecute("assignments", () -> assignmentProcessor.processAssignmentsProjections(context, now, task, result), partialProcessingOptions::getAssignments);
            LensUtil.partialExecute("assignmentsOrg", () -> assignmentProcessor.processOrgAssignments(context, result), partialProcessingOptions::getAssignmentsOrg);
            LensUtil.partialExecute("assignmentsMembershipAndDelegate", () -> assignmentProcessor.processMembershipAndDelegatedRefs(context, result), partialProcessingOptions::getAssignmentsMembershipAndDelegate);
            context.recompute();
            LensUtil.partialExecute("assignmentsConflicts", () -> assignmentProcessor.checkForAssignmentConflicts(context, result), partialProcessingOptions::getAssignmentsConflicts);
            // OBJECT TEMPLATE (after assignments)
            LensUtil.partialExecute("objectTemplateAfterAssignments", () -> objectTemplateProcessor.processTemplate(context, ObjectTemplateMappingEvaluationPhaseType.AFTER_ASSIGNMENTS, now, task, result), partialProcessingOptions::getObjectTemplateBeforeAssignments);
            context.recompute();
            // process activation again. Second pass through object template might have changed it.
            context.recomputeFocus();
            LensUtil.partialExecute("focusActivation", () -> processActivation(context, now, result), partialProcessingOptions::getFocusActivation);
            // CREDENTIALS (including PASSWORD POLICY)
            LensUtil.partialExecute("focusCredentials", () -> credentialsProcessor.processFocusCredentials(context, now, task, result), partialProcessingOptions::getFocusCredentials);
            // We need to evaluate this as a last step. We need to make sure we have all the
            // focus deltas so we can properly trigger the rules.
            LensUtil.partialExecute("focusPolicyRules", () -> evaluateFocusPolicyRules(context, activityDescription, now, task, result), partialProcessingOptions::getFocusPolicyRules);
            if (resetOnRename && !wasResetIterationCounter && willResetIterationCounter(focusContext)) {
                // Make sure this happens only the very first time during the first recompute.
                // Otherwise it will always change the token (especially if the token expression has a random part)
                // hence the focusContext.getIterationToken() == null
                wasResetIterationCounter = true;
                if (iteration != 0) {
                    iteration = 0;
                    iterationToken = null;
                    LOGGER.trace("Resetting iteration counter and token because rename was detected");
                    cleanupContext(focusContext);
                    continue;
                }
            }
            PrismObject<F> previewObjectNew = focusContext.getObjectNew();
            if (previewObjectNew == null) {
            // this must be delete
            } else {
                // Explicitly check for name. The checker would check for this also. But checking it here
                // will produce better error message
                PolyStringType objectName = previewObjectNew.asObjectable().getName();
                if (objectName == null || objectName.getOrig().isEmpty()) {
                    throw new NoFocusNameSchemaException("No name in new object " + objectName + " as produced by template " + objectTemplate + " in iteration " + iteration + ", we cannot process an object without a name");
                }
            }
            // Check if iteration constraints are OK
            FocusConstraintsChecker<F> checker = new FocusConstraintsChecker<>();
            checker.setPrismContext(prismContext);
            checker.setContext(context);
            checker.setRepositoryService(cacheRepositoryService);
            checker.check(previewObjectNew, result);
            if (checker.isSatisfiesConstraints()) {
                LOGGER.trace("Current focus satisfies uniqueness constraints. Iteration {}, token '{}'", iteration, iterationToken);
                ExpressionVariables variablesPostIteration = Utils.getDefaultExpressionVariables(focusContext.getObjectNew(), null, null, null, context.getSystemConfiguration(), focusContext);
                if (LensUtil.evaluateIterationCondition(context, focusContext, iterationSpecificationType, iteration, iterationToken, false, expressionFactory, variablesPostIteration, task, result)) {
                    // stop the iterations
                    break;
                } else {
                    conflictMessage = "post-iteration condition was false";
                    LOGGER.debug("Skipping iteration {}, token '{}' for {} because the post-iteration condition was false", iteration, iterationToken, focusContext.getHumanReadableName());
                }
            } else {
                LOGGER.trace("Current focus does not satisfy constraints. Conflicting object: {}; iteration={}, maxIterations={}", checker.getConflictingObject(), iteration, maxIterations);
                conflictMessage = checker.getMessages();
            }
            if (!wasResetIterationCounter) {
                wasResetIterationCounter = true;
                if (iteration != 0) {
                    iterationToken = null;
                    iteration = 0;
                    LOGGER.trace("Resetting iteration counter and token after conflict");
                    cleanupContext(focusContext);
                    continue;
                }
            }
        }
        // Next iteration
        iteration++;
        iterationToken = null;
        LensUtil.checkMaxIterations(iteration, maxIterations, conflictMessage, focusContext.getHumanReadableName());
        cleanupContext(focusContext);
    }
    addIterationTokenDeltas(focusContext, iteration, iterationToken);
    if (consistencyChecks)
        context.checkConsistence();
}

Example 3 with ExpressionVariables

use of com.evolveum.midpoint.repo.common.expression.ExpressionVariables in project midpoint by Evolveum.

