All Classes and Interfaces

Class
Description
Definition of an access certification - a template for a set of access certification campaigns.
Either traditional "dynamic" action (add, modify, ...), or a search, that is considered to be an action since 4.8.
Common parts of definitions of activity-related reports.
Implements (represents) a run (execution) of an activity in the current task.
Supertype for all activity state types.
 
Object clustering options.
Exception from naming convention (because of assignment vs inducement dichotomy).
Created by honchar.
 
Created by honchar.
 
 
Common supertype for all authentication module definitions.
Parameters describing the details of the situation we want to check authorization for.
 
 
 
 
 
 
Script evaluator that caches compiled scripts in AbstractCachingScriptEvaluator.scriptCache.
 
Abstract clockwork-based synchronization action.
Run of a set of child activities.
 
A superclass for both resource object constructions (ResourceObjectConstruction) and persona object constructions (PersonaConstruction).
Builder for all the constructions (resource object and persona).
Abstract supertype for constructions.
Current state of a correlator being used.
Definition of a correlator.
Common definition for all authentication modules that use password.
 
 
 
Statically-typed "execute-script" or "evaluate-expression" action.
Supertype for "execution" actions, carrying some common properties.
Evaluates an expression defined by AbstractExpressionEvaluator.expressionEvaluatorBean.
Supertype of report export types.
Abstract supertype for all form items.
 
 
Superclass for global caches handling objects, versions, and queries.
 
 
abstract factory for all InputPanel panels
 
Common supertype for both ItemDeltaItem and ObjectDeltaObject.
 
 
 
Abstract type for key from key store.
 
Configuration of the logger: the facility that collects log messages from the code.
Builder is used to construct a configuration of Mapping object, which - after building - becomes immutable.
Functionality common to all "mapping config items".
 
Evaluation of a mapping.
Defines how a value of a property (or attribute) should be constructed.
 
 
 
 
Common supertype for item normalization steps (for custom indexing).
 
 
 
This is NOT autowired evaluator.
Abstract supertype for all data types that specify configuration properties for a specific object type (User, Role, Org, Resource, ...)
 
 
Umbrella class for each page that should have the look and feel of login page.
 
 
Common definition for all authentication modules that use password.
 
Basic data structure for all policy constraints.
Exception from naming rules
 
Created by honchar
Basic super type for predefined configuration of account activation.
 
Takes care of reading JSON/YAML to XNode.
 
TODO
 
Abstract type for configuration of reports.
Definition for report-related activities.
Abstract action for all search-based operations, such as export and verify.
 
 
 
Base REST controller class providing common (utility) methods and logger.
 
 
 
 
 
 
Abstract class that contains the "essence" of a role.
Expression evaluator that is using javax.script (JSR-223) engine.
 
Expression evaluator that is based on searching for an object of `O` type meeting specified criteria (like entitlement shadow), and then converting it into "processed" form (like association value).
Cache for search expression-based evaluators.
 
 
 
Abstract "standalone" security profile, identified by an ID.
Abstract supertype for various expression and related profiles.
Common definition for all authentication modules that use security questions.
Abstract type for key from string representation.
Information about mapping or expression source during evaluation.
 
 
 
Prints statistics in selected format.
 
 
 
 
Class provides OperationResult summarizing functionality for result handler.
 
Abstract synchronization action - either clockwork-based or arbitrary one.
Common supertype for various thread-local caches (parts of RepositoryCache but also others).
 
Something of interest during tracing of some low-level operation i.e.
Common superclass for TreeTablePanel and OrgTreeTablePanel
 
 
 
Evaluates transformational expression: one that transforms input values to output values.
 
 
 
 
Abstract supertype for description of bucket contents.
IMPLEMENTATION NOTE: The fields in sub-classes should be immutable! (TODO: why?)
Marker type for an activity work definition.
TODO EXPERIMENTAL
TODO
Common superclass for workflow (approval) work item, certification work item and case management work item.
Describes how to segment the work into buckets and manage them.
 
Base type for all write capabilities.
Writes XNode into JSON/YAML.
Created by Viliam Repan (lazyman).
 
 
 
Java class for AccessAnnotationType.
 
 
 
 
Scope for assignment-related reviews.
An enumeration that defines possible states of a certification campaign.
Definition of an access certification campaign.
 
An enumeration that defines possible strategies for case outcome (approval) computation - currently both at the stage and campaign level.
 
Statistics give a set of access certification cases.
 
An item that has to be certified, viewed in the scope of a given certification campaign.
Configuration for access certification.
Access certification definition augmented with report-related information (e.g.
Access certification definition.
An event related to access certification.
An interface through which external observers can be notified about certification related events.
The most common way of specifying scope - providing type+search filter to select "base" objects and then some means of deriving certification cases from them.
TODO
TODO
An enumeration that defines possible styles for certification case remediation.
An enumeration that defines possible reviewers' responses.
Created by Kate on 15.12.2015.
Specifies how to select reviewers for a campaign stage.
Specifies the scope of an access certification campaign.
Interface to access certification related functionality.
Definition of an access certification campaign stage.
Information about a stage of a campaign.
Methods that facilitate working with AccessCertificationCampaignType and related objects at the repository level.
 
A work item for a certification case.
Decision about access to something.
Created by Viliam Repan (lazyman).
A configuration request access UI
TODO
 
 
TODO
 
 
 
 
Denotes an object capable of receiving an acknowledge that an item was processed.
Action<E extends Exception>
 
Base implementation class for action, that is Ninja command.
What XSD-derived class provides the configuration of this synchronization action? Used to find action implementation for given configuration.
Executes an action of a given type.
Executes a given action (add, modify, delete, enable, disable, assign, ...)
Contains various objects needed for the instantiation of a synchronization action.
Value of a parameter for an action.
Class that allows to return result and expected exit code from action execution.
Records information about actions on repository objects.
Collects actions executed information from a single item processing.
 
 
 
 
URI or URIs pointing to the given action.
Describes capability to process activation data, which means enable/disable of accounts, dates for scheduled enable/disable and similar things related to make the account active.
 
 
Created by Viliam Repan (lazyman).
Describes capability to provide lockout status (e.g.
 
 
The processor that takes care of user activation mapping to an account (outbound direction).
Describes capability to provide activation status (e.g.
An enumeration that indicates the activation status of a particular entity.
 
Type that defines activation properties.
 
Describes capability to provide activation validity dates (validFrom, validTo)
Item processing information for activity tree.
Shows "item processing" statistics for a collection of activities.
Provides statistics (item processing, synchronization, actions executed) for an activity with sub-activities.
Panel for activity-level statistics (item processing, synchronization, actions executed) for a list of activities.
Tailors the work specification by adding activity or activities before or after existing ones, or by changing specification (execution mode, flow of control, distribution) of existing activities.
Binds together all the information about an activity and its run (if present).
Must be thread-safe.
Shows what actions were executed.
Objects affected by a simple activity.
TODO
Work definition for the auto-scaling activity.
Work state for the auto scaling activity.
Handler for tasks that are based on activity (activities) definition.
Implementation of TaskInformation based on new, activity-based tasks.
A run of an activity-based task.
TODO
TODO
Information about the bucket processing within an activity.
 
Information about bucket management operations performance within an activity.
 
TODO
Defines control flow aspects of an activity: various preconditions, error handling, and so on.
TODO
Defines the features related to the flow of control within an activity (simple or composite).
Counters related to the execution of the activity, grouped into related categories.
A group of related counters.
A single counter.
Customization of an activity in a task template; e.g.
No change.
Replacing the set of objects in the root activity.
Definition of an activity.
Helps with creating ActivityDefinitionType objects.
Describes an activity, i.e.
 
Defines the distribution aspects of an activity: buckets, worker tasks, worker threads, subtasks, and so on.
TODO
Describes how we are going to distribute the work that is to be done: how to divide it into work buckets, and how to distribute these buckets to worker tasks.
Specifies a reaction when a given error during activity execution occurs.
Specifies a strategy for handling errors during iterative activities.
An event related to an execution of an Activity.
Option about logging a particular task-related event.
Defines "execution mode" aspects of an activity: production/preview/dry-run/...
Detailed definition of the execution mode.
Spring component that ensures handling activity invocations.
Registry of activity handlers for different work definition types (either standard or customer-provided).
How should the activity deal with item counting, i.e.
When are expected items in a bucket counted in an activity?
"Items processing" statistics for a single activity.
This is "live" iteration information.
Prints the item processing statistics.
Information about item processing in given activity.
 
Notifies external observers about activity-related events.
Controls logging aspects of an activity execution.
When are expected items (overall) counted in an activity? Just like ActivityItemCountingOptionType but currently does not support distinguishing based on bucketed/non-bucketed.
Object identifying an activity in the (logical) activity tree.
Path from the root of the activity tree to the specified activity.
Extract of the most relevant performance information about an activity.
Output of activity precondition expression.
 
 
Takes care of reporting the activity progress.
 
TODO better name
Summarized representation of a progress of an activity and its sub-activities.
 
Builds ActivityProgressInformation from task tree or from root task with tree overview.
 
Prints activity progress information.
Progress of an activity.
 
A realization of an Activity is complete.
Realization state of an activity.
Should be an activity re-executed when the task is restarted (e.g.
A collection of related report data objects.
Reporting characteristics of an activity.
Defines reporting features of the activity, like logging, tracing, profiling, and reports.
Provides default values for some of the ActivityReportingDefinition items.
How should the task report its various aspects?
Defines specific activity-related reports.
Reports related to activity execution.
 
Exception that carries supplementary information on how it should be treated (with the respect to operation result and task run result status).
Context for instantiating activity run.
Information about individual activity run.
Result of an run of an activity.
Creates (typed) AbstractActivityRun objects for given activity.
Realization state of an activity - simplified for the sake of activity overview.
Represents a running simulation with open simulation result.
Should the simulation result be created for the activity? If so, how?
State related to the "simulated" execution of this activity (and its children).
 
TODO better name Defines basic facts about activity work state, like type of the work state, the persistence level, and so on.
Parameters related to the maintenance of activity tree state overview.
Is progress information present?
How is the progress updated?
Describes an overview of the state of an activity.
Utilities related to the helper activity tree state overview structure (maintained in the root task).
 
How much is the activity state (full / overview) persistent across individual realizations?
Describes the state of an activity.
Utility methods related to activity state and activity work state.
 
Statistical information for individual activities.
 
How the part is realized via subtask.
Must be thread-safe.
Information about synchronization situations of objects processed by synchronization-related tasks: live sync, import, reconciliation.
 
 
TODO
Execution state of an activity task - to be used in activity overview.
State of the local activity run in an individual task.
 
Definition for tracing execution of an iterative activity.
 
Represents the tree of activities that comprise a logical task.
Responsible for purging detailed state of the activities, including worker and delegator tasks.
Realization state of an activity tree.
Represents the activity tree state overview that is stored in the root task.
Describes the state of an activity tree.
Utility methods for navigating throughout activity trees, potentially distributed throughout a task tree.
Activity state with all the necessary context: the path, the task, and the partial states of coordinated workers.
Activity state in local context: just the path and the state.
 
 
 
 
 
State of the worker tasks (in the broad sense - i.e.
 
Statically-typed "add" action.
Denotes ADD, DELETE, REPLACE sets in item deltas.
 
Creates a focus object for (typically unmatched) shadow.
Creates an owning focus for the resource object.
Authorizations to be applied in addition to or instead of the ones of current/selected subject.
Created by Kate on 19.09.2016.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
AddObjectContext<S extends ObjectType,Q extends QObject<R>,R extends MObject>
Add object operation context; used only for true add, not overwrite which is more like modify.
Result of the addObject operation.
Indication that ADD and REMOVE of attribute values is reliably supported.
 
 
Configuration related to approvals GUI.
Default display formats for various UI elements.
 
 
Role management features that are potentially user-specific i.e.
Administration GUI configuration.
The enum describes the administrative availability of the resource, if it is operational or undergoing maintenance.
Structure containing metadata about administrative operational state of the resource.
Created by Viliam Repan (lazyman).
Advanced features needed for activity run, like 1.
 
Contains free form logging configuration.
 
Provides just a core of AffectedObjectsInformation - the set of objects.
Information about objects affected by an activity plus some extra data (type of activity, execution mode, and so on).
 
Condition controlling item report collection that is evaluated after the item is processed.
 
 
 
 
 
 
 
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
AjaxTabbedPanel<T extends org.apache.wicket.extensions.markup.html.tabs.ITab>
Ajaxified version of the tabbed panel.
 
 
 
Filter designed to explicitly match everything.
 
 
 
This policy constraint always applies.
Representation of AMQP 0-9-1 message attributes.
Representation AMQP 0-9-1 message.
AMQP client configuration
The container consists of statistical data about role analysis cluster.
 
 
 
 
 
A list used for JAXB getAny() methods.
Async update carrying any data.
 
 
Any value (property, reference, container).
 
 
 
 
Configuration of the logger: the facility that collects log messages from the code.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Specification of policies that are applicable to this object type.
Created by honchar.
Created by honchar.
 
Statically-typed "apply-definition" action.
Applies definitions to relevant objects.
Created by honchar
Prescribes how individual approval requirements should be composed into overall approval schema.
Describes the approval context, i.e.
TODO clean up these formatting methods
Result (outcome) of an approval process stage.
 
Approval action.
 
Extract from ApprovalSchemaExecutionInformationType that could be directly displayed via the GUI as "approval process preview" (either for the whole process or only the future stages).
TEMPORARY IMPLEMENTATION.
TEMPORARY IMPLEMENTATION.
Trace for operation(s) that create approval process start instruction(s).
Information on actual or expected execution of an approval schema.
 
Rules for approving something (e.g.
Provides functionality that deals with the approval cases.
One "level" (or stage) in the approval process.
GUI-friendly information about historic, current or future execution of a given approval stage.
Information of an actual or expected execution of an approval stage.
Preview of an execution of an approval stage.
Record of an actual execution of an approval stage.
Utility methods related to approval cases.
 
GUI-friendly information about an engagement of given approver in a historic, current or future execution of an approval stage.
Definition of GUI-related configuration for the archetyped objects.
Component that can efficiently determine archetypes for objects.
 
 
Definition of archetype policies, such as object template, lifecycle, type display properties and so on.
Processes the `archetypeRef` clause.
 
Module is used for the refining user search based on archetype selection.
Defines a set of archetypes.
 
Archetype definition.
Type of the archetype determining how it can be assigned and used.
 
Specifies category or "area" of a particular concept.
Delta processor for multi-value property represented by single array column.
Filter processor for multi-value property represented by single array column.
ActiveMQ Artemis target.
 
Formats data as "nice" ASCII table.
Returns value set triple of the default source.
 
Copy value as is, without any modification.
Statically-typed "assign" action.
 
Request to evaluate a mapping held by an assignment (in focusMappings container).
Resource object construction that was assigned to the focus.
 
 
These are "purified" parameters: targets and constructions to assign.
Data structure that contains information about possible assignment targets or holders for a particular object.
 
Created by honchar.
Created by honchar.
Specifies constraints on assignments that are placed in the same focus.
 
 
Created by Viliam Repan (lazyman).
 
TODO: unify with AssignmentItemDto
 
 
 
Trace for assignment evaluation operation.
An engine that creates EvaluatedAssignment from an assignment IDI.
 
 
 
 
 
 
 
Handles everything about AssignmentHolder-typed focus: inbounds (for FocusType), activation before object template (for FocusType), object template before assignments, activation after object template (for FocusType), assignments (including processing orgs, membership/delegate refs, conflicts), focus lifecycle, object template after assignments, activation after second object template (for FocusType), credentials (for FocusType), focus policy rules. All of this is executed with regard to iteration.
Abstract supertype for all object types that can have assignments.
 
 
When new assignments are being created (either as part of focus "add" or "modify" operation), we need to know their PCV IDs beforehand.
Not to be confused with AssignmentDto.
TODO: unify with AssignmentEditorDto
 
Merges AssignmentType objects.
A merger specific to assignment: creates inheritance relations between the same assignments (matched by kind and intent).
 
 
Constraint that triggers the rule when the object is assigned.
Assignment object relation specification.
 
Describes assignment origin, namely: - if it's in object old, current, or in delta; - if it's virtual or not; - where it originated - ConfigurationItemOrigin.
Path from the source object (focus) to the ultimate assignment that is being processed or referenced.
Path from focus object to a given assignment.
Assignment path leading to this data.
 
Single assignment in an assignment path.
Primary duty of this class is to be a part of assignment path.
 
One segment in the metadata assignment path.
One segment in the assignment path.
Sequence of assignment paths, e.g.
 
 
TODO
 
Created by honchar.
 
Assignment processor is recomputing user assignments.
 
Overall assignmentRelation approach for archetypes objects.
Specifies what types of assignments can be made to the focal object when it is a target of an assignment.
 
 
 
Trace for assignment evaluation operation.
Selects some assignments from all the assignments in the object.
Abstract superclass for dialogs that display a list of assignments.
A key for assignment:mode => modifications map (for policy state).
Created by honchar.
 
 
 
Creates an assignment (or assignments) based on specified conditions for the assignment target.
Create an expression that provides an assignment based on search results.
Evaluates all assignments and sorts them to triple: added, removed and "kept" assignments.
 
Generic assignments of one object to another object.
 
 
 
Created by honchar.
 
EvaluatedPolicyRule that is associated to given EvaluatedAssignment, either as "own" (i.e.
Container for association-to-be-added in the context: resource shadow discriminator.
 
Provides information about definitions of associations.
Evaluation of an association mapping in resource object construction (assigned/plain).
Created by honchar For now only value/shadowRef and associationTargetSearch expression are supported to be edited.
Creates an association (or associations) based on projections of given role.
 
Definition of an expression that creates association from links (linkRefs)
 
Search expression evaluator dealing with shadows - requires specific invalidation strategies.
 
 
 
 
 
 
 
Creates an association (or associations) based on specified condition for the associated object.
 
 
Interface that provide ability to query status of asynchronous operation.
Primary goal of this class is to support asynchronous operations.
This may seems too simple and maybe pointless now.
Mode of asynchronous script execution.
Options for asynchronous script execution.
JAXB version of OperationRequested.Add class.
JAXB version of OperationRequested.Delete class.
JAXB version of OperationRequested.Modify class.
JAXB version of OperationRequested class.
Connection to asynchronous provisioning targets.
Connection to asynchronous provisioning target.
Activity handler for controlled processing of asynchronous updates.
 
Describes capability to process asynchronous updates.
How to handle errors during async update processing.
TODO
TODO
Information on async update listening activity.
Status of the asynchronous update listening activity.
Representation of an async update message.
 
Sources of asynchronous updates.
Source of asynchronous updates.
 
Executes the asynchronous update from a resource.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Specifies requirement on attribute values that should be passed to an operation.
 
Provides information about resource object attributes.
 
Evaluation of an attribute mapping in resource object construction (assigned/plain).
The way how an attribute is fetched from the resource.
 
 
 
 
 
The way how an attribute is stored in repo - in case of passive caching.
 
The module can be used as an additional verification of the already authenticated user.
 
 
 
Created by Viliam Repan (lazyman).
This class serves as simple POJO that is build from configuration available in SystemConfigurationAuditType.
 
Filter processor for an audit custom column attribute path (Prism item).
Audit event record describes a single event (usually data change) in a format suitable for audit.
One custom column property entry for audit record.
Common supertype for multi-value key-value properties in the audit record.
Temporary implementation.
 
One property entry for audit records.
Type representing named set of references for an audit record.
Type representing a single additional references for an audit record.
Audit event record describes a single event (usually data change) in a format suitable for audit.
Enumeration that helps distinguish phase when and where audit record was created.
Stage of event processing: request or execution.
 
Type of audit event, see the usage for more information.
Audit factory is a managed component that hides multiple actual AuditServiceFactory components - and AuditServices they create - behind a single proxy implementation.
Uses cache repository service to resolve object names.
Constants related to case management
Provides specific (approval/provisioning/correlation) functionality related to auditing.
Throw-away object realizing DB insertion of a single AuditEventRecordType and all related subentities.
Created by honchar.
Created by honchar
Filter processor for audit properties stored in a single JSONB column.
 
Restricted version of ObjectReferenceType/PrismReferenceValue to be used for audit records.
TODO - get rid of XMLGregorianCalendar - Date conversions
Clickable (first) column for audit records.
Service contract for audit - this can actually represent multiple audit services.
Interface representing a factor class providing concrete AuditService implementation.
 
 
 
 
 
 
 
 
 
Behavioral data about past authentications.
 
