Defect #1884
closed
Provisioning update in created state was executed after delete provisioning operation
90%
Description
Please prevent executed delete provisoning when exists some operation in created state. This will probably little issue for implementation, because created operation isn't probably committed.
Use case:- In IdM exists identity with expired contract,
- expired contract was processed by HrEndProcess,
- Hr process create one update event (identity changed state false => true),
- Hr process also create next provisioning operation (roles from identity was removed),
- Remove role created DELETE operation for end system (this is executed synchronously),
- After remove role still exists update operation in created state with connection to non exists system entity
Affected version: 9.7.0
Related issues
Updated by Radek Tomiška over 4 years ago
- Related to Task #1736: State of request on a systems (+ propagation to the VS) added
Updated by Radek Tomiška over 4 years ago
- Assignee set to Radek Tomiška
- Estimated time set to 16.00 h
Updated by Radek Tomiška over 4 years ago
- Category changed from Cache to Provisioning
Updated by Radek Tomiška over 4 years ago
- Status changed from New to In Progress
- Target version set to Rhyolite (9.7.9)
Updated by Radek Tomiška over 4 years ago
- Related to Task #1896: Add foreign keys to all entities added
Updated by Radek Tomiška over 4 years ago
- Status changed from In Progress to Needs feedback
- Assignee changed from Radek Tomiška to Vít Švanda
- % Done changed from 0 to 90
I've added foreign keys to provisioning operation table relations (system entity, batch and system). This will prevent to broke referential integrity.
I fixed source of this issue too - asynchronous operations for change the identity state and assigned role removal (by asynchronous role request) in hr process (HrEndProcess) are linked with super owner id, so now are asynchronous event executed in the proper order for the same identity (update first -> then delete).
Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/b7cfe8e55aa9542d9167d4507bc25cbb03b845ee
Could you do a feedback, please?
Updated by Vít Švanda over 4 years ago
- Status changed from Needs feedback to Resolved
- Assignee changed from Vít Švanda to Radek Tomiška
I did review and test. Works well, thanks for that.
Updated by Radek Tomiška over 4 years ago
- Status changed from Resolved to Closed
Updated by Radek Tomiška over 4 years ago
- Related to Defect #1904: Deadlock while change system identifier added