Skip to Content.
Sympa Menu

grouper-dev - [grouper-dev] Assigning attribute value requires Def Update priv?

Subject: Grouper Developers Forum

List archive

[grouper-dev] Assigning attribute value requires Def Update priv?

Chronological Thread 
  • From: John Gasper <>
  • To: "" <>
  • Subject: [grouper-dev] Assigning attribute value requires Def Update priv?
  • Date: Fri, 16 Oct 2015 14:54:18 -0700

Hi Devs,

I’ve got some code that assigns a value to an attribute on a group. It appears that Grouper requires that the user has Update on the AttributeDef/Name in order to add a value (and likely adding the attribute def/name to the target Group for the initial invocation). Here’s the trace…

edu.internet2.middleware.grouper.exception.InsufficientPrivilegeException: Subject Subject id: jsmith, sourceId: ldap cannot update attributeDef etc:attribute:provisioningTargets:google:googleProvisioningTargetDef,
Problem calling method groupEditAttributesSubmit on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2GroupProvisioningTarget
        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignGroupDelegate.assertCanUpdateAttributeDefName(
        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.internal_assignAttributeHelper(
        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttribute(
        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttribute(
        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttributeByName(
        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttributeByName(
        at edu.internet2.middleware.grouper.attr.value.AttributeValueDelegate.assignValue(

As soon as I assigned the Update priv to the Def it worked.

Does assigning an attributeDef/Name to a group require Update on the Attribute Def? Is that intended? 

John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef

Archive powered by MHonArc 2.6.16.

Top of Page