 
Wrapper for define channel of authentication, channel define scope of authentication etc.
AuthenticationEvaluator<T extends AbstractAuthenticationContext,A extends org.springframework.security.core.Authentication>
Evaluator which checks credentials of identity and return authenticated data about authenticated identity.
 
 
 
Define actual state of authentication module between requests
Definition of authentication modules that midPoint is aware about.
 
 
Channel specification for authentication sequence.
Necessity, i.e.
Specification of authentication module in the sequence.
Authentication sequence.
 
Definition of the use of authentication mechanisms.
 
Define authentication module created by module configuration, with all filters and configuration
Parsed form of AuthorizationType.
Definition of authorization.
 
 
Limitations of this authorization when it is applied to other authorizations.
A request to evaluate authorization-based access decision.
A request to evaluate authorization-based filter processing.
Request to evaluate authorizations for diagnostics purposes.
Response of diagnostic evaluation of authorizations.
How the evaluation should be traced.
Exception indicating violation of authorization policies.
Limitations of this authorization when it is applied to other authorizations.
Migrates authorizations from a legacy format into a new one.
Object-related authorization parameters.
 
 
 
Authorization define fine-grained access to midPoint objects and system functionality.
 
Collects auto-assignment mappings from auto-assignable roles.
Unfortunately, this cannot extend MappingConfigItem because of the conflict in generic type parameters.
 
 
 
Specification of role auto-assignment properties.
 
 
 
 
Autocomplete field for QNames.
 
 
 
 
 
 
Autocomplete field for Strings.
Reason for automated decision.
 
Provides simple "auto refresh" panel: buttons for start/stop auto refreshing, requesting manual refresh, and status label.
Activity handler for "auto-scaling" activity.
 
Defines how auto-scaling should be carried out.
 
Describes capability to specify additional (auxiliary) object classes in addition to the primary object class.
The enum describes the availability of the resource, if it is down, unreachable or ok.
Available (saved or preconfigured) filter which can be applied during the search.
Reads files: * localization/locale.properties from classpath * locale.properties from _midpoint.home_ Loads available locales, format of properties is: .name= .flag= # used for css of flag .default=true e.g.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
TODO implement more cleanly
 
 
 
 
This class provides an empty implementation of AxiomListener, which can be extended to create a listener which only needs to handle a subset of the available methods.
This class provides an empty implementation of AxiomVisitor, which can be extended to create a visitor which only needs to handle a subset of the available methods.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
This interface defines a complete listener for a parse tree produced by AxiomParser.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Marker interface for AxiomPath Arguments
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
This class provides an empty implementation of AxiomQueryParserListener, which can be extended to create a listener which only needs to handle a subset of the available methods.
This class provides an empty implementation of AxiomQueryParserVisitor, which can be extended to create a visitor which only needs to handle a subset of the available methods.
This interface defines a complete listener for a parse tree produced by AxiomQueryParser.
This interface defines a complete generic visitor for a parse tree produced by AxiomQueryParser.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
This interface defines a complete generic visitor for a parse tree produced by AxiomParser.
 
 
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
Abstract (base) action class for clustering and pattern detection.
 
Superclass for all action executors.
 
 
 
Base class for bucket content factories.
 
How should be the base context in the delineation used for the classification?
Abstract superclass for built-in correlators.
 
Deprecated.
Common base type for handler and notifiers - filtering and common information.
 
 
Created by Viliam Repan (lazyman).
BaseItemMerger<T extends Item<?,?>>
Provides common functionality for the majority for (non-trivial) item mergers.
 
Implements the actual merging of two objects (Containerable) of the same type.
 
Base for all operation handlers.
Created by Viliam Repan (lazyman).
 
Base class for most midPoint GUI panels.
 
 
 
 
 
 
 
Base worker class that either produces or consumes BaseWorker object for/from queue.
 
Library of standard midPoint functions.
 
 
 
Created by Viliam Repan (lazyman).
 
Specifies the basic features of a repository-based object set.
 
 
Specifies a set of resource objects to be processed with only basic identifiers.
 
 
 
 
 
 
 
 
 
 
 
Analogous to PrismUnmarshaller, this class unmarshals atomic values from XNode tree structures.
An enumeration that defines when the activity will be executed.
Condition controlling item report creation that is evaluated before the item is processed.
General-purpose behavioral data.
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
 
 
 
 
Specification of how string-based segments are delineated.
 
Breadcrumb object that is stored in the session.
Creates content for new buckets.
Creates configured bucket content factories.
 
Formats bucket content value into three columns (characterization, from, to).
Creates buckets when needed.
 
Generally useful constants related to bucketing.
Responsible for managing task work state: 1.
Methods related to bucketing part of an activity state and activity distribution definition.
Information about specific kind of work bucket management operation performance.
 
Information about bucket completion or analysis to be recorded in buckets report.
Information on buckets processing (for activity state overview).
Defines how buckets should be created.
Defines report on buckets processing.
Role in the work buckets processing.
Task progress counted in buckets.
Represents a report on individual buckets.
 
Defines the sampling of buckets.
 
 
TODO
TODO
Registry for built-in metadata mappings.
Built-in simulation metric.
A catalogue of all bulk actions.
 
Result of a bulk action execution.
 
Specifies limitations on the use of a particular bulk action (e.g.
Specifies restrictions and permissions for a specific bulk action.
Main entry point for evaluating scripting expressions.
Specifies limitations on the use of a scripting actions.
A profile concerning the use of bulk actions.
Interface of the Model subsystem that provides scripting (bulk actions) operations.
The BusinessRoleApplicationDto class represents a Data Transfer Object (DTO) that holds information about a specific role, its associated cluster, and a list of BusinessRoleDtos that holds information about a user's delta to a specific role.
The BusinessRoleDto class represents a Data Transfer Object (DTO) that holds information about a user's assignment to a specific role and associated deltas.
 
 
Created by honchar
 
Defines basic contract for local caches (various caching components or services).
This is a "compiled" configuration for a cache.
 
TODO consider better place for this component
Dispatches events to cache listeners (currently CacheRegistry and ClusterCacheListener).
Dispatches cache-related events - mainly invalidation ones - to all relevant listeners: CacheRegistry (grouping local caches) and ClusterCacheListener (for inter-node distribution).
Breadcrumbs text is not changing over time, we'll try to use this behavior to cache string value created by underlying IModel object.
Looking for resource bundle in compressed JAR and compressed libraries inside JAR is pretty expensive.
How to deal with remote cache invalidation uncertainty.
How is the cache invalidated? Currently applicable only to global repo cache objects.
Provides additional information/hints for the particular cache to employ.
Provides more specific information e.g.
 
 
Deprecated.
Settings for a given cache and object type(s).
Temporary implementation.
 
Prints cache performance information.
 
Registry of all local caches (various caching components/services).
Registry of all local caches (various caching components or services).
CacheAccessInfo for all six caches.
Creates CacheSetAccessInfo objects.
Settings for a given cache.
Information about performance of various caches present in midPoint.
Report on the state of midPoint caches.
Level of details when reporting cache performance statistics.
How are cache statistics collected.
Level of details when reporting cache performance statistics.
How cache statistics are collected and reported.
 
How was the cache used?
 
 
Profiles for various kind of caching.
Metadata that record when a cache copy was retrieved, the identifiers (etags) of that copy and possibly also other data.
Definition of object attribute caching policies.
Specific caching profile that can be used system-wide or for individual threads.
 
Definition of overall caching strategy.
 
Request to cancel the specified case.
 
 
 
 
A candidate owner along with its confidence value (a number between 0 and 1, inclusive).
 
 
 
 
Filter processor for an ItemPathType attribute path (Prism item) with canonicalization of the path before using it as a value for condition.
 
 
 
 
Collection of resource capabilities.
 
 
Collection of resource capabilities.
Abstract supertype for all (static schema) capabilities.
Various useful methods related to capabilities.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Event describing the completion of a workflow process instance.
Information related to correlation request that is to be resolved.
Event describing the creation of a workflow process instance.
An interface through which external observers can be notified about case-related events.
 
TODO
TODO
Event related to a case (as a whole).
An interface through which external observers can be notified about case-related events.
Dispatcher for case creation events.
 
Any event occurring during case lifetime that needs to be recorded, e.g.
 
Event related to case management: either case-level or work-item-level.
TODO specify and clean-up error handling
 
Utility methods related to case management.
Manipulation of work items and cases at the model API level.
 
 
Created by honchar
Methods that facilitate working with CaseType and CaseWorkItemType objects at the repository level.
 
TODO is this the correct place?
TODO
Companion light-weight utilities for CaseType and CaseWorkItemType.
Created by honchar
Created by honchar
 
Created by honchar
Created by honchar
Created by honchar.
 
A work item for a (generic) case.
Created by honchar
Created by honchar
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
Created by honchar
 
 
 
 
 
 
 
 
 
DTO for displaying cases as part of certification campaign information.
 
A common superclass for CertCaseDto + CertWorkItemDto.
Some common functionality used from PageCertCampaign and PageCertDecisions.
 
 
 
 
 
Provides a correct handler for a given handler URI.
BEWARE: CertificationManager is responsible for authorizing all actions carried out through it.
TODO
 
Event for certification reviewers (reminding him/her of the need to do the work).
DTO representing a particular workItem.
 
Describes a change that was detected on a repository object: - type - OID - additional information related object ADD/MODIFY/DELETE operation
 
Batch of changes to be executed.
Various information related to the execution of changes in an execution wave.
 
Executes precomputed changes.
TODO This applies to all changes, therefore it will "hook" into addObject, modifyObject and also deleteObject.
 
 
Classification of deltas (in approval case) according to their state.
 
 
 
Java class for ChangeTypeType.
Enumeration of built-in channels.
Describes migration from (potentially) old channel URI to a current channel URI.
 
Definition of valid characters in class.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Checkbox that is supposed to be used in forms - checkbox with label.
Almost the same as Runnable but this one can throw CommonException and is serializable.
Almost the same as Consumer but this one is Serializable and can throw CommonException.
 
Almost the same as Function but this one is Serializable and can throw CommonException.
 
Almost the same as Producer but this one can throw CommonException.
Runnable version with thrown exception.
 
Expression used to check the data and report a user-friendly message in case that the check fails.
 
Configuration of comment text field in last step (checkout) of request access UI wizard.
Configuration structure related to request access UI wizard and its last step - checkout.
Configuration of validity (assignment validity) for requested roles in last step (checkout) of request access UI wizard.
 
 
Created by honchar
 
 
 
 
 
 
 
 
 
Created by honchar
 
Created by Viliam Repan (lazyman).
 
 
 
TODO Loosely based on XML encryption standard.
Request to claim a work item (or multiple work items in given case), i.e.
 
Definition for a classic report export activity.
Definition for a classic report import activity.
Configuration of the logger: the facility that collects log messages from the code.
Created by Viliam Repan (lazyman).
Information how to override logging level for specified logger(s).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Various class path, class loading and class scanning utilities.
Externally-imposed exception from application of some clauses.
Description of the processing context, mainly for tracing and error reporting.
 
 
Activity execution for an elementary cleanup part.
Configuration of cleanup intervals and policies for various midPoint subsystems.
 
 
Configuration of cleanup intervals and policies for a specific subsystem or feature.
 
Definition for a cleanup activity.
 
System-wide clock.
The "clockwork" that drives the change processing.
Audit-related responsibilities during clockwork processing.
Represents and executes a single clockwork click.
 
Trace for Clockwork.click operation.
 
Resolves conflicts occurring during clockwork processing (multiple threads modifying the same focus).
 
 
Responsible for invoking hooks (both Java and scripting ones).
Evaluation of inbound mappings from all projections in given lens context.
Interface used to intercept the ModelContext as it passes through the computation.
 
Authorizes clockwork requests.
 
Trace for Clockwork.run operation.
Common clockwork-related settings for synchronization purposes.
 
Abstract trace for clockwork events.
 
 
 
Represents a role analysis cluster of data points of a specific type.
Interface for clustering actions in role analysis.
An interface representing data points that can be used in clustering algorithms.
 
An abstract base class for role analysis clustering data points of a specific type using a distance measure.
Generally, execute(..) methods prepare a configured WebClient (URL, authentication, ...) and execute specified client code on it.
 
Options related to remote code execution in the cluster.
Clustering action.
Utility class for performing clustering operations in the context of role analysis.
REST service used for inter-cluster communication.
URL pattern constants shared by cluster client and REST service.
 
State of the cluster for the purposes of auto-scaling.
The `ClusterStatistic` class provides statistics for a clustering operation, such as the number of members, properties, and various measures related to the clustered data.
 
Takes care for clusterwide user session management.
Takes care for clusterwide user session management.
 
 
 
Specification of an explicit or implicit object collection (including reference to the collection).
Depth parameter for collection interpretations that allow distinction between direct and indirect relation.
Method how implicit or explicit object collection should be interpreted.
Specification of an explicit or implicit object collection, without reference to the collection.
Stats (summary information) about a specific collection.
Constraints for collection stats (statistics).
Stats (statistics) setting and entries.
 
 
 
 
Just and extension of RelatedObjectsProvider, which prepends currently displayed processed objects into list of related objects (for better navigation).
Enumeration of Ninja commands (or actions).
TODO
 
 
Specifies a command to be executed on an operating system command-line.
Superclass for all common midPoint exceptions.
 
 
Generic communication exception.
Generic communication error.
 
 
EXPERIMENTAL.
 
 
Compiled user profile.
Compiled form of either object collection view or an implicit object collection, such as (e.g.) an ArchetypeType.
 
 
 
Result of a correlation operation.
 
 
Wraps everything we need to count or look for objects.
TODO EXPERIMENTAL
Request to complete a set of work items (on given case).
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Provides a definition for a complex type, i.e.
 
Direct implementation of ComplexTypeDefinition.
Created by Viliam Repan (lazyman).
 
Names of projector/clockwork components invoked by medic.partialExecute method calls.
Report on structured object size.
 
 
 
 
Composite correlator that evaluates its components (child correlators) and builds up the result according to their results.
Factory for CompositeCorrelator instances.
Definition of scaling for the composite correlator.
User-friendly way of defining a correlator or correlators.
 
 
 
 
 
 
 
 
 
Represents ad-hoc combination of definitions of structural and auxiliary object classes.
 
Represents ad-hoc combination of definitions of structural and auxiliary object classes.
Composition-enabled composite correlator.
Definition for pure composite activity.
This class is responsible for preparing the chunk structure for role analysis in the Midpoint system.
Do we do our computation during preview or during actual execution?
Exceptional concurrency state or operation invocation.
Exceptional concurrency state or operation invocation.
A filter with an expression that denotes a necessary condition for the filter to be applied.
 
Describes the evaluation state of assignment / object condition.
Generalized confidence information.
The Confidence extended by per-item confidence values.
This class should provide user-understandable messages related to configuration errors, i.e.
 
 
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Defines properties of a specific dashboard widget.
Provides value policy when needed (e.g.
Visitor with configurable behavior.
Configuration exception indicates that something is mis-configured.
Configuration exception indicates that something is mis-configured.
Helper class that provides complex information about a configuration item (e.g., a mapping).
Description of an origin of a configuration item (expression, mapping, and so on).
Represents an item that was defined out of context of any prism object.
Represents an item that was generated by the system.
An item that is a part of a delta (of unspecified provenience) that is targeting a given object.
A typical case: an item that is a part of a prism object.
Represents an origin we are not currently able to determine exactly.
Connector configuration properties
What parts of a system configuration (in the most broad sense of the word), or what changes thereof should be (or are) used for the particular execution? Most of the time, we are concerned with simulated executions, but in the future it is possible to tweak configuration in a way that will be safe to run in production.
 
 
 
TODO
Created by Honchar.
Created by Viliam Repan (lazyman).
TODO better name An expected conflict was detected by repository, throwing PreconditionViolationException.
Created by honchar.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
What to do in the case of modify-modify conflict during model (clockwork) operation.
How to resolve write-write conflicts on focal objects, i.e.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
A bit experimental.
 
 
Created by Viliam Repan (lazyman).
Resource configuration (hostname, port, ...).
 
 
 
Host definition for remote connector, remote connector framework or a remote "gateway".
Complete specification of a connector instance with configuration and capabilities.
 
Configuration of ConnId connector pools.
 
 
Description of a generic connector.
 
 
 
Information about a ConnId operation.
Obtains information about ConnId operations executed.
Represents a report on ConnId operations.
Defines report on ConnId operations.
Determines the scope of consistency checks.
 
 
 
 
TODO
Computes value metadata during consolidation.
 
Returns zero set with a single value obtained by resolving given https://docs.evolveum.com/midpoint/reference/expressions/constants/[constant].
 
 
 
 
How constraints checking (for focus and projections) should be done.
 
 
Created by honchar.
Collects evaluated constructions from evaluatedAssignmentTriple into a single-level triple.
 
State of a construction evaluation.
 
 
 
 
 
 
 
 
Strength of the construction defines how aggressively will the construction be applied.
Specifies the target of resource object construction - i.e.
Projection construction.
 
 
 
 
 
 
 
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
 
Request to process a containerable.
Handles iterative processes that concern containerables.
 
 
 
 
 
Created by honchar
Definition for the panel which will be used on details panel.
 
 
 
 
Delta value processor for multi-value containers stored in separate tables.
Resolver that knows how to traverse to the specified container table.
Update context for multi-value containers stored in separate table.
 
 
Allows customization of postFilter, pageStore and contentQuery for data providers
 
Generator assigning missing IDs to PCVs of multi-value containers.
 
Model that returns property real values.
 
 
Context loader loads the missing parts of the context.
 
 
 
 
Copyable<T extends Copyable<T>>
 
Copyable<T extends Copyable<T>>
 
 
 
 
 
 
Module is used for the user authentication using the correlation rules.
Describes a correlation case, typically when it's going to be presented to the user.
 
 
How well the candidate matches the object being correlated on given correlation property?
Manages correlation cases.
Legacy definition of whether to create correlation cases.
 
Defines the custom confidence value for given correlator.
These values are used to determine the correlation results.
The context of the correlation and correlator state update operations.
Context for correlating a focus to a set of matching focuses.
Context for correlating a shadow to a set of matching focuses.
 
Definition of a correlation (e.g.
Details of the error state for the use in CompleteCorrelationResult; and later maybe also in CorrelationResult.
Describes how the correlator (could) came to a given candidate owner, and the specific confidence value of it.
This is for correlators that support candidate check (i.e., determining confidence for the provided candidate) but do not provide any the specific explanations of their decisions.
This is for correlators that do not support neither explanation nor candidate check (i.e., determining confidence for the provided candidate).
Instance of a correlation item TODO finish! cleanup!
 
 
 
 
Item that should be correlated as part of this correlator (i.e., correlation rule).
 
Configuration for correlation module.
Defines some restrictions for the correlation authentication module.
Represents a correlation option: a candidate owner or a "new owner".
Contains information about a correlation property that is to be (e.g.) displayed in the correlation case view.
Values (primary and secondary) for given correlation property.
Result of the correlation at the level of Correlator, i.e.
Contains correlation-related methods that should be accessible from the outside of `model` module.
 
Provides correlation-related functionality, primarily on top of Correlator interface: .
TODO
Describes situations in which the correlator should be activated.
 
Finds a focus object for given resource object.
Definition of how the results of the correlator should be integrated in the parent (composite) one.
 
Wrapper for both typed (bean-only) and untyped (bean + item name) correlator configuration.
 
 
Overall context in which the correlator works.
Creates CorrelatorContext instances.
Used to select relevant correlator among multiple ones defined - currently only in object template.
Instantiates configured correlators.
A registry of correlator factories.
 
 
Merges AbstractCorrelatorType objects.
Utilities for manipulating correlators definitions.
 
TODO better place, better name
A loadable model of a list that knows how to provide count of list items without having to retrieve the actual data.
Tab that can display object count (small bubble with number) in the tab label.
 
Represents/carries out an execution of a set of updates of a counter group in an activity.
 
 
Delta processor for columns storing size of multi-value item.
Resolver that maps the container item to the count column.
Interface for objects that provide Wicket model which represents object count or similar tag.
Ability to efficiently count objects.
Strategy to simulate count operation using a different operation.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
 
Describes create capability.
 
Creates (or updates) a correlation case for resource object in "disputed" synchronization state, i.e.
Created by Viliam Repan (lazyman).
 
 
 
Mapping that provides storage/createTimestamp.
Interface for authentication module which works with internal midpoint credentials
Processor for evaluating credential policies.
 
Structure that specifies common elements to all the credential policies.
Describes capability to present credentials in a structured way.
 
