Modifying User Fails with Error: UnsupportedOperationException when there is a Role with a Membership Rule Containing an UDF of Type Number (Doc ID 2640297.1)

Last updated on APRIL 27, 2023

Applies to:

Identity Manager - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

A User's UDF of type Number is created

Note: the UDF we created is Manager Level and will be used as the example in this document

The UDF was added to the following User's page:

Create Users: Data Component - Catalog --> userVO
Modify Users: Data Component - Catalog --> userVO
View User Details: Data Component - Manage User --> UserVO1
Search Users: Data Component - Manage Users --> UserVO1
My Information: Data Component - My Information --> UserVO1

A role is created with a role membership containing the UDF we previously created

If a user is modified so the above rule including the UDF number is met, like for example modifying an existing user and setting his/her UDF (Manager Level) to 12

on saving the change the following error will be displayed:

IAM-2050243 : Orchestration process with id XXXX , failed with error message IAM-3058107 : Error while granting the roles to the user as per the role relation-ship rule..

and the following stack traces will be thrown in the OIM diagnostic logs:

[2020-02-18T14:11:36.331-07:00] [oim_server1] [ERROR] [IAM-2050243] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: 'X' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <USERID>] [ecid: <ECID>] [APP: oim] [partition-name: DOMAIN] [tenant-name: GLOBAL] [DSID: <DSID>] Orchestration process with id XXXX, failed with error message IAM-3058107:Error while granting the roles to the user as per the role relation-ship rule.:.

[2020-02-18T14:11:36.338-07:00] [oim_server1] [ERROR] [] [oracle.iam.request.impl] [tid: [ACTIVE].ExecuteThread: 'X' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <USERID>] [ecid: <ECID>] [APP: oim] [partition-name: DOMAIN] [tenant-name: GLOBAL] [DSID: <DSID>] Orchestration process with id XXXX, failed with error message IAM-3058107 : Error while granting the roles to the user as per the role relation-ship rule..[[

oracle.iam.request.exception.RequestServiceException: Orchestration process with id XXXX, failed with error message IAM-3058107 : Error while granting the roles to the user as per the role relation-ship rule..

at oracle.iam.request.impl.RequestEngine.handleOrchResult(RequestEngine.java:5150)

at oracle.iam.request.impl.RequestEngine.startOrchestrationFromPreProcess(RequestEngine.java:5036)

at oracle.iam.request.impl.RequestEngine.triggerOperation(RequestEngine.java:4956)

at oracle.iam.request.impl.RequestEngine.doOperation(RequestEngine.java:4581)

at oracle.iam.impl.OIMServiceImpl.doOperation(OIMServiceImpl.java:43)

…

Caused by: java.lang.UnsupportedOperationException

at oracle.iam.identity.ruleengine.impl.SearchRuleEvaluator$NumberComparator.compare(SearchRuleEvaluator.java:221)

at oracle.iam.identity.ruleengine.impl.SearchRuleEvaluator.evaluateUserSearchRuleAsExpression(SearchRuleEvaluator.java:179)

at oracle.iam.identity.ruleengine.impl.SearchRuleEvaluator.evaluateUserSearchRuleAsExpression(SearchRuleEvaluator.java:73)

at oracle.iam.identity.ruleengine.impl.SearchRuleEvaluator.evaluateSearchRule(SearchRuleEvaluator.java:53)

at oracle.iam.identity.usermgmt.impl.util.UserPostProcessHelper.getEntitiesToAdd(UserPostProcessHelper.java:318)

at oracle.iam.identity.usermgmt.impl.util.UserPostProcessHelper.getUserRelationshipChanges(UserPostProcessHelper.java:217)

at oracle.iam.identity.usermgmt.impl.util.UserPostProcessHelper.process(UserPostProcessHelper.java:113)

at oracle.iam.identity.usermgmt.impl.handlers.UserPostProcessActionHandler.callRuleEngine(UserPostProcessActionHandler.java:130)

at oracle.iam.identity.usermgmt.impl.handlers.UserPostProcessActionHandler.execute(UserPostProcessActionHandler.java:95)

at oracle.iam.platform.kernel.impl.OIMEvent.executeHandlers(OIMEvent.java:224)

Cause

	To view full details, sign in with your My Oracle Support account.
	Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.

Modifying User Fails with Error: UnsupportedOperationException when there is a Role with a Membership Rule Containing an UDF of Type Number (Doc ID 2640297.1)

Applies to:

Symptoms

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!