<?xml version="1.0" encoding="UTF-8"?>

<objects xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
         xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
         xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3">

    <task>
        <name>Recompute users that have directly assigned a given OU</name>
        <extension>
            <scext:executeScript xmlns:scext="http://midpoint.evolveum.com/xml/ns/public/model/scripting/extension-3">
                <s:search xmlns:s="http://midpoint.evolveum.com/xml/ns/public/model/scripting-3">
                    <s:type>c:UserType</s:type>
                    <s:searchFilter>
                        <q:and>
                            <q:ref>
                                <q:path>assignment/targetRef</q:path>
                                <q:value>
                                    <oid>your_OU_oid</oid>
                                    <type>OrgType</type>
                                </q:value>
                            </q:ref>
                           <q:or>
                            <q:substring>
                                <q:matching>polyStringNorm</q:matching>
                                <q:path>c:name</q:path>
                                <q:value>.ext</q:value>
                                <q:anchorEnds>true</q:anchorEnds>
                            </q:substring>
                            <q:substring>
                                <q:matching>polyStringNorm</q:matching>
                                <q:path>c:name</q:path>
                                <q:value>.ex</q:value>
                                <q:anchorEnds>true</q:anchorEnds>
                            </q:substring>
                            <q:substring>
                                <q:matching>polyStringNorm</q:matching>
                                <q:path>c:name</q:path>
                                <q:value>.e</q:value>
                                <q:anchorEnds>true</q:anchorEnds>
                            </q:substring>
                            </q:or>
                        </q:and>
                    </s:searchFilter>
                    <s:action>
                        <s:type>assign</s:type>
                        <s:parameter>
                            <s:name>role</s:name>
                            <c:value>selected_role_id</c:value>
                        </s:parameter>
                    </s:action>
                </s:search>
            </scext:executeScript>
        </extension>
        <ownerRef oid="00000000-0000-0000-0000-000000000002"/>
        <executionStatus>runnable</executionStatus>

        <category>BulkActions</category>
        <handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/scripting/handler-3</handlerUri>
        <recurrence>single</recurrence>
    </task>

</objects>