 
Source of a new credential value.
Credentials management policy.
Processor for focus credentials.
Constraints that define how propagation of credentials can be controlled by the user.
Specifies the method of resetting the credential.
 
Credentials reset management policy.
 
Specifies the method of storing the credential in midPoint.
 
This is a container type for various credentials types: passwords, public keys, one-time password scheme identifiers, etc.
 
Specifies criticality of an operation.
 
Created by Viliam Repan (lazyman).
 
CSV export type for Report.
Formats data as CSV file.
Activity state for the current activity run.
Custom message source provided by a Java class.
Handles custom composite activities, see https://docs.evolveum.com/midpoint/reference/tasks/activities/#configuring-custom-composite-activities.
Work state for a custom composite activity.
TODO describe
 
 
Factory for custom events.
CustomImageResource generates images for role mining clusters based on a MiningOperationChunk.
Created by Viliam Repan (lazyman).
Normalization carried out using custom expression.
Custom notifier which uses expression to produce the message object.
Custom ways of evaluating a policy constraint.
Custom type transport that can be realized either as a Java class (e.g.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Specifies layout of a dashboard, such as the user dashboard (home screen) or administration dashboard.
 
Configuration of dashboard-based reports.
Created by honchar.
 
 
Configuration Dasboard dashboard showing in GUI.
 
 
Properties of a specific widget data field.
Type of the field.
Specifies widget data source.
 
Specifies widget presentation properties.
Type of widget content data source.
Defines properties of a specific dashboard widget.
Conditional variation in the way how the widget is displayed.
Data to be displayed.
Parts of SchemaTransformer devoted to applying read constraints to objects and deltas (by removing invisible items and values).
 
 
Temporary implementation.
 
EXPERIMENTAL
 
 
 
EXPERIMENTAL
 
 
Represents a data point for clustering, containing members and properties.
Parts of SchemaTransformer devoted to modifying prism data and definitions according to policies in object templates or archetypes.
Container which specify legal content for the role related to the GDPR.
Data Provider registry for customizable data providers
Spring based Data Provider registry Factories are expected to be instantiated by Spring using Component annotation and autowired using Autowired
 
Converter for Date to String.
 
 
Created by honchar Component for displaying date value as a label By default (if no converter is set) the date is formatted according to the client's locale, timezone (not implemented yet), with applying long style for date and long style for time.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
Options that will be used for date time picker in js.
 
Panel for Date.
 
Way of rounding deadline(s) e.g.
Cleanup policy for dead nodes.
 
 
 
 
 
 
 
Debugging listener for reconciliation tasks.
 
 
 
 
Represents the "deep clone" and "ultra deep clone" operations on items and complex type definitions.
List that freezes its members as well.
Reference that freezes the referenced object as well.
 
 
Whether to use default approval policy rules.
Column related utilities shared by reporting and GUI.
 
 
A class responsible for executing the detection of patterns in role and user mining chunks/role analysis process.
 
Default expression profiles to be used in specific situations.
 
Default phase or phases for evaluation of inbound mappings.
Declarative information how an item (from schema/prism world) is to be processed when interpreting query.
Default matching rule used as a fall-back if no explicit matching rule is specified.
A NaturalKey implementation that uses a simple list of constituent items to compare container values.
 
The DefaultPatternResolver class is responsible for detecting and resolving patterns within a role analysis session.
Used when PrismReferenceValue.getRealValue is called, and no referencable is present in the PRV.
 
 
Common interface to access all definitions.
Parts of SchemaTransformer devoted to modifying prism definitions according to access allowed.
 
 
Factory for prism definitions (Definition and all its subtypes in prism-api).
 
Abstract definition in the schema.
How should be definitions processed when object is to be retrieved.
How should be definitions processed when object is to be retrieved.
Resolves a definition in a parent.
 
Created by honchar.
 
 
 
 
 
 
Created by Kate Honchar.
 
 
 
 
Should be definitions updated after an object is retrieved via model API? See `applySchemasAndSecurity` method.
 
 
If an account is unassigned and there is no other existing assignment for an account midPoint will de-provisioning that account.
This evaluator delayed delete base on duration from configuration DelayedDeleteActivationMappingType.
 
 
 
 
TODO EXPERIMENTAL
Request to delegate work items (of a given case).
 
 
This is default item delta processor that decides what to do with the modification.
 
Created by honchar.
 
State for a delegation (delegating) activity run.
See https://docs.evolveum.com/midpoint/reference/security/authorization/configuration/selectors/delegator/.
Statically-typed "delete" action.
 
Created by Honchar.
Describes delete capability.
 
Executes the "delete" action.
 
Deletes the owning focus for the resource object.
Contains information about object deletion result; primarily needed by repository caching algorithms.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Deletes the resource object.
 
Deletes specified objects.
 
Deletes specified objects.
 
Grammar ---- ObjectDelta ::= (ItemDelta)* ( 'OBJECT-DELTA(oid)' | 'ITEM-DELTA' | 'ITEM-DELTAS' ) ItemDelta ::= 'ITEM(...)' ( ( 'ADD-VALUES(...)' 'DELETE-VALUES(...)'? ) | ( 'DELETE-VALUES(...)' 'ADD-VALUES(...)'? ) | 'REPLACE-VALUES(...)' ) ---- When combining DELETE and ADD prefer using DELETE first to match the actual behavior.
Options used when serializing deltas to "bean" form (ObjectDeltaType).
Converts between "XML" (i.e.
 
Just a marker interface for now, reminding us that there seems to be a repeated pattern of "delta execution preprocessors" (currently OperationalDataManager, TaskOperationalDataManager, and IndexingManager) that tweak the deltas before they are executed.
TODO clean up these interfaces!
Deprecated.
 
Deprecated.
Deprecated.
 
 
 
 
 
The triple of values (added, unchanged, deleted) that represents difference between two collections of values.
The triple of values (added, unchanged, deleted) that represents difference between two collections of values.
Responsible for consolidation of delta set triple map (plus, minus, zero sets for individual items) to item deltas.
 
Experimental.
 
TODO EXPERIMENTAL
Utility class for keeping things in three: plus, zero and minus.
Performs density-based clustering of data points based on specified parameters and distance measure.
 
 
 
 
 
 
 
 
Information about midPoint deployment: subscription information, deployment name, description, color and so on.
Deprecated.
Experimental.
loader for url, initialize all urls with authorizations
 
 
Specifies the method how page save/preview buttons are shown and processed.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Filter processor for a an attribute path (Prism item) that is stored in detail table.
The `DetectedPattern` class represents a detected pattern in role analysis.
 
The `DetectionActionExecutor` class is responsible for executing the pattern detection process within the role analysis.
The `DetectionOperation` interface defines the operations required for performing pattern detection within the role analysis process.
The `DetectionOption` class represents detection options for role analysis.
 
 
 
A diagnostic information attached to an object.
 
 
Expands object references (from pointers to dictionary to full objects).
 
JAXB representation of DigestMethodType.
 
 
Specific elements for export/import.
Direction of report.
 
Object resolver that works on files in a directory.
Statically-typed "disable" action.
This evaluator change midpoint default behaviour and disable account.
Describes capability to do configuration discovery, check and recommendation (`DiscoverConfigurationApiOp`).
Executes "discover-connectors" action.
Suggested configuration properties of connector.
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
TODO: refactor for lazy loading
 
 
Specifies the kind of view of value.
A distance measure interface for calculating the similarity or distance between two sets of values.
Specifies whether "distinct" option should be used in database searches.
Matching rule for LDAP distinguished name (DN).
Definition for a distributed report export activity.
An activity that distributes (usually bucketed) activity to a set of worker tasks.
URL format: https://download.evolveum.com/midpoint//midpoint--dist.zip VERSION can be: 3.4.1, ..., 4.7, latest VERSION_NUMBER can be: 3.4.1, ..., 4.7, SNAPSHOT
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Universal button to display drop-down menus.
 
 
 
 
 
DummyItem<V extends PrismValue,D extends ItemDefinition<?>,R extends Item<V,D>>
 
TODO
A no-op implementation of Operation used when there's nowhere to record the execution to.
EXPERIMENTAL
 
 
Module is used for 2FA authentication.
 
 
 
 
 
 
 
 
 
 
Maps namespaces to preferred prefixes.
 
 
 
 
 
TODO
 
How were the effective privileges modified?
A sub-activity that does not have its own (explicit) definition.
Delta processor for whole embedded single-value containers.
Resolver supporting dereferencing of embedded references.
Custom configuration (factory) for embedded tomcat factory.
 
 
 
 
Type that contains nothing.
Statically-typed "enable" action.
 
Implements "enable" and "disable" actions.
TODO Contains data protected by (reversible) encryption.
 
TODO Loosely based on XML encryption standard.
Enforcement action.
Provides functionality that the case engine calls when dealing with specific case archetypes (like approval cases, etc).
 
 
Simple type, which behaves as enumeration in most modeling languages.
Definition of enumeration value
 
 
Delta processor for an attribute path (Prism item) of enum type that is mapped to matching PostgreSQL enum type - this allows to use schema enums directly.
Filter processor for an attribute path (Prism item) of enum type that is mapped to matching PostgreSQL enum type - this allows to use schema enums directly.
Filter processor for a an attribute path (Prism item) of enum type that is mapped to SQL as ordinal value.
EnumPanelFactory<T extends Enum<?>>
 
 
 
Thread safety: Instances of this class may be accessed from more than one thread at once.
Statistics related to performance and state of external environment, namely provisioning via connectors, mappings (as these might contain code that invokes external systems), and notifications.
 
 
Explicit "equals" interface for easy lambda usage.
A strategy used to determine equivalence of prism items and values.
Categorizes errors.
Executes iterative task error handling strategy.
 
 
What should a task do when an error of given type is encountered? Only some combinations of values are allowed: ignore (+ stopAfter), retryLater (+ stopAfter), stop.
Selects error categories, e.g.
Description of an error condition to act on.
PoC implementation of dumping a "logical" stack, consisting of a sequence of nested OperationResult objects.
Describes the "error state" of the current activity run.
TODO EXPERIMENTAL
Facade interface for evaluated resource object and persona constructions.
 
Evaluated resource object construction that is assigned to the focus.
 
Evaluated assignment that contains all constructions and authorizations from the assignment itself and all the applicable inducements from all the roles referenced from the assignment.
 
 
 
 
 
 
 
 
 
Represents triggered exclusion constraint.
 
 
 
 
 
 
 
 
 
 
 
 
Evaluated resource object construction that is defined in the schemaHandling part of resource definition.
TODO document this interface and its methods
To which object is the policy rule targeted, from the point of assignment mechanisms - and how? For example, if it's assigned to the focus (to be applied either to the focus or the projections), then it's EvaluatedPolicyRule.TargetType.OBJECT.
 
Description of a situation that caused a trigger of the policy rule.
 
 
 
Arranges externalized triggers into trees according to presentation instructions (hidden, final, displayOrder).
 
 
 
Facade interface that provides insight about construction that was evaluated by projector code.
Evaluated construction of a resource object.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Statically-typed "evaluate-expression" action.
Executes "evaluate-expression" (s:evaluateExpression) actions.
This is to reduce the number of parameters passed between methods in this class.
 
 
Java class for EvaluationTimeType.
 
Notification event that should be propagated, filtered, externalized (typically to ascii or html), and send out.
TODO
Dispatcher of change notifications.
Set of callback methods used to convey information from the validator to the "working" code.
Handles a single notification event.
Currently used for custom event handlers, as they are security-sensitive.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
An event handler type - extends common handler with filter/info and additionally can contain one or more notifiers of various kinds.
Domain of a given event mark.
Information specific for event marks.
TODO
Global context for processing a single event.
 
 
TODO
Created by lazyman on 09/03/2017.
 
A specific matching rule for Microsoft Exchange EmailAddresses attribute consisting of SMTP:/smtp: prefix and email address.
Evaluates exclusion policy constraints.
Container that defines exclusion of entities (e.g.
 
 
 
A response from executeChanges operation.
A request for executeChanges operation.
 
 
 
Statically-typed "execute-script" action.
 
Executes "execute-script" (s:execute) actions.
 
Output of a single script execution.
 
Result of a single script execution.
 
A response from executeScripts operation.
A request for executeScripts operation.
 
Context of a command execution.
 
TODO
Privileges and identity that will be used to execute an expression or similar operation.
 
Functionality that supports the activity execution that is going on within this task.
Group of counters.
 
 
Filter processor that resolves ExistsFilter.
Used to signal that we have to exit handler processing with a given run result.
This class is responsible for preparing the expanded structure for role analysis in the Midpoint system.
 
Marks experimental code.
Segmentation strategy based on explicit enumeration of buckets.
Executes a set of change requests, each consisting of a set of deltas (presenting a single model operation).
 
Executes given changes.
Segmentation strategy that explicitly enumerates the buckets.
 
Consumer writing exported audit events to the writer (stdout or file).
 
Producer worker for audit export operation.
Similar to normal repository ExportRepositoryAction, but not extended from AbstractRepositorySearchAction because we need containers here and objects are quite deeply embedded in the existing classes.
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
Ninja action realizing "export" command.
Expression<V extends PrismValue,D extends ItemDefinition<?>>
"Compiled" form of ExpressionType bean.
 
Constants for all names of the variables in the system.
A correlator based on expressions that directly provide focal object(s) (or their references) for given resource object.
Factory for ExpressionCorrelator instances.
A correlator that uses a specified expression to find shadow owner.
 
Describes an environment in which an Expression is evaluated.
 
Holds ExpressionEnvironment (containing e.g.
Simple almost-DTO used to contain all the parameters of expression evaluation.
Error during evaluation of expression.
Trace for expression evaluation operation.
Methods _internal_ to the processes of expression evaluation.
Represents an expression evaluator (e.g.
Creates expression evaluators from their definitions (evaluator elements) and parts of the context (e.g.
Specifies limitations on the use of a particular expression evaluator (e.g.
Specifies restrictions for execution of specific expression evaluators.
Specifies limitations on the use of a individual expression evaluators (e.g.
Wrapper for expression evaluator.
Factory for expressions and registry for expression evaluator factories.
 
 
 
 
 
Describes input parameters to the expression.
 
Specifies restrictions and permissions for a specific class.
Specifies restrictions and permissions for a specific method.
Specifies restrictions and permissions for a package.
Compiled expression permission profile.
Specifies restrictions and permissions for various evaluators, especially for scripting expressions.
Pipeline of expressions - they are executed one after another, input sent to the pipeline as a whole is sent to the first expression.
Profile for evaluation of "regular" expressions, bulk actions, and function libraries.
 
Manages (cached) expression profiles.
An indexed set of ExpressionProfile objects.
Specifies restrictions for execution of expressions and scripts.
Created by honchar
 
Expression result multiplicity.
Sequence of command expressions - they are executed one after another, input sent to the sequence as a whole is then sent individually to each expression.
Information about mapping source during evaluation.
Composition-enabled expression correlator.
 
TODO
 
Created by honchar
Various methods to assist in creating (maybe later parsing?) objects of ExpressionType.
 
 
 
 
 
Created by honchar
Definition of a variable.
Created by honchar
Contains the expression that can be part of e.g.
Created by honchar
 
Java class for extension complex type.
Delta processor for extension container stored as a single JSONB column.
 
Filter processor for extension items stored in JSONB.
Extension item mapper that is much lazier than SqaleItemSqlMapper for typical column.
This acts like a container mapping for extension/attributes containers.
Resolver for indexed extension/attributes containers.
 
Contains ext item from catalog and additional info needed for processing.
Special REST methods to access external schemas.
Place for non-standard object properties.
Update context for extension/attributes JSONB column.
Externally-provided resource event.
 
Cache for MExtItem catalog.
The `ExtractPatternUtils` class provides utility methods for preparing and transforming detected patterns.
Utilities and constants related to extension item processing, especially as JSONB.
 
 
 
 
 
 
 
 
How are failed objects selected.
Provides specification (selector) of failed objects that are to be re-processed by an activity.
Selects objects that were failed to be processed in previous activity run(s).
The enum describes the operation during the account was processed.
 
Behaviour class that determines visibility of (configurable) UI feature.
 
 
 
 
How should be errors during object fetch process handled and reported.
How should be errors during object fetch process reported.
 
Where and how to store "file" notifications.
Export configuration.
Report export type.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Where and how to store "file" messages.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
Java class for FilterType complex type.
TODO describe
 
 
Keeps/removes selected items from the input value.
A correlator based on a filter that matches focal object(s) to given resource object.
Factory for FilterCorrelator instances.
A correlator that uses a specified filter to find shadow owner.
TODO decide what to do with this
Filters input on a given condition.
Gizmo (device,gadget,thing) that handles search filters and other filter-like things during security processing of search filters.
 
 
Keeps everything needed to produce a filter from given selector and clause.
This represents operation between the path (typically) and value(s).
Filter processor is very abstract thing that takes the filter and returns the SQL predicate.
 
Composition-enabled filter correlator.
 
 
Work bucket content defined explicitly by a filter.
Common delta processor logic for storing based on the final value of the property.
A response from findShadowOwner operation.
A request for findShadowOwner operation.
Target object is a given (fixed) prism object: either the same as focus ODO (but with no updates!), or a different one.
 
Model that returns string value for a flexible label.
Extension of RelationalPathBase that adapts the Q-class to midPoint (mainly extension columns) while preserving all the features provided by Querydsl.
 
Specification of role auto-assignment properties.
Contains some of the information necessary to evaluate a mapping.
Evaluates a set of focus -> focus mappings.
 
 
Builder for FocalMappingSetEvaluation objects.
 
 
Created by honchar.
Option for updating focus authentication behaviour attributes.
 
 
Executes changes in the focus context.
Receives notifications when focus object is modified (or added, or deleted).
 
 
 
 
 
Created by honchar.
 
TODO
 
Alternative identities for a focus.
 
Source of a focus identity.
 
Alternative identity for a focus.
 
 
Common functionality for "focus list" pages or panels - e.g.
Provides common inline menu functionality for focal objects: enable, disable, reconcile, delete.
Information about focus being loaded.
 
 
 
A single (alternative) identity.
 
 
 
 
 
 
 
 
 
FocusTilePanel<F extends Serializable,T extends Tile<F>>
 
 
 
Abstract supertype for all object types that can be focus of full midPoint computation.
Created by honchar
 
 
Execution of a single focus validity scanner task part.
 
 
Executes validity scan on focal objects.
 
 
 
Executes a given command individually for each item arriving at the input.
A rule that has been "transplanted" onto new owner (EvaluatedAssignment) - currently, the other side of "one-sided" exclusion constraint.
 
 
Describes formatting at abstract level.
 
Setting that influence how authorizations are used to display and evaluate the form.
This part defines the actual form presentation and layout.
 
A group of fields.
A single form field.
javascript stuff, we replace ${this} with proper input id, probably some jQuery black magic TODO: add event type attribute to client element for this validator
 
Server-side validation rules.
 
Validation rules for the item.
 
Specifies a form using several different methods, e.g.
Form definition.
 
Created by Viliam Repan (lazyman).
 
Something that can be made immutable.
A list that can be made immutable.
A reference that can be made immutable.
SimulationData for the whole clockwork operation.
 
 
Information about full shadow being loaded.
 
 
Filter processor that resolves FullTextFilter.
 
Configuration of the full text search feature.
What items to index.
 
 
Represents an ExpressionParameterType that is part of a FunctionExpressionEvaluatorType i.e.
Represents an ExpressionType that is part of a FunctionLibraryType as a custom function.
Calls specified library function expression.
Evaluates custom defined functions from Function Library
Limitations on calling individual function libraries.
What function libraries and their functions can be called?
A "parsed form" of a FunctionLibraryType.
Any function library that can be used in scripts.
Manages the function libraries, especially the ones that are created by parsing FunctionLibraryType objects.
 
Specifies limitations on the use of a particular function library methods.
What functions in a given function library can be called?
Define reusable functions
TODO should we move this to test code?
Object that is able to produce given notification event (with the help of CaseEventCreationListener) when the FutureNotificationEvent.send(CaseEventCreationListener, Task, OperationResult) method is called.
 
 
 
 
 
 
 
Specifies the fuzzy search algorithm to use for searching.
 
 
 
Trigram similarity TODO consider using Double instead of Float
 
 
 
Configuration for GeneralChangeProcessor.
A scenario for GeneralChangeProcessor.
Formats any object value.
General notifier that can handle any type of event.
Configuration that is common to all transport configurations.
Created by Viliam Repan (lazyman).
Generates a string value based on given value policy.
This is NOT autowired evaluator.
Value generator mode.
Generate value according to a policy that is associated with the property/attribute.
 
