Grouper Users - Open Discussion List

[It Meme <>]

Hi Chris:

> Can you give me a more clear understanding of what exactly you want to do?

We are trying to give our Help Desk staff an audit trail on a users
Grouper group memberships - i.e. if a user calls help desk mentioning
that they loose access to a service; the help desk staff can find out
'who made the change, when change made, update made' to the user's
group membership.

The audit log perfectly captures such events for direct membership
events; we are exploring ways, via the ChangeLog, to also capture such
events, for indirect memberships, for Help Desk staff to view.

Does the above seem viable?


On Thu, May 19, 2011 at 8:58 AM, Chris Hyzer 
<>
 wrote:
> Sorry, I usually think of the change log to be used for notifications, not 
> to look back at and see how the memberships of a group or subject has 
> changed...  but you could try to do that if you like.  You can tie it back 
> to the audit log with the context id.  Note that depending on 
> configuration, in 2.0, only flattened (overall changes) of memberships are 
> put in the change log.
>
> Can you give me a more clear understanding of what exactly you want to do?
>
> Thanks,
> Chris
>
> -----Original Message-----
> From: It Meme 
> [mailto:]
> Sent: Thursday, May 19, 2011 10:27 AM
> To: Nathan Kopp
> Cc: Chris Hyzer; 
> 
> Subject: Re: [grouper-users] Audit of Indirect Memberships
>
> Hi Nathan and Chris:
>
> Yes, I was inquiring on possibility of the change log containing audit
> of indirect memberships.
>
> The audit log captures all membership updates to a subject (i.e.
> account); indirect membership updates are not captured by the audit
> log.
>
> In the change log, I can see the entries for the indirect memberships
> but I do not know how to tie these to the membership audit from the
> audit log (or even if it is possible).
>
> Is the change log path, w.r.t to membership audits, for indirect group
> memberships, worth investigating or is it a red herring.
>
> Thanks.
>
>
> On Thu, May 19, 2011 at 6:55 AM, Nathan Kopp 
> <>
>  wrote:
>> Are you referring to the change log or audit log?  In my experience, the 
>> change log does contain flattened membership data, including information 
>> for both direct and indirect memberships.  I don't work with the tables 
>> directly, but my change log listener (extending ChangeLogConsumerBase) has 
>> been receiving ChangeLogEntry objects that represent indirect memberships.
>>
>> -Nathan
>>
>>
>> -----Original Message-----
>> From: 
>> 
>>  
>> [mailto:]
>>  On Behalf Of Chris Hyzer
>> Sent: Thursday, May 19, 2011 8:44 AM
>> To: It Meme; 
>> 
>> Subject: RE: [grouper-users] Audit of Indirect Memberships
>>
>> No, it just audits who did what when.  If there are indirect side effects, 
>> then they are not represented.
>>
>> Thanks,
>> Chris
>>
>> -----Original Message-----
>> From: It Meme 
>> [mailto:]
>> Sent: Wednesday, May 18, 2011 6:12 PM
>> To: 
>> 
>> Cc: Chris Hyzer
>> Subject: Re: [grouper-users] Audit of Indirect Memberships
>>
>> Hi Chris:
>>
>> Thank you for hints :)
>>
>> Can Grouper v1.5.3's ChangeLog be configured to capture any of the
>> indirect memberships events?
>>
>> On Tue, May 17, 2011 at 8:03 PM, Chris Hyzer 
>> <>
>>  wrote:
>>> With 2.0 (to be released in a couple months), there is Point in Time 
>>> (PIT) auditing where you can do that...  it will tell you how the 
>>> memberships have changed.  The audit in 1.5+ shows who did the action and 
>>> more specifics about what the action was...  The context_id in the PIT 
>>> can tie the two together...
>>>
>>> Thanks,
>>> Chris
>>>
>>> -----Original Message-----
>>> From: 
>>> 
>>>  
>>> [mailto:]
>>>  On Behalf Of It Meme
>>> Sent: Tuesday, May 17, 2011 6:09 PM
>>> To: 
>>> 
>>> Subject: [grouper-users] Audit of Indirect Memberships
>>>
>>> Hi:
>>>
>>> I can retrieve audit of a person's direct membership in Grouper 1.5.3;
>>> is there a way to also extract audit of indirect memberships (perhaps
>>> via a SQL query)?
>>>
>>> Thanks.
>>>
>>
>