Grouper Developers Forum

[Chris Hyzer <>]

There are 4 new web service operations in Grouper 2.1.  These are to satisfy the use case of centralized permission management where the resources are dynamic (e.g. in an application securing folders and files, someone could create a new folder or file, and the permission resources need to be created via WS).

 

This new WS operation is for assigning attribute definition name inheritance (for permission names)

 

https://spaces.internet2.edu/display/Grouper/Assign+Attribute+Definition+Name+Inheritance

 

Assign attribute definition name inheritance based on lookups by name or ID. This is new as of Grouper v2.1.  Note: attribute definition name inheritance is only used for permissions (e.g. if the permission names are an org chart there would be inheritance)

Features

 

    Pass in one parent attribute def name lookup by name or id

    Pass in one or many child attribute def name lookup by name or id (note, only the non-lite service can pass more than one child lookup)

    Pass in whether this an assignment or a removal of an assignment

    Can replace the current child list with the inputted list (non-lite only)

    Can pass in a txType so that you can run all the changes in one transaction, or just finish the work that is possible with no enclosing transaction

    Returns if it was successful or not, and returns a string detailing how many inserts, deletes, and no-ops there were (if the inheritance or lack of already existed in that state)

    Can actAs another user

 

Samples: (click download to see them)

http://anonsvn.internet2.edu/viewvc/viewvc.py/i2mi/trunk/grouper-ws/grouper-ws/doc/samples/assignAttributeDefNameInheritance/

 

Thanks,

Chris