Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] question about Grouper permissions....

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] question about Grouper permissions....

Chronological Thread 
  • From: Steven Carmody <>
  • To: Chris Hyzer <>
  • Cc: Grouper-Users <>
  • Subject: Re: [grouper-users] question about Grouper permissions....
  • Date: Tue, 23 Aug 2011 09:47:00 -0400

On 8/22/11 10:16 AM, Chris Hyzer wrote:

Thanks very much, Chris! A couple of more questions.....

"permission definition"s, tho, look like strings ?


This, of course, leads directly to the next question -- does anyone know of any work that's been done with "naming" of permissions ? Any experience with how to represent a permission in a string ?

Yeah, you would have to write a plugin, TomZ can give you more info.

There are some complications with permissions though... since there
is allow/deny, and limits, and inheritance, it more complicated than
just a subject is in a group. Notifications need to be tweaked in
2.1 to take into account allow/deny. And if ldappcng uses
notifications then the same is true there too. Anyways, bottom line
is at this point the provisioning part of permissions is new
territory, though the existing components should work or will work at
some time soon, if you have examples to share that would help :)

As I'm sure you've guessed, my questions are less about a short term problem, and more about the long term direction.

So, over the longer term, it sounds like the Notification/event log system will be able to report changes to the definition of a Permission. And code that's currently monitoring the event log for group membership changes could be extended to also look for Permission changes? And, by the 2.1 release you expect that events will "accommodate" allow/deny ?

Archive powered by MHonArc 2.6.16.

Top of Page