Designer 2.0 M5 ships with two versions of the Policy Builder. One Policy Builder
includes the new Identity Manager 3.5 DirXML Script features. An older Policy
Builder does not include these new features.
To see the new Policy Builder, all servers that are attached
to your driver (via the driver set) must be be at least Identity Manager 3.5.
This is the first version of Identity Manager that includes the new Policy Builder
features.
If you edit any policy that has a server with a version earlier
than Identity Manager 3.5, the older Policy Builder is used. In that case, the
new features are not available.
The title bar displays the version of the Policy Builder.
All new features listed on this page are available only
in Identity Manager 3.5 and the new Policy Builder.
The "notrace" attribute causes the engine to not output a trace message
for whichever tag the attribute is set on.
<if-password> now supports the "equal" and "not-equal"
operators.
<if-association>, <if-operation>, and
<if-password> now support various modes for comparisons.
The conditionals <if-association>, <if-attr>,
<if-class-name>, <if-dest-attr>,
<if-entitlement>, <if-global-variable>,
<if-local-variable>, <if-op-attr>,
<if-op-property>, <if-password>, <if-src-attr>,
now support operators "lt", "not-lt", "gt", and "not-gt".
<if-xml-attr> is a new conditional that checks for XML attributes.
The <do-if> action was added. This action allows for a conditional to
be checked and then separate actions to be run, depending on the result.
The <do-while> action was added. This action allows for a loop
to be run until a conditional is false. The loop contains nested
actions.
The <do-start-workflow> action was added. This action allows workflows
to be started from policy script.
The <do-append-xml-text>, <do-append-xml-element>, and <do-clone-xpath>
actions now have an optional Before attribute that allows you to insert the
XML text before another Xpath expression that is evaluated against the original
matched expression.
The <do-set-local-variable>, <if-local-variable>, and
<token-local-variable> now have a scope that allows you to set
the scope for the variable.
The <arg-password> argument exists in the <do-send-email>, <do-send-email-from-template>,
and <do-start-workflow> actions.
|
These attributes give you added versatility in <token-unique-name>.
In the string builder for <do-send-email> and <do-send-email-from-template>,
you can now build custom SMTP headers.
You can now set the password of a specific DN or association with these
actions.
Other Enhancements & Bug Fixes | |
|