Grouper Users - Open Discussion List

[Steven Carmody <>]

On 8/22/11 10:16 AM, Chris Hyzer wrote:

Thanks very much, Chris! A couple of more questions.....

> > "permission definition"s, tho, look like strings ?
>
> Right

This, of course, leads directly to the next question -- does anyone know 
of any work that's been done with "naming" of permissions ? Any 
experience with how to represent a permission in a string ?

> Yeah, you would have to write a plugin, TomZ can give you more info.
>
> There are some complications with permissions though... since there
> is allow/deny, and limits, and inheritance, it more complicated than
> just a subject is in a group.  Notifications need to be tweaked in
> 2.1 to take into account allow/deny.  And if ldappcng uses
> notifications then the same is true there too.  Anyways, bottom line
> is at this point the provisioning part of permissions is new
> territory, though the existing components should work or will work at
> some time soon, if you have examples to share that would help :)

As I'm sure you've guessed, my questions are less about a short term 
problem, and more about the long term direction.

So, over the longer term, it sounds like the Notification/event log 
system will be able to report changes to the definition of a Permission. 
And code that's currently monitoring the event log for group membership 
changes could be extended to also look for Permission changes? And, by 
the 2.1 release you expect that events will "accommodate" allow/deny ?