Statically-typed "generate-values" action.
Executes "generate-value" action.
 
 
Generic indistinguishable error of a connector framework.
The generic item merger that follows these rules: 1.
 
This is a generic component that server to edit various types of Serializable objects in GUI.
Generic object for storing unknown (unexpected) object types.
Created by Viliam Repan (lazyman).
A generic configuration for a wf aspect.
Request to process a generic data item.
 
 
Generic visualization type (off, one-liner, detailed).
Implements "get bucket" operation.
 
 
Handles getObject calls.
A response from getObject operation.
A request for getObject operation.
 
 
 
TODO this Impl class could be removed.
See GetOperationOptions for a description.
Utilities related to GetOperationOptions and their externalized ("bean") representation.
Handler for getVersion operation.
Created by Viliam Repan (lazyman).
 
 
 
FIXME Creation of this interface was most probably a design mistake.
Maps namespaces to preferred prefixes.
Node-level cache for objects.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Policy rule for use in global configuration.
 
TEMPORARY
 
 
 
 
 
Expression evaluator that is using Groovy scripting engine.
How should be "groups" (orgs, roles) expanded?
Group selection structure creates new tile in first step of request access wizard UI (person of interest).
 
Actions are special things that can be done with particular object or list of objects.
 
 
 
 
 
 
 
 
Specifies the settings for GUI object export.
 
Flexible configurable label.
Class for misc GUI util methods (impl).
Base data Provider configuration
Configuration of the object list column.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Specifies form that are used for displaying and editing of specific object type
Created by Viliam Repan (lazyman).
Specifies the set of default panels that are used for displaying and editing of objects, such as User, Role, Org, ...
Specifies the configuration of a generic table listing various things (usually objects).
Configuration of additional panels that can be present in some view types.
Specifies the set of pages that are used for displaying lists of objects such as Users, Roles, Orgs, ...
Specifies the page used to list specific object type or object collection.
 
Compiles user interface profile for a particular user.
 
 
Principal that extends simple MidPointPrincipal with user interface concepts (user profile).
 
 
Specifies form that are used for displaying and editing of specific object type EXPERIMENTAL.
Specifies form that are used for displaying and editing of specific object type EXPERIMENTAL.
List pages for shadows.
 
TEMPORARY.
TEMPORARY
 
 
Constraint that triggers when the focus has given assignment(s).
JAXB representation of HashedDataType.
 
Sample showing a custom object form that displays simple greeting.
 
Created by Kate on 07.04.2016.
Created by Viliam Repan (lazyman).
Represents equality check, possibly between two different types.
 
TODO
 
 
Very simple object to hold a single value.
Definition for self dashboard.
TODO
 
 
 
TODO
TODO consider moving this downwards to make it available for the rest of midPoint (not only to config.xml parsing).
HTML export type for Report.
Definition of HTTP BASIC authentication module (RFC 7617).
Information about the HTTP connection.
Pseudo-authentication for pre-authenticated users.
Individual HTTP methods.
Definition of HTTP SecQ module.
Object that can provide short, human-readable description.
 
 
Created by Viliam Repan (lazyman).
 
 
Tab that can display icon in the tab label.
User interface icon specification.
This value indicates, whether the evaluation of this role gives the same results regardless of its position in the assignment/inducement hierarchy.
 
Denotes identifier of the object or container (i.e.
Provides information about primary and secondary identifiers.
 
PRELIMINARY/LIMITED IMPLEMENTATION
 
 
 
 
Wraps all the configuration related to management of `identities` container, correlation, and so on.
Define additional configuration for SAML2 Identity provider
Identity recovery management policy.
 
Attributes to be sent to the external ID Match service.
What properties should be sent to the ID Match service.
A correlator based on an external service providing ID Match API.
Factory for IdMatchCorrelator instances.
State of the process driven by ID Match correlator.
Correlation using ID Match service.
Object to be matched, resolved or updated.
Represents external ID Match service that is invoked as part of correlation (and other processes) within ID Match-based correlator.
An interface from midPoint to real ID Match service.
Composition-enabled ID Match correlator.
Error should be ignored and the processing should continue.
Ignores the value in the source object.
Argument provided to the operation is illegal.
 
 
 
 
Resolves `ImplicitWorkSegmentationType` in a specific context.
A segmentation strategy that is interpreted by the specific activity run.
 
 
Consumer importing audit events to the database.
 
Action for importing audit event records to the repository.
Responsible for launching "import from resource" activity task, as well as for importing a single account on foreground.
A response from importFromResource operation.
A request for importFromResource operation.
Created by Viliam Repan (lazyman).
 
The options for import tasks.
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Definition for an import activity.
 
Inactivates the owning focus for the resource object.
 
Inactivates the resource object.
Operation cannot be applied to the object.
 
 
 
 
 
Phase or phases in which the mapping should be evaluated.
 
Inbound mapping along with its LensProjectionContext (if relevant).
 
 
Configuration of inbound mappings evaluation.
 
What purpose or purposes does the inbound mapping serve?
Processor that takes changes from accounts and synchronization deltas and updates user attributes if necessary (by creating secondary user object delta ObjectDelta).
This is a marker that a given prism item is incomplete.
FIXME: This could be effective singleton
 
Currently only for BAR chart.
Definition of item normalization (for custom indexing).
A ValueNormalizer configured for an indexed item.
 
 
TODO PRELIMINARY VERSION - e.g.
 
 
Helps with searching through model-indexed values (currently, in identities/identity[X]/items/normalized container).
Configuration for indirect search item.
 
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Short information about the currently used environment, including repository diagnostics.
 
 
TODO Replace by forms eventually.
TODO Replace by forms eventually TEMPORARY
 
 
Technical (infrastructure) configuration of midPoint deployment.
 
Imports initial data objects as needed, ignoring already imported objects.
 
 
 
 
 
 
 
 
 
TODO: update to better use with DropdownButtonPanel.
 
 
 
In Memory Assignment Data Provider
TODO create a better name for this filter
 
Filter processor that resolves InOidFilter.
 
Exception that is thrown when action execution is in progress and input parameters combination is invalid, e.g.
 
Integer stat (statistic) entry.
 
 
Simple monitoring object.
 
"Fast filter" that can reject a raw operation result.
Information about a midPoint internal operation.
Represents a report on internal operations.
Defines report on internal operations.
 
 
 
 
 
 
Various internals configuration elements.
 
 
 
Unfinished.
 
 
 
 
Wrapping invalidation event.
Listens for invalidation events that are received by RepositoryCache/Invalidator.
Contains functionality related to cache entry invalidation.
 
Isolated checkbox - checkbox that is displayed as (visually) stand-alone component.
 
 
Item<V extends PrismValue,D extends ItemDefinition<?>>
Item is a common abstraction of Property, Reference and Container.
Interface for objects that behave like an item: they have a name and may have a definition.
 
What to do with the changes computed for the given item?
 
 
 
Trace for item consolidation.
Definition of a property constraints.
 
Definition of correlation-related aspects of a focus item.
Definition of a single-item correlator for an item (a resource object attribute or a focus item).
A definition of a specific item (as opposed to a type).
 
 
ItemDefinitionImpl<I extends Item<?,?>>
Abstract item definition in the schema.
Provides definitions of an item (for bucketing purposes).
To be used e.g.
Deprecated.
 
 
 
ItemDelta<V extends PrismValue,D extends ItemDefinition<?>>
Item Delta describes a change of an item which is a property, container or a reference.
 
 
Filters item deltas according to specified criteria.
 
A class defining old item state (before change), delta (change) and new item state (after change).
THIS IS NOT A GENERATED CLASS.
Essential contract for processing item delta modifications.
Applies single item delta value to an item.
THIS IS NOT A GENERATED CLASS.
Utilities related to ItemDelta and ItemDeltaType objects.
 
Applies item delta values to an item and arranges necessary SQL changes using update context.
 
 
Factory for items (property, reference, container, object) and item values.
 
 
ItemHeaderPanel<V extends PrismValue,I extends Item<V,ID>,ID extends ItemDefinition<I>,IW extends ItemWrapper>
 
ItemImpl<V extends PrismValue,D extends ItemDefinition<?>>
Item is a common abstraction of Property and PropertyContainer.
Definition of a custom indexing for an item.
 
Checks item limitations.
 
TODO
 
 
 
 
 
 
 
General interface to ItemPath objects.
 
Methods that operate on path collections.
 
 
Holds internal (parsed) form of midPoint-style XPath-like expressions.
 
Natural key consisting of an item path.
 
 
 
Parses string representation of ItemPath and ItemPathType objects.
 
 
 
 
 
 
 
 
 
Holds internal (parsed) form of midPoint-style XPath-like expressions.
 
 
Defines a type for XPath-like item pointer.
 
Whether or how data should be persisted.
 
 
Maintains information on processing of a given item: a resource object (for tasks like import or reconciliation), a repository object (e.g.
How item processing ended? Similar to operation result status, but using a different categorization.
Information about item processing to be recorded in items report.
Holds an item that is scheduled for processing.
Specifies the "depth" of item processing.
 
 
Description of the common item handling details, such as display name, read/write access and value and synchronization expressions.
 
 
TODO
Columns common to all specific item-related reports (like ConnId operations, internal operations, etc).
Common contract for resolver that helps with navigating over complex (non-single) item paths for query purposes.
 
Condition controlling item report creation or collection that is evaluated before or after item is processed.
A generalized ItemPath: It allows pointing to a specific item value, while allowing to select from multivalued items not only by ID, but by arbitrary filter.
TEMPORARY
 
A segment of ItemRouteType.
Generalized item path.
 
A "user-friendly" correlator based on a list of items that need to be matched between the source (usually the pre-focus, but a shadow is acceptable here as well), and the target (set of focal objects).
Factory for ItemsCorrelator instances.
Correlator that compares individual items.
Defines the custom confidence value for given search item.
Specifies how to search for the item.
Compiled security constraints for a given prism value (usually containerable) and operation, at the granularity of individual contained items.
Defines report on items processing.
Task progress counted in items.
Information on items processing (for activity state overview).
Defines contract for mapping component holding information how an item (from schema/prism world) is to be processed when interpreting query.
 
Composition-enabled items correlator.
 
Experimental.
 
Type of FilterProcessor for a single Prism item (not necessarily one SQL column).
Specification of value metadata processing for a given data item: mappings that should be applied and item definitions driving e.g.
 
 
 
 
 
 
 
 
 
TODO better name
How to iterate through entities in searchObjectsIterative method.
Definition of iteration properties for a resource account or other resource objects.
Represents a run of an iterative activity: either plain iterative one or search-based one.
This interface summarizes what should an implementor of IterativeActivityRun (either plain or search-based) provide.
Executes specified deltas on specified set of objects.
 
Executes specified changes on specified objects.
Represents data about iterative operation that starts.
 
 
Executes a script (a.k.a.
Consolidate the output of mappings for a single item to a delta.
 
A distance measure implementation for calculating the Jaccard distance/similarity between two sets of values.
 
Just to (statically) hold the information about `midpoint.jar` file signature validity.
 
Generic universal type converter.
 
A set of ugly hacks that are needed for prism and "real" JAXB to coexist.
 
 
Represents visitable JAXB bean.
Represents visitor of generated JAXB beans.
Common contract for SQL-based repository configuration.
Wrapper around JDBC Connection representing "session", typically a transactional one.
Representation of JMS message.
JMS asynchronous provisioning target.
JMS client configuration
Representation of JMS text message.
A simplified representation of a requested asynchronous provisioning operation.
Simple representation of an ItemDelta: contains collections of real values being added/deleted/replaced.
Type representing JSONB columns in PostgreSQL database as a wrapped string.
Technical exception capturing problems with reading or writing the JSONB value.
Path representing JSONB column.
Delta processor for multi-value poly-strings represented as array in JSONB column.
Filter processor for multi-value property stored as JSONB array.
 
 
 
 
 
TODO what about thread safety?
 
Generic expression evaluator that is using javax.script (JSR-223) engine.
Define that resource server expect token in format JWT.
TODO Loosely based on XML digital signature standard.
TODO add other relevant methods here
Builder for KeyStoreBasedProtector implementation.
Class that manages encrypted and hashed values.
Experimental.
A free-form string value with a label.
 
Created by Viliam Repan (lazyman).
 
A definition that can be viewed at from different layer's point of view.
 
 
Defines a system layer.
 
 
 
LDAP authentication module supports authentication via LDAP server.
Search configuration which uses an Ldap filter to locate the user
 
 
How to deal with legacy approvers specifications, i.e.
This type exists just to allow (deprecated) "cases" element in legacy synchronization bean.
TODO
Created by Viliam Repan (lazyman).
Responsible for updating the legacy progress for the current task.
Reaction to a synchronization situation.
The TaskInformation based on a legacy task structure.
LEGACY: This is all very old code.
 
Class to validate (and possible transform) large sets of objects.
 
 
 
 
This class does nothing.
Values of sequences used in the computation.
Value of a sequence used in the computation.
 
A serialization of model context, i.e.
Lens context for a computation element - a focus or a projection.
Currently, just a single-use interface for LensElementContext.modifyPrimaryDelta(DeltaModifier) method.
TODO
Helps with evaluating expressions during the "lens" execution.
 
TODO
Metadata-related utility methods.
 
TODO
 
 
TODO
 
 
 
Enumeration of approval strategies at a particular stage.
Overrides logging level for given loggers, based on thread-specific configuration.
TODO move to a better place? TODO replace by a library method?
Specifies the use of Levenshtein edit distance for searching.
 
Takes care of converting between XNode tree and specific lexical representation (XML, JSON, YAML).
Note that this interface does not contain handleError method.
 
 
Executes a function from a function library.
Specifies restrictions and permissions for a specific library function.
Action that reduces (purges) object data.
TODO EXPERIMENTAL
 
 
 
Specification of lifecycle states and state transitions.
 
 
Specification of lifecycle state transition.
Specification of lifecycle state.
 
Lightweight identifier is a "reasonable unique" identifier that is very cheap to create.
 
Handler for a lightweight task.
A merger specific to PropertyLimitationsType.
 
Definition of complexity and string policy
 
 
 
In what situations (change-related) does the link match? EXPERIMENTAL.
 
Created by Kate on 23.09.2015.
Selects objects among linked ones (for this object).
Functions related to "linked objects" functionality.
Created by honchar
Created by Kate Honchar.
Translates a linked selector (LinkedObjectSelectorType) to appropriate ObjectFilter.
 
 
 
Manages link definitions.
 
 
Selects objects among linked sources (for this object).
Links resource object to its owning focus.
Selects objects among link targets (for this object).
Definitions of link types for objects having this archetype.
Definitions of a link type.
 
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
 
Always returns zero set with literal value (values) specified in the evaluator.
Task handler for controlled processing of asynchronous updates.
 
Describes capability to detect changes in almost real time (live synchronization).
 
Represents [live] synchronization change event obtained from a resource.
Handles changes retrieved by ProvisioningService#synchronize(ResourceShadowCoordinates, LiveSyncOptions, LiveSyncTokenStorage, LiveSyncEventHandler, Task, OperationResult) method.
 
 
Manages the storage of a live sync token.
 
Definition for a live sync activity.
State of the live sync activity.
Lazy loading Wicket model.
The "real" run of an activity - i.e.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Used to retrieve item definition from 'local definition store' - i.e.
 
Argument that is to be used for localized message parameter.
 
This class is final and must remain so, as it's not cloneable.
 
List of localizable messages, to be presented as a single message.
A template that produces a localizable message after argument expressions are evaluated into specific arguments.
A message that is to be localized into specified language.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
For use in tests ONLY.
 
 
Created by Viliam Repan (lazyman).
Single language localization for the message template.
Thread-local cache for storing objects.
Thread-local cache for storing query results.
Set of three thread-local repo caches (object, version, query).
Thread-local cache for object version.
 
 
This defines the state of account lock-out.
Created by Viliam Repan (lazyman).
Statically-typed "log" action.
It was simply not possible to provide an empty default value for logback property.
 
Executes "log" scripting action.
 
 
 
 
 
Auditing configuration for auditing by using the logging subsystem.
TODO
 
Configuration of logging levels, categories, log files, etc.
 
 
Gathers log lines as they are produced by TracingAppender.
 
 
TODO
Information how to override logging configuration.
 
 
 
 
 
 
 
Java class for LogicalOperatorFilterType complex type.
 
Collects [evaluated] assignments during login process.
 
 
Definition of "login form" module.
not use it, temporary needed interface for old reset password configuration
 
Segment of the logfile.
Created by Viliam Repan (lazyman).
 
 
 
 
 
Data structure that represents entire content of the lookup table, organized into table rows.
An object that represents lookup table.
Querydsl "row bean" type related to QAbstractRole.
Querydsl "row bean" type related to QAccessCertificationCampaign.
Querydsl "row bean" type related to QAccessCertificationCase.
Querydsl "row bean" type related to QAccessCertificationDefinition.
Querydsl "row bean" type related to QAccessCertificationWorkItem.
Querydsl "row bean" type related to QAccessCertificationWorkItemReference.
 
 
Where and how to send mail notifications (or any other mail messages).
Mail nonce authentication module.
Configuration of a particular mail server host.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Where and how to send mail messages (or any other mail messages).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
How to ensure transport-level security when sending the message.
 
 
 
 
 
 
Class that allows to return result and expected exit code from ninja execution.
May happen in case that resource is administratively set to maintenance mode.
Created by Kate on 16.12.2015.
TODO
Created by honchar
 
Describes the context of the manual provisioning request that is represented by a case.
 
 
Mapping<V extends PrismValue,D extends ItemDefinition<?>>
Mapping prepared for evaluation (or already evaluated).
Builder for (traditional) data mappings.
 
 
Executes mappings in diagnostic mode.
Attribute mapping related attributes
To avoid passing contextDescription + now + task to many places let us aggregate this information in this class.
 
 
TODO ...
TODO ...
 
 
Trace for mapping evaluation operation.
 
 
Evaluates Mapping objects.
TODO determine the fate of this class
 
(Traditional) data mapping.
 
Kind of mapping.
 
 
Output of mappings computation: basically the triple plus some flags.
 
 
 
 
 
Information about mapping source during evaluation.
 
See Axiom.
TODO
 
TODO
Mapping state properties after evaluation.
Mapping state property.
 
Strength of the mapping defines how aggressively will the mapping be applied.
Generic set of mappings.
 
 
 
Specification of time-based mapping constraints.
 
 
Informs that the value was provided by a mapping (and how exactly).
Specialization of abstract mapping for regular data mappings.
 
Note we cannot use "extends Map" here, because in that case we would have to declare XNodeImpl as map value parameter.
 
Querydsl "row bean" type related to QArchetype.
Manages MarkType objects.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
A mark is a "label" given to an object - currently a prism object, an assignment, or audited/simulation event.
Utilities for MarkType.
Querydsl "row bean" type related to QAssignment.
Querydsl "row bean" type related to QAssignmentReference.
 
Context for matching a value against a selector or clause.
A request for matching to be sent to an external ID Match service.
A response from an external ID Match service.
Interface for generic matching rules.
 
Creates MatchingRuleRegistry populated with standard matching rules.
 
TEMPORARY implementation! This class contains various hacking util methods helping during development of ID Match correlation.
 
Querydsl "row bean" type related to QAuditDelta.
Querydsl "row bean" type related to QAuditEventRecord.
Querydsl "row bean" type related to QAuditRefValue.
Querydsl "row bean" type related to QCase.
Querydsl "row bean" type related to QCaseWorkItem.
Querydsl "row bean" type related to QCaseWorkItemReference.
 
Querydsl "row bean" type related to QConnector.
Querydsl "row bean" type related to QConnectorHost.
Querydsl "row bean" type related to QContainer.
Type for container stored in database, used for MContainer.containerType.
This class allow output for given MDC value and given level implments logback turbofilter feature
Helps with GUI aspects of member operations on abstract roles.
Helps with creating queries regarding members of an abstract role.
Creates and optionally submits tasks for member operations on abstract roles.
"Assign members" operation.
Created by honchar
Created by honchar
 
 
 
Created by Viliam Repan (lazyman).
Configuration of memory diagnostics features.
 
 
Created by Viliam Repan (lazyman).
 
 
Configuration that specifies automatic merging of two objects.
 
Created by honchar.
Created by honchar.
TODO
 
Delivery mode.
 
 
Message property (key-value pair).
Created by Viliam Repan (lazyman).
Specifies the content of the message used with a transport mechanism, for instance mail.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Localizable template of the message used with a transport mechanism, for instance mail.
A configuration for message transports.
Provides basic message-manipulation methods to be used in scripts (typically, async update transformation scripts).
Some XNodes can hold value metadata.
Convenient data structure to provide input for metadata computation for custom transformational metadata mappings.
 
