Hello:

I have a question about how to set a flag during operation. In my publish
command transfermation, I have a policy that vetos delete event and adds
"clear destination attributes" for some attributes. I would like to set a
flag to indicate this is a modify converted from delete so it will not
trigger another policies further down in the driver. Usually I use "set
operation property", but it does seem like working here because I veto the
delete event. One solution I can think about is setting a fake operational
attibute (e.g fromDelete) and strip it at the end of comamnd
transfermation. Is there a better way to do it? I posted the XMl source
below.

Thanks

Jie



<rule>
<description>(CC-PUBCT-ACCT) Convert delete to modify and remove account
attributes </description>
<comment xml:space="preserve">Convert delete to modify and remove account
attributes from User</comment>
<conditions>
<and>
<if-operation op="equal">delete</if-operation>
<if-dest-dn op="available"/>
</and>
</conditions>
<actions>
<do-remove-dest-attr-value name="Object Class">
<arg-value>
<token-text xml:space="preserve">auxAccount</token-text>
</arg-value>
</do-remove-dest-attr-value>
<do-clear-dest-attr-value name="auxAccountSystemID"/>
<do-clear-dest-attr-value name="auxAccountType"/>
<do-set-dest-attr-value name="Login Disabled">
<arg-value>
<token-text xml:space="preserve">true</token-text>
</arg-value>
</do-set-dest-attr-value>
<do-remove-association when="after">
<arg-association>
<token-association/>
</arg-association>
</do-remove-association>
<do-veto/>
</actions>
</rule>