grouper-dev - RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?
Subject: Grouper Developers Forum
List archive
RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?
Chronological Thread
- From: Chris Hyzer <>
- To: Tom Dopirak <>
- Cc: Keith Hazelton <>, paccman <>, "" <>
- Subject: RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?
- Date: Fri, 15 Jul 2011 15:09:25 +0000
- Accept-language: en-US
> How difficult would it be to add a specific timezone on the permission
> limit syntax
Are you saying that the limit on a permission is from 9-5 for a specific
timezone no matter where the caller is? Or are you saying the env variable
that the caller passes to the server when determining if someone has a
permission or not would be the label of the timezone?
Either would be easy. I think the first one might be difficult for people on
a UI to configure. For the latter, either way the caller would need to pass
in the timezone where the transaction is taking place, so it is similar of
just passing in the hour of day, right? :) Maybe it is easier to pass in
the timezone.
To do this, I would just have the caller pass either the hour of day or the
timezone which is the Java timezone ID. I have the list of possible ones
below for my version of the JRE. This is a little worrying since it is based
on the server JRE. If I were the caller, I definitely know what my hour of
day is. If using the timezone string (which funnily enough isn't even
documented in Java since it is not that stable, you have to run a command to
get the list :) ), there is a risk that the timezone list changes on jre
upgrades, or it might be not straightforward to get started (i.e. to find the
best one to use).
That said, I can add the option in addition to passing in caller time of day
if you like, should I? And can you clarify exactly what you are looking for?
Thanks,
Chris
ACT
AET
AGT
ART
AST
Africa/Abidjan
Africa/Accra
Africa/Addis_Ababa
Africa/Algiers
Africa/Asmara
Africa/Asmera
Africa/Bamako
Africa/Bangui
Africa/Banjul
Africa/Bissau
Africa/Blantyre
Africa/Brazzaville
Africa/Bujumbura
Africa/Cairo
Africa/Casablanca
Africa/Ceuta
Africa/Conakry
Africa/Dakar
Africa/Dar_es_Salaam
Africa/Djibouti
Africa/Douala
Africa/El_Aaiun
Africa/Freetown
Africa/Gaborone
Africa/Harare
Africa/Johannesburg
Africa/Kampala
Africa/Khartoum
Africa/Kigali
Africa/Kinshasa
Africa/Lagos
Africa/Libreville
Africa/Lome
Africa/Luanda
Africa/Lubumbashi
Africa/Lusaka
Africa/Malabo
Africa/Maputo
Africa/Maseru
Africa/Mbabane
Africa/Mogadishu
Africa/Monrovia
Africa/Nairobi
Africa/Ndjamena
Africa/Niamey
Africa/Nouakchott
Africa/Ouagadougou
Africa/Porto-Novo
Africa/Sao_Tome
Africa/Timbuktu
Africa/Tripoli
Africa/Tunis
Africa/Windhoek
America/Adak
America/Anchorage
America/Anguilla
America/Antigua
America/Araguaina
America/Argentina/Buenos_Aires
America/Argentina/Catamarca
America/Argentina/ComodRivadavia
America/Argentina/Cordoba
America/Argentina/Jujuy
America/Argentina/La_Rioja
America/Argentina/Mendoza
America/Argentina/Rio_Gallegos
America/Argentina/Salta