 
 
Defines handling of a metadata items.
Description of the metadata item handling details, such as (TODO)
Provides information about processing of given metadata item (e.g.
Specification of processing of individual metadata items.
 
 
Evaluates metadata mappings.
Evaluated or to-be-evaluated metadata mapping.
Scope for this metadata mapping.
Specialization of abstract mapping for metadata mappings.
Created by honchar.
 
Created by Viliam Repan (lazyman).
In what situations should be this mapping template applied?
Selection of items to include/exclude when applying given metadata processing.
How object metadata should be recorded or updated.
Meta-data about data creation, modification, etc.
 
This class provides functionality as a holder for method performance statistics.
Created by Viliam Repan (lazyman).
Querydsl "row bean" type related to QExtItem.
 
Specifies cardinality of the MExtItem.
The container holding the extension item.
Querydsl "row bean" type related to QFocus.
Querydsl "row bean" type related to QOperationExecution.
 
 
 
 
Created by Viliam Repan (lazyman).
Authentication token on top of hierarchy.
 
 
 
 
 
A simple interface that aims to work as a custom validation plugin used in GUI.
This is a simple implementation of MidpointFormValidator interface
 
 
 
 
 
In this class, we define some Pointcuts in AOP meaning that will provide join points for most common methods used in main midPoint subsystems.
Checks the signature of `midpoint.jar` file (if applicable).
 
 
 
 
 
 
 
 
Extension to the default Querydsl PostgreSQL template adding operations used by midPoint.
Simple midPoint principal.
Service that exposes security functions for internal use inside midPoint and for other spring-security-enabled purposes.
 
In this filter, all incoming requests are captured and we measure server response times using System.nanoTime().
Used to compare metadata from the provenance point of view.
Created by Viliam Repan (lazyman).
 
 
 
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
 
Custom tomcat factory that used to hack embedded Tomcat setup.
 
 
 
 
 
 
 
 
 
 
The `MiningBaseTypeChunk` class represents a common base for role and user based analysis data chunks.
The `MiningOperationChunk` class represents a chunk of data used in the role analysis process.
The `MiningRoleTypeChunk` class represents a chunk of role analysis data for a specific role.
 
The `MiningUserTypeChunk` class represents a chunk of role analysis data for a specific user.
 
 
 
What is to be done when the planned start time arrives without the task actually starting.
Refreshes a projection context after the shadow was found to be missing.
Querydsl "row bean" type related to QLookupTable.
Querydsl "row bean" type related to QLookupTableRow.
Querydsl "row bean" type related to QNode.
Querydsl "row bean" type related to QObject.
Definition enum, counterpart for our custom Postgres type `ObjectType`.
 
Provides access to audit events at the model level.
Created by Viliam Repan (lazyman).
 
Represents a model-level action (method) that can be authorized.
Commonly-used beans for model-impl module.
Commonly-used beans for model-common module.
Options to be used for compareObject calls.
EXPERIMENTAL.
Searches for container values at the model level.
 
 
Created by Viliam Repan (lazyman).
This used to be an interface, but it was switched to class for simplicity.
Simple version of model service exposing CRUD-like operations.
 
A service provided by the IDM Model focused on system diagnostic.
 
Event about model operation (TODO)
Trace for model's delta execution.
Options for execution of Model operations.
Options for execution of Model operations.
Describes an environment in which an Expression is evaluated.
 
TODO
 
 
A service provided by the IDM Model that allows to improve the (user) interaction with the model.
 
 
 
Provides access to objects at the model level.
 
 
 
 
Model constants referenced from the outside.
 
 
IDM Model Interface
Interface that allows location of model and model-like services, such as ModelService and ModelInteractionService.
 
TODO
 
Preliminary version.
Handles modification operations: add, modify, delete, and a couple of others.
Constraint that triggers the rule on object modification, addition or deletion.
 
 
 
Created by tchrapovic.
 
 
Java class for ModificationTypeType.
Statically-typed "modify" action.
Executor for 'modify' actions.
Contains information about object modification result; primarily needed by repository caching algorithms.
Wrapper for authentication module, provide all information about actual state and contains method that help during authentication and maybe specific for current authentication module.
 
TODO
SAML2 key from key store.
Possible types of key.
SAML2 key from string representation.
Define configuration for authentication module, contains all variables which we need for creating authentication filters for module and all component which authentication modules uses.
Information about selected monitored operations.
Information about selected monitored operation.
Monitored operation.
Utility methods related to operations and cache performance monitoring.
Querydsl "row bean" type related to QOperationExecution.
Querydsl "row bean" type related to QOrg.
Querydsl "row bean" type related to QOrgClosure.
 
 
 
Querydsl "row bean" type related to QReference and its subtypes.
Enumeration of various types of reference entities (subtypes of QReference).
Querydsl "row bean" type related to QReportData.
Querydsl "row bean" type related to QResource.
Querydsl "row bean" type related to QRole.
Querydsl "row bean" type related to QService.
 
Querydsl "row bean" type related to QShadow.
 
Querydsl "row bean" type related to QTask.
Querydsl "row bean" type related to QTrigger.
Created by Viliam Repan (lazyman).
 
 
Created by honchar
 
How should we handle the situations when a sub-report produces multiple values?
This handler can take a collection of triggers that have the same timestamp.
 
Constraint on multiplicity of assigned objects.
Work definition for the multi-propagation activity.
 
 
 
How should be a multi-source item handled.
 
Definition of "multi-source" item.
Created by honchar.
Created by honchar.
 
 
 
 
 
 
 
Created by honchar
 
todo not finished [lazyman]
 
Querydsl "row bean" type related to QUri.
Querydsl "row bean" type related to QUser.
 
An interface to mutate the definition of a complex type.
An interface that provides an ability to modify a definition.
EXPERIMENTAL
 
 
 
 
 
 
Interface allowing modifications of an object class definition.
 
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Name of a visualization or a visualization item.
Any value (property, reference, container) along with its name.
 
 
Special case of a map that has QName or ItemName as a key.
NameSet<N extends QName>
A "safe" set of QName - i.e.
 
 
 
 
Java class for NAryLogicalOperatorFilterType complex type.
 
Describes how to handle a natural key of multi-valued items.
Navigable<K,N extends Navigable<K,N>>
 
Created by Viliam Repan (lazyman).
 
 
Update context for nested containers stored in the same table used by the parent context.
Resolver that maps the nested items (next component of the path) to the same table (query type).
 
 
Created by lazyman on 13/03/2017.
Next planned recompute event.
Represents different levels of Spring application context initialization for midpoint.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
 
Identify specific node authentication
State of this node w.r.t.
Node state from the user's point of view.
 
Basic node operational state: whether it is up (e.g.
Node describes a single installation of midPoint.
 
Specific kind of SchemaException.
 
 
Structure that specifies policy for nonce management.
 
 
 
 
Filter designed to explicitly match nothing.
Loadable model whose object is always not null.
 
 
 
 
This is a handler for "old", non-iterative (single) bulk actions.
 
Executes a script (a.k.a.
Just a dummy activity to be used for demonstration and testing purposes.
 
Should a step of NoOp activity be interruptible?
A correlator that does nothing: returns "no owner" in all cases.
Factory for NoOpCorrelator instances.
"No-op" correlation that always returns "certainly no owner" result.
"No-op" normalization step (for custom indexing).
Work definition for a no-op activity.
Steps to be applied during item normalization (for custom indexing).
How should we handle the situations when a sub-report produces no values?
 
 
 
Asserts (mainly to the compiler) that the flow of control really should not go here.
 
A configuration for user notifications.
Handles notification events.
Message attachment for notifications.
XML version of Message (in notifications module).
TODO
Defines how the notification should be generated and sent.
 
TODO
 
TODO
 
Type for notification specific transport configuration.
Configuration that is common to all notification transports.
Type for more descriptive message transport declaration inside notifiers.
Statically-typed "notify" action.
A response from notifyChange operation.
A request for notifyChange operation.
Executes "notify" actions.
No user is logged in, although it is expected.
 
Implements work state "segmentation" into single null work bucket.
"Null" processor that reads XNodes into XNodes and writes XNodes as XNodes.
Object filter that passes all shadows.
DO NOT USE in production code.
 
"Null" work bucket content: does not restrict the query in any way.
Implements work state management strategy based on numeric identifier intervals.
 
Represents an integer interval.
Interprets numeric interval segmentation.
Work bucket content defined as an interval of numeric values of discriminator item.
Segmentation strategy that divides the processing space (represented by an interval of numeric values) into a number of work buckets.
 
TODO
Actions executed on a given object type, with given operation (change type) and via given channel.
Object already exists.
Object with specified criteria (OID) already exists in the repository.
ValuePolicyOriginResolver that resolves origin based on some context object (that can be retrieved).
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Configuration of object collection-based reports.
 
 
 
Specifies a set of object collections ("views") to be displayed (used) at a specific location in the system.
Object collection specification.
Specifies how a specific collection ("view") is to be displayed (used) at a specific location in the system.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
Relative difference (delta) of the object.
 
 
 
 
 
List of object deltas.
 
A class defining old object state (before change), delta (change) and new object state (after change).
Experimental.
 
List of object delta operations (deltas + operation results).
TODO
 
The name is a bit ridiculous but we need to distinguish it from ObjectDeltaUtil in prism module.
 
Describes a change of a specific object.
Java class for anonymous complex type.
 
Secondary deltas from already completed waves.
Delta for a specific execution wave.
 
TODO
 
 
EXPERIMENTAL
 
 
 
 
 
 
 
 
 
This object contains factory methods for each Java content interface and Java element interface generated in the com.evolveum.prism.xml.ns._public.annotation_2 package.
This object contains factory methods for each Java content interface and Java element interface generated in the com.evolveum.prism.xml.ns._public.query_3 package.
This object contains factory methods for each Java content interface and Java element interface generated in the com.evolveum.prism.xml.ns._public.types_3 package.
 
Functional interface to inject filter evaluation code.
 
 
 
Specifies the set of forms that are used for displaying and editing of objects, such as User, Role, Org, ...
Specifies form that are used for displaying and editing of specific object type
Classes implementing this interface are used to handle arbitrary objects (not always PrismObject instances), typically - but not necessarily - coming from iterative search operation.
Extension of validator used to import objects to the repository.
TODO better name?
Task handler for "Object integrity check" task.
 
Definition for object integrity check activity.
 
 
Created by honchar.
 
Class responsible for object merging.
 
Describes a change of attributes of a specific object.
 
Object with specified ObjectNotFoundException.type and identifier (ObjectNotFoundException.oid) has not been found in the repository or in other relevant context.
Object with specified criteria (OID) has not been found in the repository.
 
 
Shadow specific provisioning policy.
 
Describes definition of object ordering.
 
 
 
Position of an object (an item in the language of prism) within midPoint objects structure.
Definition of policy for a specific object type.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Evaluation context for object-based policy rule.
Request to process an object.
Was the object added, modified, deleted, or unchanged (unmodified)?
 
 
 
 
 
 
Formats object reference value into two columns (oid, name).
Denotes referenced object, like "assignment/targetRef/@/name" (name of assignment's target object)
 
TODO update this class by adding missing features (targetName, oid, type, relation).
Java class for anonymous complex type.
 
The callback from some object utilities to resolve objects.
Resolves the owner referenced to by OwnerClause.
 
TODO
Extracted relevant security constraints related to given object.
 
TODO what about the subtypes of ObjectSelectorType?
Selects some objects from all the objects in midPoint.
This is a set of objects that considers objects being equal by simply comparing their OIDs.
A definition that applies to a set of repository objects.
This is a specification of objects to be processed in more-or-less raw form.
Work definition that can provide object set specification.
Specifies a set of repository objects to be processed.
 
On what object state is the constraint evaluated?
TODO
 
Defines a synchronization properties (configuration) for a resource.
Defines a synchronization properties (configuration) for a resource.
Defines a synchronization properties (configuration) for a specific type of object, e.g.
Object-template-related settings related to correlation.
 
Internal interface used for handling includeRef references.
 
TODO Description of the common item handling details, such as display name, read/write access and value and synchronization expressions.
 
 
 
Unfortunately, this cannot extend MappingConfigItem because of the conflict in generic type parameters.
 
 
 
Merges ObjectTemplateType objects.
Processor to handle object template.
 
TODO: update The user template used to create new users.
 
Structure that contains all primary changes requested: from focus as well as from projections.
Container for ChangesRequested (focus primary delta and/or projection primary deltas).
Common supertype for all identity objects.
 
 
A merger specific to resource definitions: creates inheritance relations between the same definitions (matched by kind and intent).
 
Util class for creating different list types, e.g.
 
 
Created by Viliam Repan (lazyman).
Configuration for default object type.
 
 
 
 
Methods that would belong to the ObjectType class but cannot go there because of JAXB.
Enhanced validator that also produces more information about how validation item should be updated.
Validator that can process objects, validate them, check for errors and warning and possibly even transform object during upgrades.
Evaluator that validates the value of any object property.
 
Specifies how reference variables should be provided for the script.
 
 
OpenId Connect authentication module.
Possible client authentication methods.
OpenID Connect client.
OpenID Provider.
OpenID Connect resource server.
 
 
 
Segmentation strategy that divides the processing space into a number of buckets based on OID values.
This encoder with encode/decode OnePageParameterEncoder.PARAMETER to path and all other parameters as query parameters.
 
Define that resource server expect opaque token, which have to be verified by user info endpoint.
Request to open a (pre-created) case.
In-memory repository of open simulation result transactions.
Operation being recorded: represents an object to which the client reports the end of the operation.
Use new OperationsPanel and OperationPanelPart to create proper HTML for this panel ("card" with fieldsets that are responsive)
 
Manages metadata (mostly before delta execution), but also some other operational data, namely assignment effective status.
Structure containing metadata about operational state of the resource.
The business context of an operation.
 
 
Prepares complex OperationExecutionType records for search-iterative and live-sync/async-update tasks.
Specification of where to write operation execution record.
How operationExecution records should be updated.
Information about operation execution record real owner.
Type of an operation execution record.
Information about an operation executed on an object.
Writes provided OperationExecutionType records into objects.
A request to write an operation execution record.
This class provides basically the functionality of MidpointInterceptor.
Kind of operation (captured by OperationResult).
 
 
Monitored operation.
What monitored operations to trace.
Created by Viliam Repan (lazyman).
Experimental.
TODO
Severity level of operation policy violation.
Collection of scripts to be executed for various provisioning operations.
Specifies how and when a script is executed during provisioning.
 
Created by honchar
Provides rich information about an operation being executed; mainly for the sake of error reporting and functional/performance troubleshooting.
 
Used to postpone initialization of OperationResult until parameters and context items are set - in order to log operation entry correctly.
Specifies what level of detail should be preserved in the operation result.
 
Strategy for operation result aggregation.
Level of importance of given OperationResult.
 
 
 
 
 
TODO
TODO
 
 
Created by Viliam Repan (lazyman).
 
 
Prints operations performance information.
Information about methods performance.
 
EXPERIMENTAL.
 
Operation execution statistics/state.
Created by Viliam Repan (lazyman).
The purpose of this class is unclear.
 
Define type of operation.
 
 
TODO
 
 
 
Options for showing OpResult objects.
 
 
 
Adds recompute triggers to objects in an optimized way: - The triggers are set to a given time in future (e.g.
This is a preliminary implementation.
 
TODO
 
 
TODO
 
Java class for OrderDirectionType.
 
 
 
 
 
 
Filter processor that resolves OrgFilter.
 
 
 
 
Definition of object with respect to subject membership in organizational hierarchy.
Defines applicability scope in the organizational structures.
 
 
Created by honchar.
 
Created by honchar
 
Created by honchar
Evaluates organization tree questions.
 
Created by honchar
 
 
Created by honchar
Organizational unit, division, section, object group, team, project or any other form of organizing things and/or people.
Sets the origin information in prism values being merged.
 
This enum defines source from where a change in property value occurred.
 
The object (currently supported are tasks) is orphaned i.e.
State of activity not connected to the current activity run.
 
 
TODO description + better name
Represents limitation to a given target (i.e.
 
Limitations related to other privileges, like the ability to complete work items.
 
 
 
 
 
 
 
 
Processor that evaluates values of the outbound mappings.
Counter keyed by a qualified outcome.
 
TEMPORARY
TODO
 
 
 
Filter processor that resolves ExistsFilter.
Selects some objects from all the objects in midPoint.
 
Internalized (parsed) form of correlation option identifier (like `none` or `existing-XXX`).
Resolves the owner referenced to by OwnerClause.
Created by Viliam Repan (lazyman).
 
 
Umbrella class for each page created for any authentication module.
 
 
 
 
 
Created by acope on 9/14/17.
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
Created by honchar.
 
 
 
 
 
 
 
 
 
 
 
 
 
Displays all certification decisions.
 
 
 
 
 
 
 
 
 
 
 
Annotation for the page which contains url address, on which the page is available, and authorization urls for page, which logged user have to have.
Behavior which disables component if actual page class equals to disabledPage defined by constructor parameter.
How to handle paged searches.
 
 
Base class for error web pages.
 
 
 
 
 
 
 
 
 
 
Created by honchar this class is created to link Import resource definition menu item to a separate class (to fix menu item enabling issue)
 
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by honchar.
 
 
 
 
 
 
 
 
 
Result object for potentially paginated content.
 
Page that displays just the operation result.
 
Created by honchar.
 
 
 
 
 
 
 
 
 
 
 
 
Automatically redirected after successful authentication when password reset requested.
 
 
 
 
 
 
 
Created by honchar
 
 
 
 
 
 
 
 
 
 
 
 
Created by honchar
 
 
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
 
 
 
 
 
 
Page with no authorizations.
 
 
 
Created by honchar.
 
 
This is simple visible/enable behaviour for use in top menu.
Created by Viliam Repan (lazyman).
 
Created by honchar.
 
Created by Viliam Repan (lazyman).
Parameters limiting the number of returned entries, offset, etc.
 
 
 
Tab that contains a singleton panel.
 
List of constants used to identify panels.
 
Implementation of EquivalenceStrategy that uses a parametrization of built-in equals/hashCode/diff methods.
Describes input parameters.
 
Formatter for `ParamsType` objects.
 
 
A container for task parent and root.
A clause that: .
Denotes parent object or container.
Allows a visitor to follow the path along the "parent" relationship.
 
Internal (parsed) representation of a collection of selector-qualified GetOperationOptions.
 
 
 
Source for prism parser (file, input stream, string, DOM tree, ...).
 
 
TODO TODO TODO
 
Migrator that comes into play when content is parsed.
 
 
 
 
 
 
 
TODO description
Options that allows to select only some of the projector/clockwork parts to process.
Specifies whether a particular part should be processed or not.
Code common to all three reconciliation sub-activities: operation completion, resource reconciliation, and remaining shadows reconciliation.
Accepts (maybe repeatedly) a value and - on request - passes it to specified Consumer.
 
 
 
 
Describes capability to present password in a structured way.
Additional security applied when changing a password.
The way how a resource password is compared with the current password.
Structure that specifies policy for password management.
Created by Viliam Repan (lazyman).
Additional options for configuring the password hint when changing or resetting the password.
 
 
Contains a single entry of the password history.
 
 
 
 
 
 
 
 
TODO
 
 
Returns value set triple derived from specified (or default) source by resolving specified path.
This is NOT autowired evaluator factory.
 
Special case of a map that has ItemPath as a key.
PathNavigable<V,K,P extends Path<K>>
 
Carries out and holds assignment evaluation: 1.
A "safe" set of ItemPath - i.e.
Visits only objects that are on the specified path or below.
 
Matches a string against a set of patterns that can be either in "naive" format, using "*" as a wildcard, or in regex format.
The `PatternResolver` class implements the `DetectionOperation` interface and provides the algorithms for performing user-based and role-based pattern detection within the role analysis process.
Configuration for a primary change processor aspect.
Execution status.
Created by Viliam Repan (lazyman).
Description of an operation that is pending (in progress) or that was recently completed.
Type of pending operation.
 
 
 
 
 
EXPERIMENTAL.
This class simply collects basic information about midPoint performance, specifically basic CPU, memory usage and current thread state.
Ensures formatting of performers (approvers, reviewers) comments before storing them into metadata.
Simple "no-op" formatter to be used when no real implementation is available.
Instructions how to format approvers/reviewers comments before storing them into metadata.
 
TEMPORARY
Persona construction.
 
