Grouper Developers Forum

[Shilen Patel <>]

Hi all,

It was great to meet everyone.  I just want to mention some of the 
issues we discussed in our meeting last week, so that they're documented 
here.

We have two main types of groups in Grouper.

1.  Dynamic Groups - These are groups determined by an LDAP filter.
2.  Class Roster Groups - We have 3 groups per class (instructors, 
students, and TAs). 

There is also a TAAdmins group that has an admin privilege to all of the 
TA groups.

The issues we raised are the following.

1.  Navigating through the stems viewable in the "My Memberships" 
section in the UI takes about 2-3 seconds per page.
2.  If you are a member of the TAAdmins group, the "Manage Groups" 
section takes about 10 minutes to load.
3.  If you're not a member of the TAAdmins group and have no memberships 
and no privileges, the "Manage Groups" section still takes about 30 
seconds to load.
4.  Performing a group search takes about 20-30 seconds even if no 
results are returned.
5.  Listing group members also takes a long time.  If a group has X 
members and you want to see the first Y members, listing the group 
members causes at least X database queries and 2Y LDAP queries.
6.  Adding a member to the TAAdmins group takes hours.
7.  The xml-import takes about 3-4 days for us and requires 4 GB of 
memory allocated to the Java process.
8.  The only way to restrict FERPA protected data is to prevent users 
from having read access to specific groups and stems that may have FERPA 
protected data.  It would be nice if Grouper had a way of honoring FERPA 
protected data in a way such that if a user has a FERPA flag set in 
LDAP, people viewing members of the group would see something like 
"Anonymous User" instead of the user's name.


Thanks,

-- Shilen



Celeste Copeland wrote:
> Hello, all.
>
> I met many of you at CAMP last week, and as per your recommendation, I 
> got on this mailing list.  It was a pleasure to meet everyone who 
> participated in the Grouper discussions during CAMP.  The IdM 
> technical group at Duke looks forward to working with you and 
> participating in conference calls in the near future.
>
> - Celeste