Search in sources :

Example 1 with ResourceObjectTypeDependencyType

use of com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType in project midpoint by Evolveum.

the class DependencyProcessor method preprocessDependencies.

public <F extends ObjectType> void preprocessDependencies(LensContext<F> context) {
    //in the first wave we do not have enough information to preprocess contexts
    if (context.getExecutionWave() == 0) {
        return;
    }
    for (LensProjectionContext projContext : context.getProjectionContexts()) {
        if (!projContext.isCanProject()) {
            continue;
        }
        for (ResourceObjectTypeDependencyType dependency : projContext.getDependencies()) {
            ResourceShadowDiscriminator refRat = new ResourceShadowDiscriminator(dependency, projContext.getResource().getOid(), projContext.getKind());
            LOGGER.trace("LOOKING FOR {}", refRat);
            LensProjectionContext dependencyAccountContext = context.findProjectionContext(refRat);
            ResourceObjectTypeDependencyStrictnessType strictness = ResourceTypeUtil.getDependencyStrictness(dependency);
            if (dependencyAccountContext != null) {
                if (!dependencyAccountContext.isCanProject()) {
                    continue;
                }
                // We have the context of the object that we depend on. We need to check if it was provisioned.
                if (strictness == ResourceObjectTypeDependencyStrictnessType.STRICT || strictness == ResourceObjectTypeDependencyStrictnessType.RELAXED) {
                    if (wasExecuted(dependencyAccountContext)) {
                        // everything OK
                        if (ResourceTypeUtil.isForceLoadDependentShadow(dependency) && !dependencyAccountContext.isDelete()) {
                            dependencyAccountContext.setDoReconciliation(true);
                            projContext.setDoReconciliation(true);
                        }
                    }
                }
            }
        }
    }
}
Also used : ResourceObjectTypeDependencyType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType) ResourceObjectTypeDependencyStrictnessType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyStrictnessType) LensProjectionContext(com.evolveum.midpoint.model.impl.lens.LensProjectionContext) ResourceShadowDiscriminator(com.evolveum.midpoint.schema.ResourceShadowDiscriminator)

Example 2 with ResourceObjectTypeDependencyType

use of com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType in project midpoint by Evolveum.

the class DependencyProcessor method determineProjectionWaveProvision.