 
 
Runs persona-related changes after the primary operation is all done.
 
 
Created by Viliam Repan (lazyman).
 
Represents a JSON request to match a person (`Request`) or to force a reconciliation of a person (`Forced Reconciliation Request`).
 
Data that are passed between individual scripting actions.
 
 
 
Run of a plain iterative activity.
Provides execution logic and/or execution state related to a plain iterative activity run.
Special construction subclass that represents resource object constructions as defined in the `schemaHandling` section of the resource definition.
 
PlainStructured object is "bean-like" value object, which contains set of getters / setters generated from schema.
 
Describes an attempt that is to be made.
Simple enumeration that refers to the plus, minus or zero concepts used in delta set triples.
 
Specifies the point in time for the returned data.
TODO
 
Actions that are executed as reactions to triggered policy rules.
Common supertype for policy actions.
 
Trace for policy constraint evaluation operation.
Evaluates given policy constraint within specific context.
TODO
How should be triggering of this constraint presented, e.g.
References another policy constraint.
 
Set of governance, risk management, compliance (GRC) and similar policy constraints that influence the identity model.
Describes what the policy "decides" about a specific account.
Recorded exception from a policy rule.
 
Defined items and rules for generating/validating values
Defined items and rules for generating/validating values
 
 
TODO EXPERIMENTAL
Evaluation context for a policy rule.
 
On what target is the policy rule intended to be evaluated.
Trace for policy rule evaluation operation.
Any event that is triggered by the 'notify' policy rule action.
 
 
A facade for various actions related to handling of policy rules: evaluation, enforcement, and so on.
Context related to evaluation and processing of policy rules.
Executes scripts defined in scriptExecution policy action.
These rules specify compliance and governance constraints.
 
 
 
Constraint that triggers the rule when the object is in a given policy situation(s).
Statement specifying explicit include (marking) of object or exclude from specified policy.
 
Specifies limits when is the action executed.
 
Provided object does not conform to the policies (such as password policy).
Polymorphic string.
 
 
Created by honchar
Created by honchar
 
Filter processor for a polystring attribute path (Prism item).
This is NOT a generated class.
Polystring->string normalization step (for custom indexing).
Normalizer for PolyStrings.
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
 
 
WARNING: this is NOT a generated code.
WARNING: this is NOT a generated code.
Polymorphic string.
 
Created by Viliam Repan (lazyman).
 
 
TODO
TODO
Populates prism value with values as defined in PopulateType
 
 
Supports "intelligent" specification of a set of item paths formed by three kinds of primitives: - "include all items" (corresponds to an authorization with neither `item` nor `exceptItem` values) - "include specified items (plus children)" (corresponds to an authorization with `item` values) - "include all items except for specified items (plus children)" (corresponds to an authorization with `exceptItem` values) This object is gradually built by calling PositiveNegativeItemPaths.collectItemPaths(Collection, Collection) method providing increments to `item` and `exceptItem` sets.
 
Additional filter used to match objects (returned by the iterative search) with the objectclass/kind/intent specification, which is typically given in the synchronization task.
Represents a potential match obtained from ID Match service.
 
 
A Context for inbound mappings evaluation that is used in "pre-inbounds" evaluation (i.e., before clockwork is run).
Abstract class for predefined activation mapping evaluators.
Predefined configuration sets.
 
 
Predefined transformation of an operation requested to specific request.
 
 
A normalization step taking only prefix into account (for custom indexing).
Everything necessary to carry out pre-clockwork inbounds evaluation.
Evaluation of inbound mappings during correlation, i.e.
Evaluates "pre-mappings" i.e.
Prepared Prism Query with placeholders.
Prepared Query represents query with filter with placeholders, which can be used for search.
This configuration will pre-provision a disabled account defined time before focus's activation/validFrom date.
This evaluator pre-provision account base on duration from configuration PreProvisionActivationMappingType.
A code that executes before local or distributing activity run takes place.
 
 
 
 
 
Used to define preview panels, for now it is only used on home (dashboard), but maybe later, we will need to show tables/forms in preview form also at other places.
 
 
Configuration for PrimaryChangeProcessor.
 
 
 
Set of prism-related asserts.
 
Prism specific configuration, mainly for performance optimizations and tuning
 
 
Prism container groups items into logical blocks.
 
 
 
Definition of a prism container.
Definition of a property container.
 
Property container groups properties into logical blocks.The reason for grouping may be as simple as better understandability of data structure.
 
 
 
Used when accessing an item whose definition was removed.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Compiled security constraints for a given operation and phase applicable to a prism entity (Item or PrismValue).
Compiled constraints related to an Item; they describe access to their values.
Compiled constraints related to a PrismValue; they describe access to contained sub-items.
 
 
 
Marker interface to distinguish property/reference/container/any lists in prism containers.
 
Interface to plug in a monitoring code to prism.
 
 
 
Common supertype for all identity objects.
TODO
MidPoint Object Definition.
Common supertype for all identity objects.
Extension of PrismContainerValue that holds object-specific data (OID and version).
Extension of PrismContainerValue that holds object-specific data (OID and version).
 
 
 
 
 
 
 
Parses a given input into prism or POJO objects.
 
 
 
The same as PrismParser but has no IOException on parseXYZ methods.
 
Property is a specific characteristic of an object.
Definition of a prism property.
Property Definition.
 
Property is a specific characteristic of an object.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Object Reference is a property that describes reference to an object.
 
 
Object Reference Schema Definition.
 
Object Reference is a property that describes reference to an object.
 
 
 
 
 
 
 
 
 
 
 
 
 
Schema as a collection of definitions.
 
Takes care of serializing prism objects and other beans, i.e.
 
Statically holds an instance of PrismContext (and maybe other beans later).
 
Class that statically instantiates the prism contexts and provides convenient static version of the PrismContext and processor classes.
 
TODO clean this up as it is part of prism-api!
 
 
 
DeltaSetTriple that is limited to hold prism values.
DeltaSetTriple that is limited to hold prism values.
 
 
 
 
 
 
 
 
 
Describes set of items that are or have been processed.
Describes an item (typically an object) that is or has been processed.
Metric information, currently for reporting purposes.
ItemDelta augmented with functionality needed to display it in a complex way, for example, with the information on real change(s) to the object.
Value touched by a delta, along with their processing ProcessedObject.ValueWithState.State.
 
Default (and the only) implementation of ProcessedObject.
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Responsible for distributing instances of ItemProcessingRequest to individual worker threads.
Specifies the basic scope of synchronization (or potentially other resource-related) activity, usually given by [resource, kind, intent, object class name] tuple.
Traces processing of low-level operations like selectors or authorizations processing.
 
 
 
 
 
 
 
 
Specifies requirements on execution of processor methods through ClockworkMedic.partialExecute and related methods.
Marker annotation for medic-invocable projection processor method.
Typical processor "component-level" method that performs a well defined part of the computation.
 
Almost the same as Supplier, but this one is Serializable.
 
 
 
 
 
 
A configuration for profiling features of midPoint.
 
This is a blueprint for single method call, or ProfilingEvent as we call it.
IMPORTANT NOTES: 1.
 
 
This filter provides functionality to profiling loggers to act as they don't inherit rootAppender, thus forwarding profiling and performance logs only into MIDPOINT_PROFILE_LOG.
 
EXPERIMENTAL
 
 
 
 
 
 
Object capable of receiving updates on progress.
 
Describes a state of the operation.
There are some basic kinds of activities relevant for progress reporting.
We usually report on entering and exiting a particular activity.
An interface that model uses to report operation progress to any interested party (e.g.
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
A page that supports progress reporting, e.g.
A page that supports progress reporting, e.g.
 
 
 
 
 
Typical processor "component-level" method that performs a well defined part of the computation.
Represents execution of a change on given projection.
 
Used to find a matching projection context.
Uniquely identifies ModelProjectionContext.
 
 
 
 
Processor for projection credentials.
 
Loads the full resource object for a projection context.
Updates focus -> shadow links (linkRef, to be renamed to projectionRef) based on ShadowDeathEvent emitted by provisioning.
 
Evaluates a set of mappings related to a projection.
TODO
TODO
TODO
Specification of the way how projections are handled on the resource.
 
Responsible for the acquisition of all projections for a focus.
Creates value metadata for source projections: resource objects that are to be fed into inbound mappings.
Processor that determines values of account attributes.
Projector recomputes the context.
 
Runnable with proper set of exceptions that fit running of projector components.
Trace for Projector component operation.
Marker interface for processors in Projector.
 
Trace for Projector.project operation.
 
 
 
Work definition for the propagation activity.
 
 
This class is used to wrap PrismProperty values for JAXB objects with List properties.
Java class for PropertyComplexValueFilterType complex type.
 
 
Relative difference (delta) of a property values.
TEMPORARY.
 
Relative difference (delta) of a property values.
 
TODO
JAXB version of PropertyModificationOperation class.
Java class for PropertyNoValueFilterType complex type.
DEPRECATED
 
 
Java class for PropertySimpleValueFilterType complex type.
 
 
 
 
Expression gets IntegerStatType as an input, IntegerStatType is derived from collection.
TODO
Specific subtype for protected binary byte array data.
 
This class was originally generated.
 
Created by honchar
This class was originally generated.
Created by honchar
Created by honchar
 
 
Creates protectors based on corresponding builder objects.
 
Ultimate origin of the data.
Mapping that manages provenance metadata.
Specifies data provenance properties for a particular data feed (source), such as resource.
 
Provenance metadata provide high-level information about origin of the value.
 
 
Configuration of a service provided by midPoint.
DTO that contains provisioning run-time configuration and diagnostic information.
 
 
 
Util methods for working with shadows and resources.
TODO reconsider usefulness of this class
 
 
Trace for provisioning operation.
Type of an operation (change).
Script argument.
An enumeration that defines where the script will be executed.
Specifies a script to be executed during provisioning.
Provisioning Service Interface * Status: public * Stability: STABLE, only compatible changes are expected This service retrieves information about resource objects and resources and handles changes to resource objects.
This is "live" provisioning statistics.
Statistical information on operations executed on a specified resource, dealing with given object class.
 
 
Information on operations of given type and result status.
Prints provisioning statistics.
Statistical information on operations executed on resources.
 
 
TODO
 
Work state for a pure composite activity.
Statically-typed "purge-schema" action.
Executes "purge-schema" action.
Querydsl query type for "m_abstract_role" table.
Mapping between QAbstractRole and AbstractRoleType.
Querydsl query type for "m_access_cert_campaign" table.
Querydsl query type for "m_access_cert_case" table.
Querydsl query type for "m_access_cert_definition" table.
Querydsl query type for "m_access_cert_wi" table.
Querydsl query type for case work item reference tables.
 
 
Querydsl query type for "m_archetype" table.
Mapping between QArchetype and ArchetypeType.
Querydsl query type for "m_assignment" table.
Querydsl query type for "m_assignment_holder" table.
Mapping between QAssignment and AssignmentType.
Querydsl query type for assignment reference tables (for assignment metadata references).
Querydsl query type for `MA_AUDIT_DELTA` table.
Querydsl query type for `MA_AUDIT_EVENT` table.
Querydsl query type for `MA_AUDIT_REF` table.
Querydsl query type for "m_case" table.
Mapping between QCase and CaseType.
Querydsl query type for "m_case_wi" table.
Mapping between QCaseWorkItem and CaseWorkItemType.
Querydsl query type for case work item reference tables.
Querydsl query type for "m_role_analysis_cluster" table.
 
Querydsl query type for "m_connector" table.
Querydsl query type for "m_connector_host" table.
Mapping between QConnectorHost and ConnectorHostType.
Mapping between QConnector and ConnectorType.
Querydsl query type for "m_container" table.
Mapping between QContainer and Containerable.
Querydsl query type for "m_dashboard" table.
Mapping between QDashboard and DashboardType.
Querydsl query type for "m_ext_item" table with the catalog of indexed extension items.
QFocus<R extends MFocus>
Querydsl query type for "m_focus" table.
Querydsl query type for "m_focus_identity" table.
Mapping between QFocusIdentity and FocusIdentityType.
QFocusMapping<S extends FocusType,Q extends QFocus<R>,R extends MFocus>
Mapping between QFocus and FocusType.
Querydsl query type for "m_form" table.
Mapping between QForm and FormType.
Querydsl query type for "m_function_library" table.
Querydsl query type for "m_generic_object" table.
Mapping between QGenericObject and GenericObjectType.
 
Querydsl query type for "m_lookup_table" table.
Mapping between QLookupTable and LookupTableType.
Querydsl query type for "m_lookup_table_row" table.
Mapping between QLookupTableRow and LookupTableRowType.
Querydsl query type for "m_mark" table.
Mapping between QMark and MarkType.
Querydsl query type for "m_message_template" table.
 
Deprecated.
 
 
 
 
 
QName <-> URI conversion.
 
 
Querydsl query type for "m_node" table.
Mapping between QNode and NodeType.
QObject<R extends MObject>
Querydsl query type for "m_object" table.
Querydsl query type for "m_object_collection" table.
QObjectMapping<S extends ObjectType,Q extends QObject<R>,R extends MObject>
Mapping between QObject and ObjectType.
Querydsl query type for object owned references.
Querydsl query type for "m_object_template" table.
Mapping between QObjectTemplate and ObjectTemplateType.
Querydsl query type for "m_operation_execution" table.
Querydsl query type for "m_org" table.
Querydsl query type for org closure table.
Mapping between QOrg and OrgType.
Behavior common for child tables owned by other table, either directly by object or another container.
Marks mappings for QOwnedBy entities.
 
 
 
 
Querydsl query type for "m_reference" table that contains all persisted object references.
Base mapping between QReference subclasses and ObjectReferenceType.
Querydsl query type for "m_report" table.
Querydsl query type for "m_report_data" table.
Mapping between QReportData and ReportDataType.
Mapping between QReport and ReportType.
Querydsl query type for "m_resource" table.
Mapping between QResource and ResourceType.
Querydsl query type for "m_role" table.
Mapping between QRole and RoleType.
Querydsl query type for "m_security_policy" table.
Mapping between QSecurityPolicy and SecurityPolicyType.
Querydsl query type for "m_sequence" table.
Mapping between QSequence and SequenceType.
Querydsl query type for "m_service" table.
Mapping between QService and ServiceType.
Querydsl query type for "m_role_analysis_session" table.
 
Querydsl query type for "m_shadow" table.
Mapping between QShadow and ShadowType.
 
 
Querydsl query type for "m_system_configuration" table.
Querydsl query type for "m_task" table.
Mapping between QTask and TaskType.
 
Querydsl query type for "m_trigger" table.
Mapping between QTrigger and TriggerType.
Item processing outcome plus optional qualification.
Formats bucket content value into three columns (characterization, from, to).
Here is the language structure:
TODO cleanup this interface
Note that expressions are not serialized yet.
 
Instant converter for Querydsl.
String to JSONB converter for Querydsl.
 
 
Query related repository exception.
TODO it is still unclear if this interface will be officially supported.
 
Defined how the expression will be interpreted in queries when it returns empty (or null) values.
 
Key for repository query cache.
Common mapping functionality that covers the need for mapping from item paths to table columns, but also to nested embedded mappings (e.g.
Holds QueryTableMapping instances obtainable by various key (e.g.
 
 
Common supertype for mapping items/attributes between schema (prism) classes and tables.
 
 
TODO
 
TODO move to more appropriate place (common for both wf and certifications)
 
 
 
Specifies type of quote.
Querydsl query type for "m_uri" table that contains repetitive URIs (e.g.
Querydsl query type for "m_user" table.
Mapping between QUser and UserType.
Querydsl query type for "m_value_policy" table.
Mapping between QValuePolicy and ValuePolicyType.
 
Implementation of the top-level of the Query fluent API grammar (see QueryBuilder).
Sampling using random distribution of samples.
Variable is in the form - (empty) - number - number:Y or - number:X:Y Returns a random number between X and Y (inclusive), with the default values of X = 0, Y = 999999999.
 
 
 
 
TODO
TODO
Formatting that - in fact - does nothing.
 
 
A structure holding "raw" definition of a resource attribute, i.e.
Temporary data structure used to hold raw (fetched) object class definitions.
A class used to hold raw XNodes until the definition for such an object is known.
 
 
Describes read capability.
Deprecated.
 
Type for recipient expression, which can be either a focus or a string.
 
Recomputes specified objects.
 
Recomputes specified objects.
Statically-typed "recompute" action.
Executes "recompute" action.
 
 
 
The reason of existence of this class is to send ReconciliationResult object to ReconciliationResultListener after the whole activity finishes.
Launches reconciliation activity tasks.
Processor that reconciles the computed account and the real account.
 
Testability interface.
 
Executes the reconciliation.
State of the reconciliation activity.
TODO
TODO
 
Defines the target (page/panel/url) to be redirected to
Executes "reencrypt" action.
Common contract for types representing reference real values (not PrismReferenceValue).
 
 
 
 
Filter processor that resolves ExistsFilter.
 
 
 
 
 
Denotes reference path segment: either ".." meaning owner, or "@" meaning referenced object.
Resolves references in intelligent way: taking filters (and embedded expressions) into account.
 
 
 
Creates a generic reference (or references) based on specified condition for the referenced object.
 
Create an expression that provides a reference based on search results.
 
 
 
 
 
Operation on an object would cause inconsistencies in referential integrity.
 
 
 
 
 
TODO
 
Creates refined class and object type definitions in ResourceSchemaImpl objects.
 
 
Filter processor for reference item paths embedded in table as three columns.
 
 
Refreshable page (or component).
 
 
Delta value processor for multi-value references stored in separate tables.
Filter processor for reference item paths resolved via QReference tables.
RefTableTargetResolver<Q extends QReference<R,?>,R extends MReference,TQ extends QObject<TR>,TR extends MObject>
Resolver that knows how to traverse from reference table to the reference target.
How to ensure transport-level security when sending the message.
TODO
TODO
Sampling using regular distribution of samples.
Activity handler for reindexing activity.
 
Re-indexes specified repository objects.
 
 
 
 
 
Definition of a single (custom) relation.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Deprecated.
Denotes a set of relations serving a single purpose.
 
Created by Viliam Repan (lazyman).
 
A component that holds current definition of object relations.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Definition of (custom) relations.
Configuration for relation search item.
 
 
Configuration structure related to request access UI wizard and its second step - relation selection.
Created by Viliam Repan (lazyman).
 
Built-in (hardcoded) relations.
 
 
 
A request to release work item(s) that have been claimed previously.
 
 
TODO
Element state that we can return to e.g.
Interface for authentication module for remote authentication module
EXPERIMENTAL.
 
 
 
Provides access to audit events at the repository (AuditService) level.
 
 
Check if database is up and available.
 
This is only used in tests.
Provides access to objects at the repository level.
 
Behavior for report.
 
 
 
Report configuration based on report configuration schema.
 
Reports outputs.
 
 
Selects which report engine should be used to render this report.
State of the report export activity.
 
 
 
 
Signals that a report output has been created.
Notifies external observers about "report created" events.
 
 
 
 
 
 
 
 
 
General utilities to support report creation.
Specification of midPoint report.
 
Base implementation class for action (Ninja command) running against the repository.
Trace for repository ADD operation.
 
Repository Assignment Data Provider
Interface for beans that are repository-ware, i.e.
Read-through write-through repository cache.
TODO
 
Configuring various aspects of the repository - in addition to those that are configured statically using config.xml file.
 
Trace for repository DELETE operation.
DTO that contains repository run-time configuration and diagnostic information.
Base repository exception.
Trace for repository getObject operation.
TEMPORARY - REMOVE
Trace for repository getVersion operation.
Creates an appropriate SearchableItemSource at the repository level.
Runtime exception wrapping other exception that occurred during object transformation inside mapping (e.g.
Trace for repository MODIFY operation.
 
 
Result for deserialization of prism values stored in the repository.
 
 
Information about single repository operation kind (e.g.
 
Trace for repository operation.
General repository op (raw/cached, read/update, ...).
Formats sql (repo/audit) performance information.
Information about repository performance.
 
 
Query diagnostics request: contains query to be executed (or at least translated) and some options.
Response from the "diagnose query" operation.
 
Trace for repository searchObjects/searchObjectsIterative operation.
TEMPORARY - REMOVE
Identity Repository Interface.
 
 
 
Level of details when reporting repository performance statistics.
How are repository statistics collected.
How repository statistics are collected and reported.
Abstract request that is going to be processed by the case engine.
Created by Viliam Repan (lazyman).
 
