Grouper Developers Forum

[Chris Hyzer <>]

The Internet2 Middleware Initiative is pleased to announce the release of Grouper version 2.1.5.  This is a minor release that fixes 11 issues from 2.1.4.  Note that several issues are security related.

 

For further information about this new release, to download the software and release notes, for upgrade instructions, and a link to an online Grouper demo, please visit:

 

      http://www.internet2.edu/grouper/software.html

 

      https://spaces.internet2.edu/display/Grouper/v2.1+Release+Notes

 

Here is a training video on performing a minor upgrade:

 

http://www.youtube.com/watch?v=dE67V38Jes0

 

Some important Jira’s in 2.1.5:

 

-    GRP-911: Lite UI doesn't check privileges when deleting attribute assignments

-    GRP-924: Grouper WS allows unauthorized users to delete attribute assignments

-    GRP-926: allow getMemberships WS to return privileges

-    GRP-923: WS getGrouperPrivilegesLite can return more data than the user should be able to see

-    GRP-928: Grouper UI allows unauthorized users to view the privileges of other subjects

 

Note, it is recommended that you upgrade to 2.1.5.  If you cannot do that soon, you should apply the following security related patches.

 

https://spaces.internet2.edu/display/Grouper/Grouper+patches

 

Apologies for cross-posting.

 

Thanks,

      Chris, on behalf of the Grouper Project team