It may be a good time to re-visit an alternative approach to dealing with the issue of multi-valued attributes. This is something I've resisted and I probably still don't like it, but I think we need to at least consider it while the topic is on people's minds.
A strawman proposal is to do away with the notion of multi-valued attributes at the IdAS API level. Random thoughts about that:
- A CP with a backing store which has such a model (LDAP comes to mind) would represent a multi-valued attribute as if it were a single valued attribute which is a complex value. Each element of the complex value has some generic type (like "value"), and represents one of the values in the backing store. Updating these separately is now possible with the latest update operations.
- IFilter and friends may need to be re-visited such that a filter element can say (match if "hobbies" contains an element called "flying"). This ought to be made possible anyway.
It would be good to get more input on this than just that from Valery, Tom, and myself.
Jim
|