private <F extends ObjectType> LensProjectionContext determineProjectionWaveProvision(LensContext<F> context, LensProjectionContext projectionContext, ResourceObjectTypeDependencyType inDependency, List<ResourceObjectTypeDependencyType> depPath) throws PolicyViolationException {
    if (depPath == null) {
        depPath = new ArrayList<ResourceObjectTypeDependencyType>();
    }
    int determinedWave = 0;
    int determinedOrder = 0;
    for (ResourceObjectTypeDependencyType outDependency : projectionContext.getDependencies()) {
        if (LOGGER.isTraceEnabled()) {
            LOGGER.trace("DEP: {}", outDependency);
        }
        if (inDependency != null && isHigerOrder(outDependency, inDependency)) {
            // otherwise we can end up in endless loop even for legal dependencies.
            continue;
        }
        checkForCircular(depPath, outDependency);
        depPath.add(outDependency);
        ResourceShadowDiscriminator refDiscr = new ResourceShadowDiscriminator(outDependency, projectionContext.getResource().getOid(), projectionContext.getKind());
        LensProjectionContext dependencyProjectionContext = findDependencyTargetContext(context, projectionContext, outDependency);
        //			}
        if (dependencyProjectionContext == null || dependencyProjectionContext.isDelete()) {
            ResourceObjectTypeDependencyStrictnessType outDependencyStrictness = ResourceTypeUtil.getDependencyStrictness(outDependency);
            if (outDependencyStrictness == ResourceObjectTypeDependencyStrictnessType.STRICT) {
                throw new PolicyViolationException("Unsatisfied strict dependency of account " + projectionContext.getResourceShadowDiscriminator() + " dependent on " + refDiscr + ": Account not provisioned");
            } else if (outDependencyStrictness == ResourceObjectTypeDependencyStrictnessType.LAX) {
                // independent object not in the context, just ignore it
                LOGGER.debug("Unsatisfied lax dependency of account " + projectionContext.getResourceShadowDiscriminator() + " dependent on " + refDiscr + "; dependency skipped");
            } else if (outDependencyStrictness == ResourceObjectTypeDependencyStrictnessType.RELAXED) {
                // independent object not in the context, just ignore it
                LOGGER.debug("Unsatisfied relaxed dependency of account " + projectionContext.getResourceShadowDiscriminator() + " dependent on " + refDiscr + "; dependency skipped");
            } else {
                throw new IllegalArgumentException("Unknown dependency strictness " + outDependency.getStrictness() + " in " + refDiscr);
            }
        } else {
            dependencyProjectionContext = determineProjectionWave(context, dependencyProjectionContext, outDependency, depPath);
            if (dependencyProjectionContext.getWave() + 1 > determinedWave) {
                determinedWave = dependencyProjectionContext.getWave() + 1;
                if (outDependency.getOrder() == null) {
                    determinedOrder = 0;
                } else {
                    determinedOrder = outDependency.getOrder();
                }
            }
        }
        depPath.remove(outDependency);
    }
    LensProjectionContext resultAccountContext = projectionContext;
    if (projectionContext.getWave() >= 0 && projectionContext.getWave() != determinedWave) {
        // Wave for this context was set during the run of this method (it was not set when we
        // started, we checked at the beginning). Therefore this context must have been visited again.
        // therefore there is a circular dependency. Therefore we need to create another context to split it.
        ResourceShadowDiscriminator origDiscr = projectionContext.getResourceShadowDiscriminator();
        ResourceShadowDiscriminator discr = new ResourceShadowDiscriminator(origDiscr.getResourceOid(), origDiscr.getKind(), origDiscr.getIntent(), origDiscr.isThombstone());
        discr.setOrder(determinedOrder);
        if (!projectionContext.compareResourceShadowDiscriminator(discr, true)) {
            resultAccountContext = createAnotherContext(context, projectionContext, discr);
        }
    }
    //		LOGGER.trace("Wave for {}: {}", resultAccountContext.getResourceAccountType(), wave);
    resultAccountContext.setWave(determinedWave);
    return resultAccountContext;
}
Also used : ResourceObjectTypeDependencyType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType) ResourceObjectTypeDependencyStrictnessType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyStrictnessType) LensProjectionContext(com.evolveum.midpoint.model.impl.lens.LensProjectionContext) ResourceShadowDiscriminator(com.evolveum.midpoint.schema.ResourceShadowDiscriminator) PolicyViolationException(com.evolveum.midpoint.util.exception.PolicyViolationException)

Example 3 with ResourceObjectTypeDependencyType

use of com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType in project midpoint by Evolveum.

the class DependencyProcessor method checkDependencies.