America/Argentina/San_Juan
America/Argentina/San_Luis
America/Argentina/Tucuman
America/Argentina/Ushuaia
America/Aruba
America/Asuncion
America/Atikokan
America/Atka
America/Bahia
America/Barbados
America/Belem
America/Belize
America/Blanc-Sablon
America/Boa_Vista
America/Bogota
America/Boise
America/Buenos_Aires
America/Cambridge_Bay
America/Campo_Grande
America/Cancun
America/Caracas
America/Catamarca
America/Cayenne
America/Cayman
America/Chicago
America/Chihuahua
America/Coral_Harbour
America/Cordoba
America/Costa_Rica
America/Cuiaba
America/Curacao
America/Danmarkshavn
America/Dawson
America/Dawson_Creek
America/Denver
America/Detroit
America/Dominica
America/Edmonton
America/Eirunepe
America/El_Salvador
America/Ensenada
America/Fort_Wayne
America/Fortaleza
America/Glace_Bay
America/Godthab
America/Goose_Bay
America/Grand_Turk
America/Grenada
America/Guadeloupe
America/Guatemala
America/Guayaquil
America/Guyana
America/Halifax
America/Havana
America/Hermosillo
America/Indiana/Indianapolis
America/Indiana/Knox
America/Indiana/Marengo
America/Indiana/Petersburg
America/Indiana/Tell_City
America/Indiana/Vevay
America/Indiana/Vincennes
America/Indiana/Winamac
America/Indianapolis
America/Inuvik
America/Iqaluit
America/Jamaica
America/Jujuy
America/Juneau
America/Kentucky/Louisville
America/Kentucky/Monticello
America/Knox_IN
America/La_Paz
America/Lima
America/Los_Angeles
America/Louisville
America/Maceio
America/Managua
America/Manaus
America/Marigot
America/Martinique
America/Matamoros
America/Mazatlan
America/Mendoza
America/Menominee
America/Merida
America/Mexico_City
America/Miquelon
America/Moncton
America/Monterrey
America/Montevideo
America/Montreal
America/Montserrat
America/Nassau
America/New_York
America/Nipigon
America/Nome
America/Noronha
America/North_Dakota/Center
America/North_Dakota/New_Salem
America/Ojinaga
America/Panama
America/Pangnirtung
America/Paramaribo
America/Phoenix
America/Port-au-Prince
America/Port_of_Spain
America/Porto_Acre
America/Porto_Velho
America/Puerto_Rico
America/Rainy_River
America/Rankin_Inlet
America/Recife
America/Regina
America/Resolute
America/Rio_Branco
America/Rosario
America/Santa_Isabel
America/Santarem
America/Santiago
America/Santo_Domingo
America/Sao_Paulo
America/Scoresbysund
America/Shiprock
America/St_Barthelemy
America/St_Johns
America/St_Kitts
America/St_Lucia
America/St_Thomas
America/St_Vincent
America/Swift_Current
America/Tegucigalpa
America/Thule
America/Thunder_Bay
America/Tijuana
America/Toronto
America/Tortola
America/Vancouver
America/Virgin
America/Whitehorse
America/Winnipeg
America/Yakutat
America/Yellowknife
Antarctica/Casey
Antarctica/Davis
Antarctica/DumontDUrville
Antarctica/Macquarie
Antarctica/Mawson
Antarctica/McMurdo
Antarctica/Palmer
Antarctica/Rothera
Antarctica/South_Pole
Antarctica/Syowa
Antarctica/Vostok
Arctic/Longyearbyen
Asia/Aden
Asia/Almaty
Asia/Amman
Asia/Anadyr
Asia/Aqtau
Asia/Aqtobe
Asia/Ashgabat
Asia/Ashkhabad
Asia/Baghdad
Asia/Bahrain
Asia/Baku
Asia/Bangkok
Asia/Beirut
Asia/Bishkek
Asia/Brunei
Asia/Calcutta