Does no actual data movement; just requires that the value does exist in the target object.
not use it, temporary needed interface for old reset password configuration
 
 
Information on the resource referenced by particular ResourceObjectConstruction - the object as well as information what to do in case it couldn't be resolved.
Resolution of a path in a prism container definition, as far as possible.
Resolves a reference, e.g.
Resolves definitions and old values.
Statically-typed "resolve" action.
"One stop shop" for accessing various aspects of a resource (defined by ResourceType object).
 
Defines how the mapping of the activation section is handled for the resource.
The state of the resource how the administrator want it to be.
 
 
/** Resource Object Attribute is a Property of Resource Object.
TODO
TODO review docs Resource Object Definition (Object Class).
Resource Object Definition (Object Class).
TODO review docs Resource Object.
Information about a resource attribute that is available from the connector and optionally refined by configuration in resource `schemaHandling` section.
 
 
An attribute definition (obtained typically from the connector), optionally refined by information from `schemaHandling` section of a resource definition.
 
Description of the attribute handling details, such as display name, read/write access and value and synchronization expressions.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Configuration of resource "business" aspects such as workflow parameters, notifications, approvers, owners, etc.
 
 
 
Configuration of consistency mechanisms.
 
Deprecated, for removal: This API element is subject to removal in a future version.
Deprecated, for removal: This API element is subject to removal in a future version.
Deprecated, for removal: This API element is subject to removal in a future version.
 
 
TODO
 
 
 
 
 
 
Description of the common item handling details, such as display name, read/write access and value and synchronization expressions.
Configuration of inbound/outbound resource mappings evaluation.
Merges ResourceType objects.
 
Direction of a resource object association.
Describes how entitlement is associated to the subject (e.g.
Listens for notifications about resource object changes.
 
Describes a resource object class (e.g.
 
Default implementation of ResourceObjectClassDefinition.
 
Result of the object classification.
Contains "construction bean" (ConstructionType) - a definition how to construct a resource object.
Builder for resource object constructions.
 
Trace for evaluation resource object construction.
A definition that describes either an object class (as fetched from the resource, optionally refined by `schemaHandling`), or an object type (as defined in `schemaHandling` part of resource definition).
 
Event about resource object (account) creation, modification, or deletion.
Specification of focus objects corresponding to given resource object type.
 
 
 
 
Definition of resource object lifecycle handling.
Describes how "multi-accounts" are treated for given object type.
Describes the options for an owner of a resource object.
An option when choosing an owner for a resource object.
 
Resource object pattern.
A context generally useful for the manipulation of a shadow, e.g.
The default implementation of ResourceObjectProcessingContext.
 
The strategy used to resolve resource object references.
The strategy used to resolve resource object references.
Reference to a resource object.
How should be the explicit query applied to the default query stemming from resourceRef / objectclass / kind / intent specification.
 
Work definition that can provide object set specification.
Specifies a set of resource objects to be processed.
 
Describes a change of a specific resource object together with definitions of the source and possibly also other information.
Description of the change in the external resource.
 
 
Execution of resource objects reconciliation (the main part of reconciliation).
 
 
 
 
Definition of "resource object type".
 
Default implementation of ResourceObjectTypeDefinition.
Defines a type of resource objects.
Reference to a super-type of an object type.
Delineates the boundary of a resource object type (i.e.
Delineates the boundary of a resource object type (i.e.
Level of binding between dependent resource objects.
TODO
Describes a dependency of an object type on another object type.
 
 
Identifies a resource object type - by kind and intent.
 
 
 
 
Specifies volatility of resource objects or their attributes, i.e.
 
Specifies the "coordinates" of a resource operation covering multiple objects, like search, or live sync.
 
 
 
Describes an attempt to apply a change to a specific resource object.
Listens for ResourceOperationDescription events.
 
A schema covering the whole resource.
 
 
Direct implementation of ResourceSchema interface.
 
 
TEMPORARY! These methods are used in tests.
Various utility methods related to resource schema handling, including sophisticated object definition lookup.
Specialization of standard SearchSpecification dealing with resource objects search.
Aggregate bean containing resource OID, kind, intent, object class and tag flags.
 
 
 
Creates resource-related tasks: import, reconciliation, live sync, and maybe others in the future.
 
 
 
 
Whether capabilities and schema should be written back to the resource (into repository or in-memory version).
 
 
Resource represents a system or component external to the IDM system which we manage.
Created by honchar
Methods that would belong to the ResourceType class but cannot go there because of JAXB.
 
TODO find appropriate place for this class
EXPERIMENTAL TODO make interface generic and integrate it into model API
EXPERIMENTAL TODO: - existence of dependent kind/intent/resource (in thorough scope) - checking references (thorough) - mapping: unknown channel / except-channel - empty mapping (?) - iteration tokens - invalid objectclass in synchronization - invalid focus type in synchronization - empty correlation, correlation condition? - empty confirmation condition? - empty synchronization condition?
 
 
Because ResourceWizard is so simple, we want to change Previous button semantics: it should go to physically previous step (in the list of steps); not to the previously visited step.
 
 
 
 
TODO review
Support for simple index page with REST API endpoints (HTML and JSON).
 
 
Represents a REST action (method) that can be authorized.
Spring configuration for MVC-based REST service.
 
MidPoint-specific information about a REST handler method.
Classes implementing this interface are used to handle iterative results.
Helps with row transformation of result lists, possibly in stateful context.
Type that contains configuration of ConnId results handlers.
Statically-typed "resume" action.
Executes "resume" action.
 
 
TODO
Processing of the specified account should be retried later.
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Hyperlink with a label, menu and other data that control a rich presentation of the link.
Created by Viliam Repan (lazyman).
 
The RoleAnalysisAggregateChartModel class is a LoadableModel that generates aggregate charts for role analysis based on provided data.
The `RoleAnalysisAlgorithmUtils` class provides utility methods for processing and analyzing data clusters and outliers in role analysis.
 
Enumeration representing different role analysis processing modes.
 
Enumeration representing different chunk modes that can be used for role mining data set generation.
TODO
 
TODO
 
A set of grouped objects based on density and similarity.
 
 
Options for Detecting Business Roles These parameters serve as key specifications for performing searches and analyzes aimed at discovering different business roles.
Contains information about detected or found patterns.
Role analysis detection processing mode.
The RoleAnalysisModel class stores role analysis data, count of roles and users that are used in the histogram chart.
Enumeration representing different operation modes for role analysis.
TODO
 
TODO
Role analysis processing mode (user or role).
The `RoleAnalysisProgressIncrement` class provides a way to increment progress during role-mining operations.
 
 
Utility methods for working with role analysis objects in the Midpoint system.
 
Object clustering options for "role" mode.
 
The container consists of statistical data about the role analysis session.
Session for role analysis, e.g.
 
Enumeration representing different sorting modes for role analysis.
 
Utility class for resolving cell colors and status in the context of role analysis tables.
 
 
Utility class for role analysis table tools and operations.
 
The `RoleAnalysisUtils` class provides utility methods for various operations related to role analysis.
 
Implements clustering of roles based process mode.
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Configuration structure related to request access UI wizard and its third step - role catalog.
 
Role collection view defines structure that should be shown in request access UI wizard - in role catalog step.
 
A configuration for role management: role catalog, role assignments, etc.
 
General methods useful for role analysis and management, e.g.
Specific activities related to role membership management, supporting e.g.
 
Definition of "role membership management" activity.
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
Definition of object with respect to subject relation to a role.
 
 
 
 
A role in the extended Role-Based Access Control (RBAC) sense.
 
Fake root context.
RootUpdateContext<S extends ObjectType,Q extends QObject<R>,R extends MObject>
Root context of the update context tree, see SqaleUpdateContext for more information.
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Rule<C,A extends Action<?>>
 
 
 
RuleReactorContext<E extends Exception,C,A extends Action<E>,R extends Rule<C,A>>
 
Describes capability to execute operations with specified identity.
Takes care of optimized "run as" operations.
Factory for RunAsRunner instances.
 
Running lightweight asynchronous task.
A task that is directly used to execute the handler code.
"Statistics collection" aspect of a running task.
 
 
 
 
See the grammar in Javadoc for QueryBuilder.
 
See the grammar in Javadoc for QueryBuilder.
See the grammar in Javadoc for QueryBuilder.
See the grammar in Javadoc for QueryBuilder.
 
See the grammar in Javadoc for QueryBuilder.
 
Using DELETE after ADD in fluent builder goes against the actual semantics that first executes DELETE and then ADD - use the correct order to avoid deprecated methods.
See the grammar in Javadoc for QueryBuilder.
See the grammar in Javadoc for QueryBuilder.
Note: When dealing with PolyStrings, the real values should be of PolyString, not of PolyStringType type.
SAML2 authentication module support authentication via Identity provider with SAML2.
SAML2 key.
SAML2 authentication module, network configuration.
 
SAML2 provider.
SAML2 provider metadata.
SAML2 authentication module, service provider configuration.
Possible signing algorithm.
Sample showing a custom focus form that displays semi-static form.
Inspired by work of Cédric Champeau (http://melix.github.io/blog/2015/03/sandboxing.html)
 
Things that we want to remember for all task scanners, like scanning timestamps.
Work state for scanning activities (validity scanner, trigger scanner, shadow refresher).
 
 
Describes the state of the (local) scheduler.
Task schedule.
Why was this process started? For processes based on policy rules we define it via relevant policy rules.
TODO Note that the rule should be triggered.
Describes capability to discover resource schema.
 
 
 
 
Type for prism schema definition.
 
Schema (prism or non-prism) with additional information.
Schema (prism or non-prism) with additional information.
Error regarding schema.
 
 
 
 
 
TODO
Implements EntityResolver and ErrorHandler that reports sax errors to log.
Specification of handling details for resource schema.
 
 
 
Class to be used by schema processor but also by SchemaDefinitionFactory subclasses.
Maintains system-wide schemas.
 
 
 
Registry and resolver of schema files and resources.
Aggregation of various schema and prism managed components for convenience.
Constants for use in tests.
Takes a midPoint Schema definition and produces a XSD schema (in a DOM form).
Transforms the schema and objects by applying security constraints, object template schema refinements, etc.
Provided object does not conform to the internal schema.
 
 
Created by Viliam Repan (lazyman).
 
Configuration for scope search item.
 
 
Cache for compiled scripts and interpreters, aware of expression profiles.
 
Describes capability to execute scripts (short pieces of program) on the connector or resource.
Trace for script evaluation operation.
 
Object(s) on which the script should be executed.
 
TODO
FIXME review this description The expressions should be created by ExpressionFactory.
The whole evaluation of a script: ScriptExpressionEvaluatorType compiled into ScriptExpression and evaluated.
Executes specified script written e.g.
Data structure that contains all the configuration details for script execution, except for code itself.
 
Generic script expression.
Creates ScriptExpression instances.
 
The type of the expression result, either "list" or "scalar".
Utility methods related to ScriptingExpressionType beans.
Utility methods related to processing data objects.
Options related to evaluation of scripting expression.
Root of the expression type inheritance hierarchy.
Definition of a scripting variable.
Definition of scripting variables.
Specifies limitations (via ScriptLanguageExpressionProfile.permissionProfile) on execution of a script expression in given ScriptLanguageExpressionProfile.language.
Specifies restrictions for execution of script expressions.
 
Tool to run database scripts.
Information about script variable during evaluation.
 
 
Provides access to items (and their count) based on the search specification.
A run of a given search-iterative activity.
Provides execution logic and/or execution state related to a search-based activity run.
 
 
Configuration of the search box (the set of input fields that control definition of search query).
The mode of the search box.
The scope of the search box.
 
 
 
 
 
Evaluates "search" scripting expression.
Queries the model for objects of a given type, optionally fulfilling given condition.
 
 
 
 
 
Describes input parameters for the search filter.
 
 
 
 
 
 
 
Definition of search hierarchy scope.
TODO better class name
 
 
The list of the search properties to be configured for the search panel.
Search item
Create an expression based on search results.
A response from searchObjects operation.
A request for searchObjects operation.
Handler for searchObjects/searchObjectsIterative operations.
 
 
Producer worker for all search-based operations, such as export and verify.
 
 
Objects of this type are considered READ ONLY.
"Compiled" specification of items that are to be processed by SearchBasedActivityRun.
 
 
PasswordTextField that assumes its underlying model is secure enough to be serialized.
 
Manager of security context.
Producer of a value that is Serializable and operates under given OperationResult.
Needs to know about the SecurityContextManager implementation.
Answers questions about authorizations, for example whether a user is authorized to do something.
A sink for authorization/selector evaluation messages.
 
 
 
Object that contains definitions of overall security policy.
 
 
Answer to the security question.
Definition of a single security question.
 
 
Structure that specifies policy for security questions.
 
Definition of "security questions form" module.
 
 
 
 
 
Exception indicating violation of security policies.
 
 
 
 
 
 
 
 
 
 
 
 
Popupable panel with listed items which can be searched and selected The component can be used as More button popup or saved searches popup on search panel
 
 
Used as a clickable ajax link after which selection of the object is performed.
 
 
TODO
Select given item.
 
A clause of a ValueSelector.
 
Keeps everything needed to evaluate whether a clause matches given value or how is clause translated to a filter.
Selector-qualified options for a get-like operation.
 
TODO
Translates a selector (ObjectSelectorType) to appropriate ObjectFilter.
Something of interest during tracing selectors and their clauses processing (matching and filter evaluation).
Just a marker.
Just a marker.
 
 
 
 
Structure that specifies policy for password management.
There are som ugly data and long strings.
Contextual information related to sending of a message.
Definition of a sequence object that produces unique values.
Created by Viliam Repan (lazyman).
Returns current value of a given sequence object.
 
Get a sequential value from a named sequence.
 
 
 
 
 
Everything we want to maintain during the serialization process.
 
 
Collection of java.io serialization utilities.
 
 
 
 
 
 
 
 
 
This object type represents any kind of abstract or concrete services or devices such as servers, virtual machines, printers, mobile devices, network nodes, application servers, applications or anything similar.
 
 
 
TODO
 
 
Attribute values from the resource.
 
Result of checking a particular shadow.
Shadow constraint uniqueness setting.
The original idea behind this activity was to treat shadows on (asynchronous) Kafka resources that did not support "read" operation (or did that in a very limited way).
 
Deletes all shadows that have not been updated for given time.
 
An ObjectDelta enriched by ResourceShadowCoordinates (pointing to a resource object type).
An ObjectDelta enriched by ResourceShadowCoordinates (pointing to a resource object type).
Current state of the correlation process.
Emitted when a shadow is converted from live to dead and then eventually to deleted.
Listens for notifications about shadow death events i.e.
Created by Viliam Repan (lazyman).
 
 
Expression based on selecting a specific projection.
Shadow discriminator uniquely identifies a projection among other projections linked to the same focus.
A preprocessor that fetched incoming object (presumably resolved using noFetch option) in order to obtain full attributes.
TODO
An aspect of shadow integrity to be diagnosed and/or fixed.
Task handler for "Shadow integrity check" task.
 
 
Definition for shadow integrity check activity.
Defines the kind of a shadow.
The lifecycle state of a shadow and the corresponding resource object.
Describes shadow liveness (or death) state.
 
 
 
Purpose for existence (or non-existence) of a resource object referenced by the shadow.
"Synchronizes" resource object shadow: retrieves the resource objects and calls change notification dispatcher.
Scanner that looks for pending operations in the shadows and updates the status.
 
 
Looks for pending operations in shadows and updates their status.
TODO
Summary report from shadow checking task run.
 
 
 
Created by Viliam Repan (lazyman).
 
TODO
Local copy of any object on the provisioning resource that is related to provisioning.
Methods that would belong to the ShadowType class but cannot go there because of JAXB.
 
 
 
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
 
Created by Viliam Repan (lazyman).
Implementing class for simple model-level search-based activity handlers.
 
TODO
TODO
TODO
Simple schema describing how work items for a case should be created.
 
 
 
Very simple expression utils.
TODO
SimpleItemFilterProcessor<T,P extends com.querydsl.core.types.Path<T>>
Filter processor for a single path with straightforward type mapping and no conversions.
 
 
Object resolver for simple cases.
 
Deprecated.
TODO
Created by Viliam Repan (lazyman).
Minimalistic context needed to evaluate inbound mappings outside of both LensContext and SynchronizationContext.
TODO
Very simple report reader, to be used for tests or for displaying parts of reports created.
TODO
TODO
 
TODO
Defines a simple (non-structured) definition.
 
TODO document
TODO
This is just a simple representation of custom form validation error.
 
 
 
 
Created by Viliam Repan (lazyman).
TODO
Typical processor "component-level" method that performs a well defined part of the computation.
Represents the data passed from the clockwork to the simulation manager via Task interface, namely SimulationDataConsumer facet.
Accepts simulation data.
Merges SimulationDefinitionType objects.
Definition of a specific simulation.
Specifies which event marks to consider for given simulation.
An aggregation function used to compute the (aggregated) metric value.
Specification of how metric values are aggregated.
Specification of how is the metric value computed for individual "processed objects".
Works with the metric computations at one place.
 
Explicit definition of a metric.
Set of dimensions of a partition.
 
 
The scope of a partition, i.e.
Partial or total aggregation of values for given metric.
 
Parsed form of SimulationMetricReferenceType, suitable e.g.
 
 
 
Reference to a metric - either by identifier (for explicitly defined ones) or by mark OID (for event mark based).
Definition of the use of simulation metrics for the particular type of simulation.
Values of a simulation metric, aggregated along with specific dimensions.
 
A predicate over SimulationResultProcessedObjectType and/or ProcessedObject instances.
Container for options that allow selectively switch behavior of different features during simulation or preview changes.
Generic option to switch behaviour of feature into safe (transient behaviour) or non-safe mode (behaviour that can leave persistent changes after processing).
Specifies which (non-tag) metrics to consider for given simulation.
Created by Viliam Repan (lazyman).
A value of a metric observed on a particular object processed by the simulation.
Live representation of a simulation result.
Implementation note: must be thread-safe.
 
 
 
An object that was processed during a particular simulation run.
Created by Viliam Repan (lazyman).
Result of a simulation run.
Utilities for SimulationResultType.
Created by Viliam Repan (lazyman).
Live representation of a simulation transaction.
 
Temporary
EXPERIMENTAL
 
Information about performance of a given (single) cache.
Report on the cache state.
 
 
SimulationData representing a single delta (in a context).
This class is final and must remain so, as it's not cloneable.
A message that is to be localized into specified language.
Experimental.
Information about single method performance.
SinglePathItemDeltaProcessor<T,P extends com.querydsl.core.types.Path<T>>
Processor for items represented by a single column (query path).
SinglePathItemFilterProcessor<T,P extends com.querydsl.core.types.Path<?>>
Item filter processor related to one table column represented by the SinglePathItemFilterProcessor.path.
 
 
 
 
 
 
 
 
Should we skip the processing if the focus is going to be deleted?
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Smart set of assignment values that keep track whether the assignment is new, old or changed.
 
 
Visitable element that is smart enough to avoid being visited twice during one visitation.
Keeps the state of the visitation in order to avoid visiting one object multiple times.
A visitation of a structure of SmartVisitables.
Where and how to send SMS notifications (or any other SMS).
Configuration of a particular SMS gateway.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
SMS (mobile text message) nonce authentication module.
Where and how to send SMS messages (or any other SMS).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Source<V extends PrismValue,D extends ItemDefinition<?>>
Expression evaluation source.
 
 
 
 
PrismValueDeltaSetTriple that also remembers the source from which it has originated.
Specification of a special item that cannot be described by a (fixed) item path.
Specification used to select special cases that are usually context-relative.
 
Utils for managing work definition for specific activities.
Used to obtain arbitrary Spring beans from withing scripts.
Audit service using SQL DB as a store, also allows for searching (see SqaleAuditService.supportsRetrieval()).
AuditServiceFactory for SqaleAuditService, that is DB-based auditing.
Extension of ItemRelationResolver, this is a common contract for resolver that helps with navigating over complex (non-single) item paths for both query and application of delta modification.
Declarative information how an item (from schema/prism world) is to be processed when interpreting query or applying delta (delta application is addition to sqlbase superclass).
Mix of common mapping support methods that is needed on both SqaleNestedMapping and SqaleTableMapping which are in separate branches of the hierarchy starting in repo-sqlbase - which is out of reach and sqale-specific functionality can't go there.
Sqale implementation for nested mapping with support for sqale specific types.
Description of internal read-by-OID operation in the context of existing JDBC session.
Set of operators supported by midPoint Native repository in addition to standard PG template available in Querydsl.
 
SQL repository context adding support for QName cache.
New SQL repository related configuration.
Common part of the SQL-based repository configuration.
Repository implementation based on SQL, JDBC and Querydsl without any ORM.
 
