Skip to Content.
Sympa Menu

grouper-dev - [grouper-dev] RE: Assigning attribute value requires Def Update priv?

Subject: Grouper Developers Forum

List archive

[grouper-dev] RE: Assigning attribute value requires Def Update priv?

Chronological Thread 
  • From: Chris Hyzer <>
  • To: John Gasper <>, "" <>
  • Subject: [grouper-dev] RE: Assigning attribute value requires Def Update priv?
  • Date: Fri, 16 Oct 2015 22:19:53 +0000
  • Accept-language: en-US

Yes.  You don’t want any user to be able to assign any attribute to objects they own right?  J  if so for an attribute assign grouperAll to update of that AttributeDef.  Ok?  J





From: [mailto:] On Behalf Of John Gasper
Sent: Friday, October 16, 2015 5:54 PM
Subject: [grouper-dev] Assigning attribute value requires Def Update priv?


Hi Devs,


I’ve got some code that assigns a value to an attribute on a group. It appears that Grouper requires that the user has Update on the AttributeDef/Name in order to add a value (and likely adding the attribute def/name to the target Group for the initial invocation). Here’s the trace…


edu.internet2.middleware.grouper.exception.InsufficientPrivilegeException: Subject Subject id: jsmith, sourceId: ldap cannot update attributeDef etc:attribute:provisioningTargets:google:googleProvisioningTargetDef,

Problem calling method groupEditAttributesSubmit on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2GroupProvisioningTarget

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignGroupDelegate.assertCanUpdateAttributeDefName(

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.internal_assignAttributeHelper(

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttribute(

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttribute(

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttributeByName(

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.assignAttributeByName(

        at edu.internet2.middleware.grouper.attr.value.AttributeValueDelegate.assignValue(


As soon as I assigned the Update priv to the Def it worked.


Does assigning an attributeDef/Name to a group require Update on the Attribute Def? Is that intended? 



John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef


Archive powered by MHonArc 2.6.16.

Top of Page