/**
	 * Check that the dependencies are still satisfied. Also check for high-ordes vs low-order operation consistency
	 * and stuff like that. 
	 */
public <F extends ObjectType> boolean checkDependencies(LensContext<F> context, LensProjectionContext projContext, OperationResult result) throws PolicyViolationException {
    if (projContext.isDelete()) {
        // It is OK if we depend on something that is not there if we are being removed ... for now
        return true;
    }
    if (projContext.getOid() == null || projContext.getSynchronizationPolicyDecision() == SynchronizationPolicyDecision.ADD) {
        // Check for lower-order contexts
        LensProjectionContext lowerOrderContext = null;
        for (LensProjectionContext projectionContext : context.getProjectionContexts()) {
            if (projContext == projectionContext) {
                continue;
            }
            if (projectionContext.compareResourceShadowDiscriminator(projContext.getResourceShadowDiscriminator(), false) && projectionContext.getResourceShadowDiscriminator().getOrder() < projContext.getResourceShadowDiscriminator().getOrder()) {
                if (projectionContext.getOid() != null) {
                    lowerOrderContext = projectionContext;
                    break;
                }
            }
        }
        if (lowerOrderContext != null) {
            if (lowerOrderContext.getOid() != null) {
                if (projContext.getOid() == null) {
                    projContext.setOid(lowerOrderContext.getOid());
                }
                if (projContext.getSynchronizationPolicyDecision() == SynchronizationPolicyDecision.ADD) {
                    // This context cannot be ADD. There is a lower-order context with an OID
                    // it means that the lower-order projection exists, we cannot add it twice
                    projContext.setSynchronizationPolicyDecision(SynchronizationPolicyDecision.KEEP);
                }
            }
            if (lowerOrderContext.isDelete()) {
                projContext.setSynchronizationPolicyDecision(SynchronizationPolicyDecision.DELETE);
            }
        }
    }
    for (ResourceObjectTypeDependencyType dependency : projContext.getDependencies()) {
        ResourceShadowDiscriminator refRat = new ResourceShadowDiscriminator(dependency, projContext.getResource().getOid(), projContext.getKind());
        LOGGER.trace("LOOKING FOR {}", refRat);
        LensProjectionContext dependencyAccountContext = context.findProjectionContext(refRat);
        ResourceObjectTypeDependencyStrictnessType strictness = ResourceTypeUtil.getDependencyStrictness(dependency);
        if (dependencyAccountContext == null) {
            if (strictness == ResourceObjectTypeDependencyStrictnessType.STRICT) {
                // This should not happen, it is checked before projection
                throw new PolicyViolationException("Unsatisfied strict dependency of " + projContext.getResourceShadowDiscriminator().toHumanReadableDescription() + " dependent on " + refRat.toHumanReadableDescription() + ": No context in dependency check");
            } else if (strictness == ResourceObjectTypeDependencyStrictnessType.LAX) {
                // independent object not in the context, just ignore it
                LOGGER.trace("Unsatisfied lax dependency of account " + projContext.getResourceShadowDiscriminator().toHumanReadableDescription() + " dependent on " + refRat.toHumanReadableDescription() + "; dependency skipped");
            } else if (strictness == ResourceObjectTypeDependencyStrictnessType.RELAXED) {
                // independent object not in the context, just ignore it
                LOGGER.trace("Unsatisfied relaxed dependency of account " + projContext.getResourceShadowDiscriminator().toHumanReadableDescription() + " dependent on " + refRat.toHumanReadableDescription() + "; dependency skipped");
            } else {
                throw new IllegalArgumentException("Unknown dependency strictness " + dependency.getStrictness() + " in " + refRat);
            }
        } else {
            // We have the context of the object that we depend on. We need to check if it was provisioned.
            if (strictness == ResourceObjectTypeDependencyStrictnessType.STRICT || strictness == ResourceObjectTypeDependencyStrictnessType.RELAXED) {
                if (wasProvisioned(dependencyAccountContext, context.getExecutionWave())) {
                // everything OK
                } else {
                    // We do not want to throw exception here. That will stop entire projection.
                    // Let's just mark the projection as broken and skip it.
                    LOGGER.warn("Unsatisfied dependency of account " + projContext.getResourceShadowDiscriminator() + " dependent on " + refRat + ": Account not provisioned in dependency check (execution wave " + context.getExecutionWave() + ", account wave " + projContext.getWave() + ", dependency account wave " + dependencyAccountContext.getWave() + ")");
                    projContext.setSynchronizationPolicyDecision(SynchronizationPolicyDecision.BROKEN);
                    return false;
                }
            } else if (strictness == ResourceObjectTypeDependencyStrictnessType.LAX) {
                // TODO why return here? shouldn't we check other dependencies as well? [med]
                return true;
            } else {
                throw new IllegalArgumentException("Unknown dependency strictness " + dependency.getStrictness() + " in " + refRat);
            }
        }
    }
    return true;
}
Also used : ResourceObjectTypeDependencyType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType) ResourceObjectTypeDependencyStrictnessType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyStrictnessType) LensProjectionContext(com.evolveum.midpoint.model.impl.lens.LensProjectionContext) ResourceShadowDiscriminator(com.evolveum.midpoint.schema.ResourceShadowDiscriminator) PolicyViolationException(com.evolveum.midpoint.util.exception.PolicyViolationException)

Example 4 with ResourceObjectTypeDependencyType

use of com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType in project midpoint by Evolveum.

the class DependencyProcessor method determineProjectionWaveDeprovision.