the class DirectAssignmentCertificationHandler method itemSelectionExpressionAccepts.

private boolean itemSelectionExpressionAccepts(AssignmentType assignment, boolean isInducement, ObjectType object, AccessCertificationCampaignType campaign, Task task, OperationResult result) throws ExpressionEvaluationException, ObjectNotFoundException, SchemaException {
    AccessCertificationObjectBasedScopeType scope = null;
    if (campaign.getScopeDefinition() instanceof AccessCertificationObjectBasedScopeType) {
        scope = (AccessCertificationObjectBasedScopeType) (campaign.getScopeDefinition());
    }
    if (scope == null || scope.getItemSelectionExpression() == null) {
        // no expression, no rejections
        return true;
    }
    ExpressionType selectionExpression = scope.getItemSelectionExpression();
    ExpressionVariables variables = new ExpressionVariables();
    variables.addVariableDefinition(ExpressionConstants.VAR_ASSIGNMENT, assignment);
    if (object instanceof FocusType) {
        variables.addVariableDefinition(ExpressionConstants.VAR_FOCUS, object);
    }
    if (object instanceof UserType) {
        variables.addVariableDefinition(ExpressionConstants.VAR_USER, object);
    }
    return expressionHelper.evaluateBooleanExpression(selectionExpression, variables, "item selection for assignment " + ObjectTypeUtil.toShortString(assignment), task, result);
}

Example 4 with ExpressionVariables

use of com.evolveum.midpoint.repo.common.expression.ExpressionVariables in project midpoint by Evolveum.

the class ScriptExecutor method executeScript.

private Object executeScript(ScriptExpression scriptExpression, PrismValue prismValue, ExecutionContext context, OperationResult result) throws ExpressionEvaluationException, ObjectNotFoundException, SchemaException {
    ExpressionVariables variables = new ExpressionVariables();
    variables.addVariableDefinition(ExpressionConstants.VAR_INPUT, prismValue);
    variables.addVariableDefinition(ExpressionConstants.VAR_PRISM_CONTEXT, prismContext);
    ExpressionUtil.addActorVariable(variables, securityEnforcer);
    List<?> rv = Utils.evaluateScript(scriptExpression, null, variables, true, "in '" + NAME + "' action", context.getTask(), result);
    if (rv == null || rv.size() == 0) {
        return null;
    } else if (rv.size() == 1) {
        return rv.get(0);
    } else {
        // shouldn't occur; would cause problems
        return rv;
    }
}

Example 5 with ExpressionVariables

use of com.evolveum.midpoint.repo.common.expression.ExpressionVariables in project midpoint by Evolveum.

the class CorrelationConfirmationEvaluator method evaluateConfirmationExpression.

public <F extends FocusType> boolean evaluateConfirmationExpression(Class<F> focusType, F user, ShadowType shadow, ResourceType resource, SystemConfigurationType configuration, ExpressionType expressionType, Task task, OperationResult result) throws ExpressionEvaluationException, ObjectNotFoundException, SchemaException {
    Validate.notNull(user, "User must not be null.");
    Validate.notNull(shadow, "Resource object shadow must not be null.");
    Validate.notNull(expressionType, "Expression must not be null.");
    Validate.notNull(result, "Operation result must not be null.");
    ExpressionVariables variables = Utils.getDefaultExpressionVariables(user, shadow, resource, configuration);
    String shortDesc = "confirmation expression for " + resource.asPrismObject();
    PrismPropertyDefinition<Boolean> outputDefinition = new PrismPropertyDefinitionImpl<>(ExpressionConstants.OUTPUT_ELEMENT_NAME, DOMUtil.XSD_BOOLEAN, prismContext);
    Expression<PrismPropertyValue<Boolean>, PrismPropertyDefinition<Boolean>> expression = expressionFactory.makeExpression(expressionType, outputDefinition, shortDesc, task, result);
    ExpressionEvaluationContext params = new ExpressionEvaluationContext(null, variables, shortDesc, task, result);
    PrismValueDeltaSetTriple<PrismPropertyValue<Boolean>> outputTriple = ModelExpressionThreadLocalHolder.evaluateExpressionInContext(expression, params, task, result);
    Collection<PrismPropertyValue<Boolean>> nonNegativeValues = outputTriple.getNonNegativeValues();
    if (nonNegativeValues == null || nonNegativeValues.isEmpty()) {
        throw new ExpressionEvaluationException("Expression returned no value (" + nonNegativeValues.size() + ") in " + shortDesc);
    }
    if (nonNegativeValues.size() > 1) {
        throw new ExpressionEvaluationException("Expression returned more than one value (" + nonNegativeValues.size() + ") in " + shortDesc);
    }
    PrismPropertyValue<Boolean> resultpval = nonNegativeValues.iterator().next();
    if (resultpval == null) {
        throw new ExpressionEvaluationException("Expression returned no value (" + nonNegativeValues.size() + ") in " + shortDesc);
    }
    Boolean resultVal = resultpval.getValue();
    if (resultVal == null) {
        throw new ExpressionEvaluationException("Expression returned no value (" + nonNegativeValues.size() + ") in " + shortDesc);
    }
    return resultVal;
}