Grouper Developers Forum

[John Gasper <>]

Hi Devs,

I’ve got some code that assigns a value to an attribute on a group. It appears that Grouper requires that the user has Update on the AttributeDef/Name in order to add a value (and likely adding the attribute def/name to the target Group for the initial invocation). Here’s the trace…

edu.internet2.middleware.grouper.exception.InsufficientPrivilegeException: Subject Subject id: jsmith, sourceId: ldap cannot update attributeDef etc:attribute:provisioningTargets:google:googleProvisioningTargetDef,

Problem calling method groupEditAttributesSubmit on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2GroupProvisioningTarget

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignGroupDelegate.assertCanUpdateAttributeDefName(AttributeAssignGroupDelegate.java:129)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.internal_assignAttributeHelper(AttributeAssignBaseDelegate.java:488)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttribute(AttributeAssignBaseDelegate.java:466)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttribute(AttributeAssignBaseDelegate.java:455)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttributeByName(AttributeAssignBaseDelegate.java:548)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttributeByName(AttributeAssignBaseDelegate.java:183)

        at edu.internet2.middleware.grouper.attr.value.AttributeValueDelegate.assignValue(AttributeValueDelegate.java:71)

As soon as I assigned the Update priv to the Def it worked.

Does assigning an attributeDef/Name to a group require Update on the Attribute Def? Is that intended? 

-- 

John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef