Hi Forum

I want to accomplish the following with a new rule i created between 2
eDir's on the Subscriber Event Transformation, when a user gets member
of a specific group e.g. "OK-group" it will set Login Disabled = false
on the destination user object and when User is removed from that
Specific Group "OK-Group" i want to set Login Disabled = true.

my rule right now:

<rule>
<description>Disable Account in AUTH-Tree if not Member of OK-group
Group</description>
<conditions>
<and>
<if-class-name op="equal">User</if-class-name>
<if-association op="associated"/>
<if-op-attr mode="regex" name="Member"
op="changing-from">.*OK-Group.*</if-op-attr>
</and>
</conditions>
<actions>
<do-set-dest-attr-value direct="true" name="Login Disabled">
<arg-value type="string">
<token-text xml:space="preserve">true</token-text>
</arg-value>
</do-set-dest-attr-value>
<do-veto/>
</actions>
</rule>
<rule>
<description>Enable Account in AUTH-Tree if Member of OK-Group
Group</description>
<conditions>
<and>
<if-class-name op="equal">User</if-class-name>
<if-association op="associated"/>
<if-op-attr mode="regex" name="Member"
op="changing-to">.*OK-Group.*</if-op-attr>
</and>
</conditions>
<actions>
<do-set-dest-attr-value direct="true" name="Login Disabled">
<arg-value type="string">
<token-text xml:space="preserve">false</token-text>
</arg-value>
</do-set-dest-attr-value>
<do-veto/>
</actions>
</rule>


Seems like i'm missing something on the check, cause the enable /
disable of the users does not happen.

- Michael