Grouper Users - Open Discussion List

[Pål Axelsson <>]

Hi again,

It may be done with composite groups but that leaves a possible loop hole.
The best way to do it I think is membership view privileges on each
membership depending of the user own whish. Application that need the true
membership list for access decisions needs a higher set of rights but the
same application use less rights for an membership list for viewing.

Pål


> -----Original Message-----
> From: 
> 
>  [
> ]
>  On Behalf Of Chris Hyzer
> Sent: Saturday, March 17, 2012 6:09 PM
> To: Pål Axelsson; 
> 
> Subject: RE: [grouper-users] another group privilege for hasMember?
> 
> I think that can be accomplished with composite groups...
> 
> thanks,
> Chris
> ________________________________________
> From: Pål Axelsson 
> []
> Sent: Friday, March 16, 2012 4:15 PM
> To: Chris Hyzer; 
> 
> Subject: Re: [grouper-users] another group privilege for hasMember?
> 
> Hi,
> 
> Due PI we almost the same need. If a user says that he/she would not be
listed
> as a member but he/she is. For students this a legal requirement i Sweden.
> 
> Pål Axelsson
> 
> 
> Chris Hyzer 
> <>
>  skrev:
> 
> >Our privacy officer would like to grant a service access to run a
hasMember
> query (ie. As input pass the netId and groupName) without the service
being
> able to list the netIds of the members of the group.  Currently the group
> privilege "READ" grants access to both.  Just curious, do other people
have a
> similar need or is it too fine grained?  This would not be a near term
thing
> anyways, but just curious if we should explore adding to the long term
> roadmap...
> >
> >Thanks,
> >Chris

Attachment: smime.p7s
Description: S/MIME cryptographic signature