Asia/Choibalsan
Asia/Chongqing
Asia/Chungking
Asia/Colombo
Asia/Dacca
Asia/Damascus
Asia/Dhaka
Asia/Dili
Asia/Dubai
Asia/Dushanbe
Asia/Gaza
Asia/Harbin
Asia/Ho_Chi_Minh
Asia/Hong_Kong
Asia/Hovd
Asia/Irkutsk
Asia/Istanbul
Asia/Jakarta
Asia/Jayapura
Asia/Jerusalem
Asia/Kabul
Asia/Kamchatka
Asia/Karachi
Asia/Kashgar
Asia/Kathmandu
Asia/Katmandu
Asia/Kolkata
Asia/Krasnoyarsk
Asia/Kuala_Lumpur
Asia/Kuching
Asia/Kuwait
Asia/Macao
Asia/Macau
Asia/Magadan
Asia/Makassar
Asia/Manila
Asia/Muscat
Asia/Nicosia
Asia/Novokuznetsk
Asia/Novosibirsk
Asia/Omsk
Asia/Oral
Asia/Phnom_Penh
Asia/Pontianak
Asia/Pyongyang
Asia/Qatar
Asia/Qyzylorda
Asia/Rangoon
Asia/Riyadh
Asia/Riyadh87
Asia/Riyadh88
Asia/Riyadh89
Asia/Saigon
Asia/Sakhalin
Asia/Samarkand
Asia/Seoul
Asia/Shanghai
Asia/Singapore
Asia/Taipei
Asia/Tashkent
Asia/Tbilisi
Asia/Tehran
Asia/Tel_Aviv
Asia/Thimbu
Asia/Thimphu
Asia/Tokyo
Asia/Ujung_Pandang
Asia/Ulaanbaatar
Asia/Ulan_Bator
Asia/Urumqi
Asia/Vientiane
Asia/Vladivostok
Asia/Yakutsk
Asia/Yekaterinburg
Asia/Yerevan
Atlantic/Azores
Atlantic/Bermuda
Atlantic/Canary
Atlantic/Cape_Verde
Atlantic/Faeroe
Atlantic/Faroe
Atlantic/Jan_Mayen
Atlantic/Madeira
Atlantic/Reykjavik
Atlantic/South_Georgia
Atlantic/St_Helena
Atlantic/Stanley
Australia/ACT
Australia/Adelaide
Australia/Brisbane
Australia/Broken_Hill
Australia/Canberra
Australia/Currie
Australia/Darwin
Australia/Eucla
Australia/Hobart
Australia/LHI
Australia/Lindeman
Australia/Lord_Howe
Australia/Melbourne
Australia/NSW
Australia/North
Australia/Perth
Australia/Queensland
Australia/South
Australia/Sydney
Australia/Tasmania
Australia/Victoria
Australia/West
Australia/Yancowinna
BET
BST
Brazil/Acre
Brazil/DeNoronha
Brazil/East
Brazil/West
CAT
CET
CNT
CST
CST6CDT
CTT
Canada/Atlantic
Canada/Central
Canada/East-Saskatchewan
Canada/Eastern
Canada/Mountain
Canada/Newfoundland
Canada/Pacific
Canada/Saskatchewan
Canada/Yukon
Chile/Continental
Chile/EasterIsland
Cuba
EAT
ECT
EET
EST
EST5EDT
Egypt
Eire
Etc/GMT
Etc/GMT+0
Etc/GMT+1
Etc/GMT+10
Etc/GMT+11
Etc/GMT+12
Etc/GMT+2
Etc/GMT+3
Etc/GMT+4
Etc/GMT+5
Etc/GMT+6
Etc/GMT+7
Etc/GMT+8
Etc/GMT+9
Etc/GMT-0
Etc/GMT-1
Etc/GMT-10
Etc/GMT-11
Etc/GMT-12
Etc/GMT-13
Etc/GMT-14
Etc/GMT-2
Etc/GMT-3
Etc/GMT-4
Etc/GMT-5
Etc/GMT-6
Etc/GMT-7
Etc/GMT-8
Etc/GMT-9
Etc/GMT0
Etc/Greenwich
Etc/UCT
Etc/UTC
Etc/Universal
Etc/Zulu
Europe/Amsterdam
Europe/Andorra
Europe/Athens
Europe/Belfast
Europe/Belgrade
Europe/Berlin
Europe/Bratislava
Europe/Brussels
Europe/Bucharest
Europe/Budapest
Europe/Chisinau
Europe/Copenhagen
Europe/Dublin
Europe/Gibraltar
Europe/Guernsey
Europe/Helsinki
Europe/Isle_of_Man
Europe/Istanbul
Europe/Jersey
Europe/Kaliningrad
Europe/Kiev
Europe/Lisbon
Europe/Ljubljana
Europe/London
Europe/Luxembourg
Europe/Madrid
Europe/Malta
Europe/Mariehamn
Europe/Minsk
Europe/Monaco
Europe/Moscow
Europe/Nicosia
Europe/Oslo
Europe/Paris
Europe/Podgorica
Europe/Prague
Europe/Riga
Europe/Rome
Europe/Samara
Europe/San_Marino
Europe/Sarajevo
Europe/Simferopol
Europe/Skopje
Europe/Sofia
Europe/Stockholm
Europe/Tallinn
Europe/Tirane
Europe/Tiraspol
