Grouper Developers Forum

[Chris Hyzer <>]

1. If you want to query assignments on assignments, you need to query the assignments with a special flag, or provide the assignmentId

2. Security:

 

Groups:

 

- read attribute

  - view group and read attribute

- assign attribute

  - admin group and update attribute

 

Stems

 

- read attribute

  - read attribute

- assign attribute

  - create in stem? and update attribute

 

Members

 

- read attribute

  - read attribute

- assign attribute

  - wheel or root? and update attribute

 

AttributeDef

 

- read attribute

  - read attributedef and read attribute

- assign attribute

  - admin on attributeDef and update on attribute

 

Membership (immediate or any): note, only members list on groups

 

- read attribute

  - read the group and read the attribute

- assign attribute

  - update the group and update the attribute

 

Assignment on attribute assignment

 

- read attribute

  - read the underlying assignment (follow the above rules), and read the attribute

- assign the attribute

  - update the underlying assignment? (follow the above rules), and update the attribute

 

3. Assignment of attributes on memberships is only on members list

4. If you want to assign an attribute to an immediate membership or an attribute assignment, you need to get the ID of it first

5. If you want to assign an attribute to an any membership, you need to provide the groupLookup and the subjectLookup

 

Chris