expandSecurityMembers(object_set)

object-set expandSecurityMembers(object_set)

The expandSecurityMembers function recursively expands group and role membership.

object_set is a set of objects. Each object has a members property.

The expandSecurityMembers function must select distinct, single objects. These objects must be of the account, group, role, or contact class.

For example, the following search path selects all the account objects that are members of the All Authenticated Users group:

expandSecurityMembers(/directory/*[@name="Cognos"]/*[@name="All Authenticated Users"])

Multiple objects can be specified using an or operator (|), as in the following example:

expandSecurityMembers(/directory/descendant::*[@id="LDAP:cn=Managers,ou=Ottawa"]|/directory/descendant::*[@id="LDAP:cn=MoreManagers,ou=Ottawa"])

What's new

New in Version 8.3 — New Properties for Group and Role Classes

This function was added.