Grouper Developers Forum

At 10:04 AM -0700 9/4/09, Brendan Bellina wrote:
> One possible issue that comes to mind regarding uApprove is that the 
> attributes and even values shown by uApprove may not mean very much 
> to the user.  For example, our group dn's and entitlements as well 
> are based on opaque identifiers.  So showing a user a list of 
> isMemberOf values or ePAs and asking them to approve which ones can 
> be released to an SP isn't really going to be very helpful. 
> uApprove would need to query for additional information about the 
> groups and display that information in its interface or we would 
> need to provide some kind of mapping document and expect the user to 
> take the time to look them up before responding, and that isn't 
> likely.  It isn't as simple as releasing a phone number or an email 
> address, for which little or no explanation would be required.

Brendan -- thanks for the comments!

at this point, uApprove is consider to be an "experimental 
extension". It is considered to have great promise, however.

At this point, the Shib team would strongly encourage sites to 
install uApprove (into their dev environments?), begin to experiment 
with it, and provide feedback on how to make it better.....

I think Brendan's list is a very good start.....

What do others think ?

... and could uApprove be at all relevant to Chris' original questions ?