To loop through a nodeset (objects, attributes) one can use for-each.

To do this one first have to have a nodeset, in this case I’ll use a query to find a list of users:

<do-set-local-variable name=”lv_manages” scope=”policy”>
<arg-node-set>
<token-query class-name=”User” datastore=”src”>
<arg-dn>
<token-text xml:space=”preserve”>$dit.idv.user$</token-text>
</arg-dn>
<arg-match-attr name=”manager”>
<arg-value [...]

Some times one need to know if an object exist, that could be a group, container, or what ever. There is a very easy way to do this using XPath and the query processor:

<do-if>
<arg-conditions>
<and>
<if-xpath op=”true”>query:readObject($srcQueryProcessor,”,$lv_objectDN,”,”)</if-xpath>
</and>
</arg-conditions>
<arg-actions>
<do-set-local-variable name=”lv_objectExist” scope=”policy”>
<arg-string>
[...]