Project

General

Profile

Actions

Defect #1884

closed

Provisioning update in created state was executed after delete provisioning operation

Added by Ondřej Kopr about 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Radek Tomiška
Category:
Provisioning
Target version:
Start date:
10/01/2019
Due date:
% Done:

90%

Estimated time:
16.00 h
Affected versions:
Owner:

Description

Please prevent executed delete provisoning when exists some operation in created state. This will probably little issue for implementation, because created operation isn't probably committed.

Use case:
  1. In IdM exists identity with expired contract,
  2. expired contract was processed by HrEndProcess,
  3. Hr process create one update event (identity changed state false => true),
  4. Hr process also create next provisioning operation (roles from identity was removed),
  5. Remove role created DELETE operation for end system (this is executed synchronously),
  6. After remove role still exists update operation in created state with connection to non exists system entity

Affected version: 9.7.0


Related issues

Related to IdStory Identity Manager - Task #1736: State of request on a systems (+ propagation to the VS)ClosedVít Švanda07/01/2019

Actions
Related to IdStory Identity Manager - Task #1896: Add foreign keys to all entitiesNewRadek Tomiška10/08/2019

Actions
Related to IdStory Identity Manager - Defect #1904: Deadlock while change system identifierClosedRadek Tomiška10/15/2019

Actions
Actions #1

Updated by Radek Tomiška about 5 years ago

  • Related to Task #1736: State of request on a systems (+ propagation to the VS) added
Actions #2

Updated by Ondřej Kopr about 5 years ago

  • Description updated (diff)
Actions #3

Updated by Radek Tomiška about 5 years ago

  • Assignee set to Radek Tomiška
  • Estimated time set to 16.00 h
Actions #4

Updated by Radek Tomiška about 5 years ago

  • Category changed from Cache to Provisioning
Actions #5

Updated by Radek Tomiška almost 5 years ago

  • Status changed from New to In Progress
  • Target version set to Rhyolite (9.7.9)
Actions #6

Updated by Radek Tomiška almost 5 years ago

  • Related to Task #1896: Add foreign keys to all entities added
Actions #7

Updated by Radek Tomiška almost 5 years ago

  • Status changed from In Progress to Needs feedback
  • Assignee changed from Radek Tomiška to Vít Švanda
  • % Done changed from 0 to 90

I've added foreign keys to provisioning operation table relations (system entity, batch and system). This will prevent to broke referential integrity.

I fixed source of this issue too - asynchronous operations for change the identity state and assigned role removal (by asynchronous role request) in hr process (HrEndProcess) are linked with super owner id, so now are asynchronous event executed in the proper order for the same identity (update first -> then delete).

Commit:
https://github.com/bcvsolutions/CzechIdMng/commit/b7cfe8e55aa9542d9167d4507bc25cbb03b845ee

Could you do a feedback, please?

Actions #8

Updated by Vít Švanda almost 5 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Vít Švanda to Radek Tomiška

I did review and test. Works well, thanks for that.

Actions #9

Updated by Radek Tomiška almost 5 years ago

  • Status changed from Resolved to Closed
Actions #10

Updated by Radek Tomiška almost 5 years ago

  • Related to Defect #1904: Deadlock while change system identifier added
Actions

Also available in: Atom PDF