Grouper Developers Forum

[Chris Hyzer <>]

Right, good idea.

One thing Penn is interested in (especially with the upcoming 
enabled/disabled dates in memberships and attribute assignments), is email 
notifications.  This could be to notify admins when anyone gets access to a 
group/role or get privileges.  Or it could be to notify end users (not sure 
there is a need here, but just throwing that out there).  For disabled dates, 
we could give admins/people a warning about their access nearing the end of 
its life.  Here is a long-term jira to track this:

https://bugs.internet2.edu/jira/browse/GRP-298

Also, Penn has this come up from time to time (e.g. VP's delegate to their 
admins or others).  Also it is in Rob Carter's access management use cases 
and I hear it mentioned from time to time at conferences.  Delegation.  Users 
should be able to tag a group as delegatable, or to tag memberships/attribute 
assignments as delegatable.  Then the recipients should be able to grant the 
same membership/attribute to other users (and revoke memberships/attributes 
that they have delegated).  Also perhaps there is delegation with start/end 
dates.  Here is the long-term Jira.

https://bugs.internet2.edu/jira/browse/GRP-299

Rob's use cases (see Clery Notification, or TA Grade Access):
https://spaces.internet2.edu/display/CAMPJune2009/Use+Cases+Organized+by+Area+of+Interest


Thoughts?
Thanks,
Chris



> -----Original Message-----
> From: Tom Barton 
> [mailto:]
> Sent: Friday, June 26, 2009 11:13 AM
> To: Chris Hyzer
> Cc: Niels van Dijk; 
> 
> Subject: Re: [grouper-dev] group specific help
> 
> I agree - a generally good idea. Since the attribute framework will
> support such an attribute, and since this will entail giving this
> attribute some special status within grouper, I wonder if we should
> continue this thread only when we or someone starts working on an
> interface aimed specifically at managing roles. You know - have actual
> requirements drive the final design.
> 
> Tom
> 
> Chris Hyzer wrote:
> > Yes, that is the idea.  Not sure when exactly that will be...
> >
> >> -----Original Message-----
> >> From: Niels van Dijk 
> >> [mailto:]
> >> Sent: Friday, June 26, 2009 5:22 AM
> >> To: Chris Hyzer
> >> Cc: 
> >> 
> >> Subject: Re: [grouper-dev] group specific help
> >>
> >> Hi Chris,
> >>
> >> Sounds like a good idea. Especially if this is implemented as
> >> attributes. Will the webservices expose these attributes as well?
> >>
> >> regards,
> >> Niels
> >>
> >> Chris Hyzer wrote:
> >>> Hey,
> >>>
> >>> I opened this feature request, any thoughts?
> >>>
> >>> https://bugs.internet2.edu/jira/browse/GRP-297
> >>>
> >>> A couple of people at CAMP wondered how people know in grouper what
> >> the effects of assigning to users to groups or assigning grouper
> >> privileges would have.  i.e. there are tons of groups and
> privileges,
> >> and maybe an admin has permission to assign lots of things, but what
> >> are the exact things the person should do to assign access?
> >>> I think we could have a very simple way to handle this, and could
> be
> >> a built-in 2nd generation attribute...  It could be an attribute
> which
> >> could be on groups or attributes, which holds some text (currently
> the
> >> limit is 4k... maybe that is an issue, or we could suggest putting
> some
> >> text and a link there).  Then anyone who has "update" or "admin"
> >> privileges on that group or attribute would see that attribute's
> value
> >> in the help screen in the UI for example...
> >>> The end result would be when someone logs in who has access to make
> >> updates, and they click on the help button in the UI, they will see
> >> institution specific help based on what they have access to do,
> >> potentially with links to more documentation.
> >>> I wonder if wheel group members would see all help text... leaning
> in
> >> that direction...
> >>> Thoughts?
> >>> Chris
> >>>
> >>> Ps. This is not a high priority... but seems like it could be a
> quick
> >> win if we have time / inclination...
> >>
> >> --
> >> Niels van Dijk
> >> Advanced Services
> >>
> >> T: +31 302 305 337 / M: +31 651 347 657
> >> SURFnet - PO Box 19035 - NL-3501 DA Utrecht - The Netherlands -
> >>
> >> http://www.surfnet.nl
> >> SURFnet grensverleggend netwerk voor hoger onderwijs en onderzoek