Mapping superclass with common functions for QObject and non-objects (e.g.
Update context manages state information related to the currently executed modify operation.
 
Mapper/fetcher of many detail records for one master record.
Logger for Querydsl executed queries, set to DEBUG to log queries or to TRACE to log parameter values as well (this causes additional formatting overhead).
Special comparing expression that does not conform to ComparableExpressionBase, but we need to order by it for some reason.
 
Used to access performance monitors.
Maintains a collection of SQL performance monitors, typically one for the repository and one for SQL audit service.
Execution context of the SQL query.
 
Component just under the service that orchestrates query transformation and execution.
Extension of SqlLogger that includes buffer for queries which can be inspected later.
 
Encapsulates Querydsl Configuration, our QueryModelMappingRegistry and other parts of SQL repository config and implements methods that need these.
 
 
Event describing the completion of a workflow process instance stage.
 
 
Tells the CaseEngine how it should open a stage.
This is an activity that can be instantiated in standalone way (i.e.
Registers standard midPoint synchronization actions in SynchronizationActionFactory.
 
 
 
A constraint that triggers when an object or assignment is in a given state.
Utility class for manipulation of static values in expressions.
Created by Viliam Repan (lazyman).
Markup filter that uses Spring static content with content hash in URL
 
 
Describes how task statistics (including progress and structured progress) are to be collected.
An object that receives various statistics and state information, processes them and provides them back to appropriate clients.
 
 
Logs reasonable information on item and bucket completion, with a level of detail driven by logging option set.
 
 
Indicates we should stop evaluating inbounds for given projection.
The processing should be stopped.
 
Type of storing exported widget data.
 
 
Creates content of string-based buckets (defined by StringWorkSegmentationType and its subtypes).
 
 
TODO
String matching rule that ignores the case.
 
Work bucket content defined as interval of string values.
 
 
Definition of valid single string limitation
 
 
 
Work bucket content defined using string value prefix.
 
Utility methods for string substitution needs in midPoint.
 
 
Work bucket content defined using string value.
How to construct work bucket filters based on defined boundary values.
Segmentation strategy that divides the processing space (represented by a set of string values) into a number of work buckets; either based on intervals, prefixes or exact value matching.
Interface for properties that have inner structur, such as PolyString.
Utility class intended to simplify implementation of clone / copy contract for generated PlainStructured objects.
Strategy for equals computation of PlainStructured objects
Strategy for hashCode computation of PlainStructured objects.
 
Created by Viliam Repan (lazyman).
When evaluation subjected clauses, we have to know who the subject is.
Mainly when looking for assignees/candidates, what delegators (and their abstract roles) are we interested in?
Selects some objects from all the objects in midPoint.
Subreport with expression.
How should we handle the situations when a sub-report produces either either multiple values, or no values at all?
Parsed form of the subscription ID string.
Enumeration for the type of subscription.
The state of the subscription with regards to the current situation (subscription ID presence, time, system features, and so on).
Representation of the subscription validity interval.
Enumeration for the validity status of the subscription.
Computes the SubscriptionState, caching components needed to compute it.
 
 
 
Configuration of the logger: the facility that collects log messages from subsystem code.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Originally, this was used for evaluation of `subtype` on objects.
 
Specifies the look and feel of the summary panel.
 
Reference to a super-correlator.
References super object type.
Declares a "super-resource".
Enumeration of supported SQL/databases (RDBMS).
Stop action.
 
 
An action that is executed during synchronization - like add focus, link, unlink, and so on.
 
 
Selects and executes a synchronization reaction.
Instantiates SynchronizationAction objects.
Action(s) that have to be executed in specified synchronization situation.
Defines an action to take when a synchronization situation is encountered.
Context of the synchronization operation.
Synchronization context ready for the synchronization, i.e.
Represents a synchronization change event (obtained typically by live synchronization or asynchronous update) that needs to be processed.
TODO
TODO
Prints synchronization information (new, i.e.
 
TODO
Information needed to carry out synchronization-related activities (classification, correlation, and execution of synchronization reactions).
Describes what the policy "decides" about a specific account.
TODO
Creates SynchronizationPolicy objects.
 
Default settings for synchronization reactions.
Defines reaction(s) to synchronization-related situations, plus other synchronization settings.
 
 
Reaction to synchronization situation or situations.
TODO TODO include SynchronizationOperationResult?
TODO
Synchronization service receives change notifications from provisioning.
Helper class that registers SynchronizationService as a provisioning change notification listener.
 
Complex description of a synchronization situation.
 
Describes how many times given synchronization situation transition has occurred.
TODO
How synchronization situation in shadows should be updated.
TODO
TODO
TODO
Tracks synchronization situation changes during a single item processing.
We recognize several flavors of synchronization tasks: import, reconciliation, live sync, and async update; later maybe others.
Defines a synchronization properties (configuration) for a resource.
 
 
 
 
Synchronizes a single resource object.
Plain "synchronize" (clockwork-based) action.
TODO It is comparable on the sequence number.
 
Auxiliary methods for synchronization tasks: Live Sync, Async Update, Import, Reconciliation, and - strange but true - Shadow Cleanup).
 
Specifies details how an audit event record property is created.
Details about creation and recording of audit events.
Specifies details regarding creation and recording of audit events.
Utility methods for audit-related system configuration options.
Adapter from SystemConfigurationChangeDispatcher to Cache.
Central point of dispatching notifications about changes to the system configuration object.
Dispatches "system configuration changed" events to relevant objects.
Application event related to system configuration change.
Listener that needs to receive notifications related to system configuration object changes.
Global settings related to correlation.
Specifies profile for expression evaluations, execution, restrictions, etc.
Application event related to system configuration being (re)loaded by SystemObjectCache.
This is an attempt to provide more typed access to config.xml file content.
 
Global configuration of simulations.
System configuration object.
 
 
All system (non-business) error condition should be derived from this type.
The system features related to the subscription handling.
Collects the information to fill the SystemFeatures instance.
 
Cache for system object such as SystemConfigurationType.
OID constants for system objects
 
 
TabbedPanel<T extends org.apache.wicket.extensions.markup.html.tabs.ITab>
 
 
TabCenterTabbedPanel<T extends org.apache.wicket.extensions.markup.html.tabs.ITab>
Tabbed Panel with different html file.
 
 
 
Resolver that knows how to traverse to the specified target query type.
 
How the tailoring is applied.
 
 
Evaluates resolved assignment target: its payload (authorizations, GUI config) and assignments/inducements.
Tells FocalMappingSetEvaluation how to find target object.
Configuration structure related to request access UI wizard and its first step - person of interest.
Task instance - a logical unit of work.
 
Provides common functionality related to activities (something like TaskManager does for tasks).
 
Describes the state of the activity or activities embedded in the task (and its subtasks - in the case of a root task).
Searchable computed indexes, which tries to capture common parameters used to identify objects (and resource objects), which are expected to be affected by execution of the task.
Mode of task auto-scaling.
Auto-scaling configuration for the task.
Executes arbitrary code that needs a Task and an OperationResult.
 
 
 
 
Whether a recurring task is bound tightly to one node (having allocated a thread on this node for the whole time of task run) or it should by dynamically placed on any suitable node when its execution time comes.
 
 
 
 
 
 
 
Utility methods useful for displaying task information.
 
 
TODO TODO TODO update this doc Original description: Adds "RUNNING" state to the TaskExecutionState (meaning the task is currently executing at a node).
 
Task error bean for native repository.
TODO: promised to be removed in 4.5, at least in this doc: https://docs.evolveum.com/midpoint/reference/admin-gui/admin-gui-config/
Created by honchar.
 
Exception that carries supplementary information on how it should be treated (with the respect to operation result and task run result status).
Constraints on task execution, e.g.
Specification of the environment in which the task should execute.
TODO
Limitations for execution of tasks on a given node.
Describes the execution mode this task runs in.
 
Execution state provides information about the task overall high-level execution state.
 
Limitations for execution of a task group on a given node.
 
 
Contains all non-trivial task information (progress, workers, overall status, and so on) needed for the use of GUI and reporting.
Attaches TaskInformation to SelectableBean for `TaskType`.
 
 
Support for recording iterative operations directly on tasks - where activities are not available.
Notifies external observers about task-related events.
Task Manager Interface.
Provides an information whether we can allow to run the system in clustered mode.
 
 
 
 
 
 
 
Updates "indexed" values in task objects; currently TaskType.getAffectedObjects().
 
Utility methods related to task operation statistics.
 
 
Task persistence status.
 
Whether the task activity is to be executed only once (single-run tasks) or periodically (recurring tasks).
 
Used to resolve tasks (mainly subtasks) in various utility methods in this package.
 
 
Role of the task in the execution of the local root activity.
Represents a run of a task.
Single-purpose class to return task run results.
 
 
 
Scheduling state informs about the state of the task regarding its scheduling.
Interface of the Model subsystem that provides task-specific operations.
 
 
Collects synchronization statistics related to processing of an activity within a task.
 
 
Utilities related to task trees.
TaskType contains information about a task (either transient or persistent).
TODO
What to do after task is unpaused (i.e.
 
Utility methods related to the Task objects.
Why is the task in the waiting state?
 
Prints work buckets management performance information.
 
 
Created by Viliam Repan (lazyman).
All pieces of configuration data that are relevant for correlation obtainable from an object template.
 
 
 
Evaluation of object template mappings.
 
 
 
 
 
 
Selects an object by comparing tenant information.
 
Describe terminate session event cluster-wide.
Describes capability to test connection to the resource once the connector is configured.
Created by honchar.
 
 
Statically-typed "test-resource" action.
Executes "test-resource" action.
Enumeration of standardized test connection operation names as they are presented in the OperationResult returned by `testResource` and related methods.
A response from testResource operation.
A request for testResource operation.
 
 
 
 
 
 
 
 
 
 
Monitors operations for the current thread.
 
What is to be done when the thread allocated to this task stops (e.g.
Deprecated.
Don't use this component, it will be gradually removed from gui.
 
 
 
Created by Viliam Repan (lazyman).
 
TilePanel<T extends Tile<O>,O extends Serializable>
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
TODO EXPERIMENTAL By default (when the base is not specified), positive time intervals are meant "after work item start".
Holds the result of time interval computation with respect to the current date and time.
Water mark (bound).
Connector operation timeout values.
 
Filter processor for an attribute path (Prism item) of a timestamp type.
TODO
A constraint that triggers when validity of an object, assignment, or basically any time-sensitive item (e.g.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Simple button that toggles two states (on-off).
 
Simple button that toggles two states (on-off, alphasort-numericsort, etc).
Created by Viliam Repan (lazyman).
Tomcat valve used to redirect root (/) URL to real application (/midpoint/).
This behavior is used for bootstrap tooltips.
 
 
Created by honchar
Created by honchar
Just am empty extension of SLF4J logger.
Specification of the data flow(s) to be visualized.
Generic data selection rule.
One object.
Object dictionary.
Wrapper for logging library.
 
Factory for trace instances.
 
 
Default or customized text form of an AbstractTraceEvent.
Selects an operation trace.
 
 
 
Root type for tracing information that is embedded in OperationResult objects.
 
Utility methods related to tracing.
 
What columns to visualize? Volatile - will be changed soon.
How to visualize trace file.
How to visualize trace file.
How a traced operation is to be visualized.
TODO rework
 
Collects log entries e.g.
Tracing configuration, including profiles to be selected from.
Description of the environment where the trace was captured.
Level of tracing.
Metadata e.g.
Output of the tracing.
Describes how the tracing is to be done.
Points at which tracing can be requested.
Describes how the tracing of specific type is to be done.
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Mapping that manages transformation metadata.
 
 
Computes value metadata during expression evaluation or during consolidation.
 
TODO
Relativity mode of an expression.
Maintains selected statistical information related to processing items in a current activity run.
Cache that is transient but can be declared final in serializable objects.
 
Specifies how the inner constraints are to be evaluated with regard to operation start and end state.
Contract for a message transport instance, which is mostly SPI type contract.
Message transport service component which facilitates sending the messages via transports.
SPI support for Transport providing important dependencies.
 
 
 
 
Used as a main component of the Org tree page.
 
Deals with creation of recompute triggers for selected objects.
Global state for optimizing trigger creators for the given midPoint node.
How much information about triggered policy rules should be stored? EXPERIMENTAL
TODO
TODO
 
Task handler for the trigger scanner.
Fires triggers on objects found by the search operation.
 
Executes trigger scan on repository objects.
Defines triggers for an object.
TODO move to a better place? TODO document a little?
Specifies the use of trigram similarity for searching.
 
 
TODO: This should do more parsing in the future.
Exception used for tunneling checked exceptions through places where checked exceptipons are not allowed (e.g.
Use this component when two-state widget is needed (e.g.
 
 
 
 
Definition of a type (as opposed to definition of an item).
 
 
 
Typed Query represents query with filter, which can be used for searching references, containers and objects (depending on item type).
Value and definition pair.
 
 
TypeFilterProcessor<Q extends QObject<R>,R extends MObject,TQ extends QObject<TR>,TR extends MObject>
Filter processor that resolves TypeFilter.
Filter processor for object type stored as PG enum, queried with QName value.
 
Description of the change in the external resource at the UCF level i.e.
 
 
 
Java class for UnaryLogicalOperatorFilterType complex type.
Statically-typed "unassign" action.
Executor for "unassign" actions.
 
 
 
 
 
Type used to represent Java objects that are otherwise unknown to the system and cannot be represented in "canonical" XML form.
 
Unlinks resource object from its owning focus.
Unlocks the focus object (if the time has come).
Object type passed to the operation is not supported by the implementation.
The invoked operation is not supported.
Extension of ItemSqlMapper adding update capability (delta processing).
Describes update capability.
 
 
 
 
 
 
 
 
 
Handles upgrade of single object, filters out items that are not applicable for upgrade based on options selected by user.
 
 
 
 
Keeps summary of validation items processed during upgrade, grouped by priority and status (processed/skipped).
 
todo cleanup options, use OutputOptions, SearchOptions etc.
 
 
 
 
 
 
 
 
 
Component hiding details of how QNames are stored in QUri.
Created by Viliam Repan (lazyman).
Java class for UriFilterType complex type.
 
Filter processor for URI item paths - represented by string/QName in schema and by int ID in DB.
An interface used for definition page url in GUI.
 
Object clustering options for "user" mode.
Implements clustering of user based process mode.
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
 
 
Created by honchar
 
 
Specifies the details of a new credential entered manually by a user.
Defines, whether a user interface element (form, widget) will be visible or it will be hidden.
Defines properties of a specific user interface feature (e.g.
 
 
TODO
 
 
 
Describe list of sessions.
Describe session - user, active sessions, nodes where the user is active Be aware: EXPERIMENTAL
 
User object represents a physical user of the system.
 
 
Similar to SimpleItemFilterProcessor but String value can be just UUID prefixes and must be smartly converted based on the actual operation.
Matching rule for universally unique identifier (UUID).
 
 
 
Executes "validate" action.
TODO
TODO
 
 
 
TODO
Interface for object validation (mostly to be used in tests).
Element which allows predefined validity duration for requested rolesin request access UI wizard.
How to execute validation scan queries.
 
Authorization parameters for sub-object operations.
 
 
 
 
TODO: rename to ValueObjectChoicePanel, PrismValueObjectSelectorPanel or something better
 
 
 
 
 
TODO unify with PrettyPrinter somehow
 
 
Filter processor that resolves item path and then constructs an SQL condition for it.
Object wraps zero, one or multiple values and makes their processing easier.
 
 
 
 
Computation of value metadata.
Provides empty value metadata.
 
The value metadata.
 
 
Normalizes a (string) value for the purpose of custom property indexing.
Objects of type ValueParser should be immutable.
Resolves "origin object" during value policy evaluation.
TODO
Processor for values that match value policies (mostly passwords).
Supplies value policy when needed (e.g.
 
 
 
 
Selects a value from multivalued item (property, container, reference).
Parsed form of ObjectSelectorType and its subtypes.
 
 
Pre-defined set definition, such as all or none.
Definition of value set.
 
TODO
Trace for expression evaluation operation in AbstractValueTransformationExpressionEvaluator.
Trace for transformation of a tuple of values.
 
Java class for ValueType complex type.
Type of variables that appear in the script.
Definition of variable which is bound to the property.
 
 
 
Produces extra variables from values of existing sources.
 
 
 
Expression evaluator that is using Apache Velocity engine.
 
 
Created by Viliam Repan (lazyman).
Consumer writing exported audit events to the writer (stdout or file).
 
 
 
Similar to normal repository ExportRepositoryAction, but not extended from AbstractRepositorySearchAction because we need containers here and objects are quite deeply embedded in the existing classes.
TODO from design point of view handling of main writer and deltaWriter is just nasty.
// todo fix these options, extending Export options is messing up help messages (it's using export.* keys)
 
 
 
 
 
 
 
 
 
Created by honchar
 
 
 
 
 
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
There are cases when you need to force midpoint thinks that user has assigned some role.
Item specification to display in container
Used to specify "virtual" containers for displaying details page in GUI.
 
 
TODO: move to com.evolveum.midpoint.gui.api.util
 
 
Visitor<T extends Visitable<T>>
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
 
 
 
 
 
 
Created by Viliam Repan (lazyman).
 
 
TODO make this parametric (along with VisualizationItemValue)
 
 
 
 
Computes real wall clock time from a set of execution records ("from - to").
Water mark (bound).
 
Utility class containing miscellaneous methods used mostly in Wicket components.
 
Created by Viliam Repan (lazyman).
 
Utility class that contains methods that interact with ModelService and other midPoint components.
 
Collection of brutal and ugly hacks, to be removed when prism implementation will be reviewed in 3.5.
Configuration for workflow change processor.
Configuration for workflows - for those parts not stored in the system config file.
Configuration related to tasks in which model operations are executed.
Scope of execution task serialization.
Whether and how to serialize execution tasks (if "execute after all approvals" is set to false).
DEPRECATED We need to decide what to do with this.
 
 
Specification of a process that is to be started.
TODO
 
 
Created by Viliam Repan (lazyman).
 
TODO: viliam
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
 
Created by Viliam Repan (lazyman).
Created by Viliam Repan (lazyman).
Parameters related to buckets allocation process.
Handles various aspects of work bucket content e.g.
Responsible for creation of configured work bucket content handlers.
State of the work bucket.
Description of a state and content of a work bucket.
Defines the work that is to be done within an activity.
Represents statically or dynamically defined activity work definition.
Statically defined (usually, midPoint-provided) beans.
Run-time defined, usually customer provided beans.
Creates WorkDefinition instances from their serialized (bean) form.
These parameters will be probably modified in the future, so let's avoid reworking all the constructors, and centralize the knowledge here.
 
Definition of the work that has to be done within an activity.
 
How to create and manage worker tasks.
How to create worker tasks per node.
Executes the workers reconciliation.
 
Result of the workers reconciliation process.
Actions to execute.
Primarily used to simplify passing parameters to CaseEventCreationListener.
 
Event describing the work item completion.
 
 
Event describing the fact of delegation.
How the delegation should be realized.
A request to delegate work item - analogous to AbstractWorkItemOutputType.
Created by honchar
Created by honchar
Event describing the fact of escalation.
Description of an escalation level the processing is at.
An event bound to specific CaseWorkItemType.
 
Type of event cause.
Process event related to a specific work item.
Uniquely identifies a work item.
 
TODO EXPERIMENTAL
Primarily used to simplify passing parameters to CaseEventCreationListener.
Kind of operation.
What caused the operation.
Result (outcome) of a work item.
Overall output from a work item: outcome (approve/reject/...), comment, additional delta, and probably other things in the future.
Selects some work items from all the items (perhaps of a given type, like approval work items).
Created by Viliam Repan (lazyman).
 
Actions that should be applied to a work item in given moments (relative to work item creation or work item deadline).
 
 
 
Artificial implementation of a visualization used to hold a list of deltas.
A class used to hold string represented either as plain string or as XML markup.
Combined resolver used when parsing schemas.
 
Formatter for XMLGregorianCalendar objects.
 
 
String matching rule that compares strings as XML snippets.
This element contains the XSD-formatted definition of schema.
 
 
Simple implementation that converts XSD primitive types to Java (and vice versa).
This is to be cleaned up later.
 
 
 
Temporary, experimental API.
Temporary, experimental piece of code.
 
Temporary interface to allow modifying XNode representation.
 
 
Maintains mapping of XSD types (qnames) and Java types (classes)
 
 
 
Defines how zone of control should be maintained.