Europe/Uzhgorod
Europe/Vaduz
Europe/Vatican
Europe/Vienna
Europe/Vilnius
Europe/Volgograd
Europe/Warsaw
Europe/Zagreb
Europe/Zaporozhye
Europe/Zurich
GB
GB-Eire
GMT
GMT0
Greenwich
HST
Hongkong
IET
IST
Iceland
Indian/Antananarivo
Indian/Chagos
Indian/Christmas
Indian/Cocos
Indian/Comoro
Indian/Kerguelen
Indian/Mahe
Indian/Maldives
Indian/Mauritius
Indian/Mayotte
Indian/Reunion
Iran
Israel
JST
Jamaica
Japan
Kwajalein
Libya
MET
MIT
MST
MST7MDT
Mexico/BajaNorte
Mexico/BajaSur
Mexico/General
Mideast/Riyadh87
Mideast/Riyadh88
Mideast/Riyadh89
NET
NST
NZ
NZ-CHAT
Navajo
PLT
PNT
PRC
PRT
PST
PST8PDT
Pacific/Apia
Pacific/Auckland
Pacific/Chatham
Pacific/Easter
Pacific/Efate
Pacific/Enderbury
Pacific/Fakaofo
Pacific/Fiji
Pacific/Funafuti
Pacific/Galapagos
Pacific/Gambier
Pacific/Guadalcanal
Pacific/Guam
Pacific/Honolulu
Pacific/Johnston
Pacific/Kiritimati
Pacific/Kosrae
Pacific/Kwajalein
Pacific/Majuro
Pacific/Marquesas
Pacific/Midway
Pacific/Nauru
Pacific/Niue
Pacific/Norfolk
Pacific/Noumea
Pacific/Pago_Pago
Pacific/Palau
Pacific/Pitcairn
Pacific/Ponape
Pacific/Port_Moresby
Pacific/Rarotonga
Pacific/Saipan
Pacific/Samoa
Pacific/Tahiti
Pacific/Tarawa
Pacific/Tongatapu
Pacific/Truk
Pacific/Wake
Pacific/Wallis
Pacific/Yap
Poland
Portugal
ROK
SST
Singapore
SystemV/AST4
SystemV/AST4ADT
SystemV/CST6
SystemV/CST6CDT
SystemV/EST5
SystemV/EST5EDT
SystemV/HST10
SystemV/MST7
SystemV/MST7MDT
SystemV/PST8
SystemV/PST8PDT
SystemV/YST9
SystemV/YST9YDT
Turkey
UCT
US/Alaska
US/Aleutian
US/Arizona
US/Central
US/East-Indiana
US/Eastern
US/Hawaii
US/Indiana-Starke
US/Michigan
US/Mountain
US/Pacific
US/Pacific-New
US/Samoa
UTC
Universal
VST
W-SU
WET
Zulu
-----Original Message-----
From: Tom Dopirak
[mailto:]
Sent: Friday, July 15, 2011 10:37 AM
To: Chris Hyzer
Cc: Keith Hazelton; paccman;
Subject: Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we
need any more?
How difficult would it be to add a specific timezone on the permission limit
syntax , it seems that would make things easier to understand. You can
alway default to the servers timezone. Perhaps I am overthinking this but
international campuses will do that to you.
On Jul 15, 2011, at 10:13 AM, Chris Hyzer wrote:
> Well, we haven't really heard a request for this.
>
> Right now if you have a start or end date on a permission or membership,
> then after midnight on the grouper server it will go live or dead. This
> wasn't really intended to be all that fine grained, though if someone needs
> it, we could tweak. Note that the start/end dates mean the membership or
> permission is on or off, it wont be on for some timezones and off for
> others.
>
> For the times with permission limits (e.g. only allow from 9am-5pm on
> weekdays), if the caller does not pass in the current time, it will use the
> Grouper server time. If the caller is in a different timezone, and passes
> in the current time, then it will use that time. So in that case the
> permission could be allowed for some callers and disallowed for other
> callers (depending on the clock of the caller).
>
> Sound good?