private <F extends ObjectType> LensProjectionContext determineProjectionWaveDeprovision(LensContext<F> context, LensProjectionContext projectionContext, ResourceObjectTypeDependencyType inDependency, List<ResourceObjectTypeDependencyType> depPath) throws PolicyViolationException {
    if (depPath == null) {
        depPath = new ArrayList<ResourceObjectTypeDependencyType>();
    }
    int determinedWave = 0;
    int determinedOrder = 0;
    // This needs to go in the reverse. We need to figure out who depends on us.
    for (DependencyAndSource ds : findReverseDependecies(context, projectionContext)) {
        LensProjectionContext dependencySourceContext = ds.sourceProjectionContext;
        ResourceObjectTypeDependencyType outDependency = ds.dependency;
        if (LOGGER.isTraceEnabled()) {
            LOGGER.trace("DEP(rev): {}", outDependency);
        }
        if (inDependency != null && isHigerOrder(outDependency, inDependency)) {
            // otherwise we can end up in endless loop even for legal dependencies.
            continue;
        }
        checkForCircular(depPath, outDependency);
        depPath.add(outDependency);
        ResourceShadowDiscriminator refDiscr = new ResourceShadowDiscriminator(outDependency, projectionContext.getResource().getOid(), projectionContext.getKind());
        dependencySourceContext = determineProjectionWave(context, dependencySourceContext, outDependency, depPath);
        if (dependencySourceContext.getWave() + 1 > determinedWave) {
            determinedWave = dependencySourceContext.getWave() + 1;
            if (outDependency.getOrder() == null) {
                determinedOrder = 0;
            } else {
                determinedOrder = outDependency.getOrder();
            }
        }
        depPath.remove(outDependency);
    }
    LensProjectionContext resultAccountContext = projectionContext;
    if (projectionContext.getWave() >= 0 && projectionContext.getWave() != determinedWave) {
        // therefore there is a circular dependency. Therefore we need to create another context to split it.
        if (!projectionContext.isDelete()) {
            resultAccountContext = createAnotherContext(context, projectionContext, determinedOrder);
        }
    }
    //			LOGGER.trace("Wave for {}: {}", resultAccountContext.getResourceAccountType(), wave);
    resultAccountContext.setWave(determinedWave);
    return resultAccountContext;
}
Also used : ResourceObjectTypeDependencyType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType) LensProjectionContext(com.evolveum.midpoint.model.impl.lens.LensProjectionContext) ResourceShadowDiscriminator(com.evolveum.midpoint.schema.ResourceShadowDiscriminator)

Example 5 with ResourceObjectTypeDependencyType

use of com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType in project midpoint by Evolveum.

the class DependencyProcessor method checkForCircular.

private void checkForCircular(List<ResourceObjectTypeDependencyType> depPath, ResourceObjectTypeDependencyType outDependency) throws PolicyViolationException {
    for (ResourceObjectTypeDependencyType pathElement : depPath) {
        if (pathElement.equals(outDependency)) {
            StringBuilder sb = new StringBuilder();
            Iterator<ResourceObjectTypeDependencyType> iterator = depPath.iterator();
            while (iterator.hasNext()) {
                ResourceObjectTypeDependencyType el = iterator.next();
                ObjectReferenceType resourceRef = el.getResourceRef();
                if (resourceRef != null) {
                    sb.append(resourceRef.getOid());
                }
                sb.append("(").append(el.getKind()).append("/");
                sb.append(el.getIntent()).append(")");
                if (iterator.hasNext()) {
                    sb.append("->");
                }
            }
            throw new PolicyViolationException("Circular dependency, path: " + sb.toString());
        }
    }
}
Also used : ResourceObjectTypeDependencyType(com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType) ObjectReferenceType(com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectReferenceType) PolicyViolationException(com.evolveum.midpoint.util.exception.PolicyViolationException)

Aggregations

ResourceObjectTypeDependencyType (com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyType)6 LensProjectionContext (com.evolveum.midpoint.model.impl.lens.LensProjectionContext)5 ResourceShadowDiscriminator (com.evolveum.midpoint.schema.ResourceShadowDiscriminator)4 PolicyViolationException (com.evolveum.midpoint.util.exception.PolicyViolationException)3 ResourceObjectTypeDependencyStrictnessType (com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceObjectTypeDependencyStrictnessType)3 ObjectReferenceType (com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectReferenceType)1 ArrayList (java.util.ArrayList)1