Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] finding privileges on groups via WS interface

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] finding privileges on groups via WS interface


Chronological Thread 
  • From: Martin van Es <>
  • To: Grouper Users Mailing List <>
  • Subject: Re: [grouper-users] finding privileges on groups via WS interface
  • Date: Wed, 4 Mar 2009 09:46:26 +0100

Hi,

I needed the exact functionality described a couple of days ago. The example
is mostly clear but is there any documentation on the mapping of group
privileges (types/names) to fieldName/Value? It's like having 2 interfaces
for
the same question, why not stick to the privilegeType/Name version?
Also, I was unable to find (javadoc) documentation on the privilegeType/Name
enum values or fieldName/Values. Is there any?

I found this mail:
http://mail.internet2.edu/wws/arc/grouper-users/2009-02/msg00055.html

Which seems to answer part of my question, but where would I look without the
mailinglist?

Ok... (I'm writing and thinking aloud now): it seems to be 'documented' in
the
grouper_fields table (privilege and type mapped to name).

Still the question why the privilegeType/Name route could not be used
remains...


Regards,
Martin

On Monday 23 February 2009 19:43:25 Chris Hyzer wrote:
> I looked into it, and found out why I never added it to WS, because the
> grouper API doesn't have a method for it. :)
>
> Anyways, I added it, feel free to get latest from the 1.4 branch, and try
> it out. I need to do more testing before closing the bug, but the test I
> did through a WS call worked fine.
>
> I added the API:
>
> gsh 0% subj = findSubject("10021368")
> subject: id='10021368' type='person' source='pennperson' name='Chris Hyzer'
> gsh 1% sess = GrouperSession.start(subj)
> edu.internet2.middleware.grouper.GrouperSession:
> 8d17a97d-3d1a-4e39-a44c-01a3fead792d,'10021368','person' gsh 2% member =
> MemberFinder.findBySubject(sess, subj)
> member: id='10021368' type='person' source='pennperson'
> uuid='6512f26a-98b5-486c-bc94-ac26e0d9a7ca' gsh 3% field =
> FieldFinder.find("admins")
> access privilege: 'admins'
> gsh 4% member.getGroups(field);
> group: name='aStem:whateverGroup2' displayName='aStem:disp2'
> uuid='b3be109a-afb6-49d0-8aaf-73cbd130f967' group: name='aStem:aGroup'
> displayName='aStem:aGroup' uuid='4992b987-3329-418e-ba83-9d9335305902'
> group: name='aStem:whateverGroup' displayName='aStem:disp1'
> uuid='2703916b-ac8a-4830-9a60-698a3b1faf97' gsh 5%
>
> Then I added a param on the getGroups web services (all flavors, though
> here is an example in rest batch):
>
> <WsRestGetGroupsRequest>
> <subjectLookups>
> <WsSubjectLookup>
> <subjectId>10021368</subjectId>
> </WsSubjectLookup>
> <WsSubjectLookup>
> <subjectId>10039438</subjectId>
> </WsSubjectLookup>
> </subjectLookups>
> <actAsSubjectLookup>
> <subjectId>GrouperSystem</subjectId>
> </actAsSubjectLookup>
> <params>
> <WsParam>
> <paramName>fieldName</paramName>
> <paramValue>admins</paramValue>
> </WsParam>
> </params>
> </WsRestGetGroupsRequest>
>




Archive powered by MHonArc 2.6.16.

Top of Page