>
> Thanks,
> Chris
>
> -----Original Message-----
> From: Tom Dopirak
> [mailto:]
>
> Sent: Friday, July 15, 2011 9:49 AM
> To: Tom Dopirak
> Cc: Chris Hyzer; Keith Hazelton; paccman;
>
> Subject: Re: [grouper-dev] Re: [paccman] built-in permissions limits... do
> we need any more?
>
> of course i meant grouper :)
> On Jul 15, 2011, at 9:37 AM, Tom Dopirak wrote:
>
>> Hmmm. How do you expects dates to reflect internationalness? Is group
>> timezone sensitive?
>>
>> On Jul 7, 2011, at 1:14 PM, Chris Hyzer wrote:
>>
>>> memberships and permissions have begin and end dates, so I dont think
>>> someone would use permissions limits for that. If there is a need we can
>>> discuss :)
>>>
>>> Thanks,
>>> Chris
>>> From: Keith Hazelton
>>> []
>>> Sent: Thursday, July 07, 2011 12:50 PM
>>> To: Chris Hyzer
>>> Cc: paccman;
>>>
>>> Subject: Re: [paccman] built-in permissions limits... do we need any more?
>>>
>>> For effective date (of memberships, etc), it would be good to have date
>>> limits comparable to amount limits, e.g. "onOrAfter(2011-02-01) AND
>>> notAfter(2011-10-31)"
>>>
>>> It will be a big task to make this accessible for the average Grouper
>>> (delegated) admin. I can see that it will involve a lot of commentary on
>>> each line of the code snippets, etc. plus a sense of what environment the
>>> snippet assumes and what instances of what classes are in play. A person
>>> with a modest level of technical background should be able to go through
>>> this document line by line, pose questions to Grouper-user and
>>> occasionally Grouper-dev, and incorporate the verified answers into the
>>> commentary.
>>>
>>> Very nice new capability, Chris, I especially like the flexibility and
>>> extensibility of limit definition via expression languages.
>>>
>>> Regards, --Keith
>>>
>>> _______________________
>>> On Jul 1, 2011, at 09:10, Chris Hyzer wrote:
>>>
>>>> Here are the built in limits I have implemented. Its not the end of the
>>>> world to miss one, we can add it later, and institutions can implement
>>>> their own in the meantime, but if someone can think of another limit
>>>> that would be nice to have, let me know, and if it is easy, I will add
>>>> it (so far they have all been easy J ).
>>>>
>>>> https://spaces.internet2.edu/display/Grouper/Permission+limit+builtin+implementations
>>>>
>>>> Thanks,
>>>> Chris
>>>>
>>>> From: Chris Hyzer
>>>> Sent: Friday, June 17, 2011 10:39 AM
>>>> To: 'paccman';
>>>> ''
>>>> Subject: grouper permissions limits
>>>>
>>>> FYI, this is where I see permissions limits going... let me know any
>>>> feedback asap J
>>>>
>>>> https://spaces.internet2.edu/display/Grouper/Grouper+permission+limits
>>>>
>>>> btw, I will build the current state of 2.0 to the demo server at the end
>>>> of the weekend. J
>>>>
>>>> Thanks,
>>>> Chris
>>>
>>>
>>
>
- [grouper-dev] built-in permissions limits... do we need any more?, Chris Hyzer, 07/01/2011
- [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Keith Hazelton, 07/07/2011
- [grouper-dev] RE: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/07/2011
- [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Tom Dopirak, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Tom Dopirak, 07/15/2011
- RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Tom Dopirak, 07/15/2011
- RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Scott Koranda, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Scott Koranda, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Keith Hazelton, 07/15/2011
- RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Cantor, Scott E., 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Scott Koranda, 07/15/2011
- RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Tom Dopirak, 07/15/2011
- RE: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/15/2011
- Re: [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Tom Dopirak, 07/15/2011
- [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Tom Dopirak, 07/15/2011
- [grouper-dev] RE: [paccman] built-in permissions limits... do we need any more?, Chris Hyzer, 07/07/2011
- [grouper-dev] Re: [paccman] built-in permissions limits... do we need any more?, Keith Hazelton, 07/07/2011
Archive powered by MHonArc 2.6.16.