Grouper Users - Open Discussion List

[Chris Hyzer <>]

I don't remember an open Jira issue about this.  It can sort of be done in 
1.4 (coming out in Oct/Nov) with hooks.  You could configure your list or 
regex of folders (in grouper.properties or some config file) such that if a 
group is created under it (or edited if you like), that it will unassign the 
EveryEntity read or list privileges.  If there isn't a better way to do this 
(anyone?) we could consider a grouper-built-in hook like the group attribute 
validators... shouldn't be too difficult.

I don't know of a way to add a "type" or some flag to folders, so a sysadmin 
would need to configure which stems or regexes are private.  If you did a 
regex (substring), then if your stem name has a certain substring then it 
would match, or maybe some certain substring in the description.  Another way 
to flag is making a 'marker' group with no members (e.g. called 
"school:etc:nonPublicRead"), and if that group has a privilege against a 
folder, it is "marked".  Doesn't sound ideal...  but just trying to think if 
it can be done without too large of a change (e.g. stem metadata)

Thoughts?
Chris

> -----Original Message-----
> From: Thomas M Goerger 
> [mailto:]
> Sent: Thursday, September 11, 2008 4:45 PM
> To: 
> 
> Cc: Kevin J ORourke
> Subject: [grouper-users] FERPA Protected Data
>
> Hi,
>
> We're running into situations where we'd like to be able to restrict
> the
> ability for group members to see FERPA suppressed entries.  We've just
> turned off the read attribute for now, but this is less than ideal, of
> course.  I'm seeing from list archives that you might have been working
> on
> the ability to see a FERPA flag on a directory, and set suppression on
> this entry according to this flag.  Has there been any progress on
> this,
> or if not, when might something like this be available?
>
> Thanks,
>
> ***********************************************************************
> **********
> * Tom Goerger                                  Email/Unix System
> Administrator  *
> *
> *
> * University of Minnesota                      Email:  
> 
> *
> * Operations, Infrastructure and Architecture  Phone:  4-5804
> *
> * Internet Services                            Office: 750 University
> Park Plaza*
> *
> *
> ***********************************************************************
> **********