This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

add-member object picker

Hi all

i use an ARS web site to allow admin to manage groups' membership. 

When you click Add members, you have an object picker windows from where you have to choose users to add.

I would like to restrict the objects list for objects which match with this filter:

"(|(&(objectclass=contact)(!name=john*))(&(msExchRecipientTypeDetails=*)(objectclass=user)(admindescription=xxx)))"

I have tried to adapt the KB 263705 and modify this line <Setting Name="Filters" Value="(objectClass=*)" /> with the filter i want.

The result in not good.

Do you know where i have to set this filter in order to limit the add members possible objects?

thanks for your help

Parents
  • I used Workaround 1 from KB 263705 and entered your LDAP filter into "LDAP search filter" field of the search picker, and it worked fine. Try that, rather than editing the raw XML.

    EDIT: Sorry, I missed the fact that you were working with the "Add Members" command.

    This search picker is not exposed in the Web Interface and it cannot be modified in the same fashion.

    I'll look for another option and update this thread if I find anything.

  • Hi Terrance,

    thanks for your answer. I don't see the "LDAP search Filter" in the Add user form in the Web interface. May you can tell me step by step how to have it in Web Interface.

    Secondly, as this web interface is customer facing, i don't want to ask them to set a filter by themselves. I want to preset it fro them in order to show them only users and contacts i want to show.

    I have today as possible solution

    - Your solution if i can do what you explain? i need your help

    - the 2nd solution is to set this ldap filter in the object picker launch from the add member button. i don't know how to do it for the moment

    - the 3rd is to predefined and freeze the object picker scope with a managed unit. i don't know how to do it for the moment

    Thanks in advance

    BR

Reply
  • Hi Terrance,

    thanks for your answer. I don't see the "LDAP search Filter" in the Add user form in the Web interface. May you can tell me step by step how to have it in Web Interface.

    Secondly, as this web interface is customer facing, i don't want to ask them to set a filter by themselves. I want to preset it fro them in order to show them only users and contacts i want to show.

    I have today as possible solution

    - Your solution if i can do what you explain? i need your help

    - the 2nd solution is to set this ldap filter in the object picker launch from the add member button. i don't know how to do it for the moment

    - the 3rd is to predefined and freeze the object picker scope with a managed unit. i don't know how to do it for the moment

    Thanks in advance

    BR

Children
  • Using Developer Tools in Internet Explorer, I can see that the "Members" command is using the "ObjectMembers" object picker.

    This object picker does not have a "Filters" section in the configuration XML. I added one as a test, and it is not respected. Also, the Web Interface complained of a malformed configuration. So, it appears that there is no way to shape what this particular object picker sees.

    The "Members" command type in the Active Roles Web Interface shows that it is a custom command which is probably why we can't shape its object picker.

    I customized the Group form and added a new tab called Members. Then, I added the "member" attribute, and customized its object picker with your LDAP filter during the addition of the attribute to the form. This worked.

    It's a little different, because it's a change to the default UI. You will have to remove or hide the built-in "Members" command, but this is the only way that I found to shape that object picker.

  • I am trying to add the member attribute as you mentioned above, but I am only seeing the MemberOf. Is the "member" attribute you mention a virtual attribute?

  • Are you using the Select menu or the Create menu? Use Create.

  • I am in the create menu under the user edit form. Is this the wrong place?

  • Members is a Group attribute, so try to edit that form.