Grouper Users - Open Discussion List

["Klug, Lawrence" <>]

Chris,

 

Yes, I’ll work up a use case for this.

 

Thanks,

 

Lawrence

 

 

From: Chris Hyzer [mailto:]
Sent: Thursday, May 17, 2012 11:59 AM
To: Nathan Kopp; Klug, Lawrence;
Subject: RE: Folder visibility

 

You can do a similar thing with rules… J

 

https://spaces.internet2.edu/display/Grouper/Grouper+rules+use+case+-+Inherited+privileges+on+groups

 

Hope a new UI at some point will make that easier to assign/view/etc.

 

Lawrence, can you do a use case about how grouper works now to show us what you are concerned about?  i.e. go to the UI as a non privileged user and see what they can see which is not ideal?

 

Thanks,

Chris

 

From: Nathan Kopp
Sent: Thursday, May 17, 2012 2:53 PM
To: Klug, Lawrence; Chris Hyzer;
Subject: RE: Folder visibility

 

I’m not sure if this is exactly what Lawrence is asking, but I’ve always thought it would be great to be able to assign group permissions (e.g. “update” to let you manage members) at the FOLDER level and have those permissions apply to all groups stored within that folder.  That would make life much easier for certain use cases.

 

-Nathan

 

From: [] On Behalf Of Klug, Lawrence
Sent: Thursday, May 17, 2012 1:47 PM
To: Chris Hyzer;
Subject: [grouper-users] RE: Folder visibility

 

Chris,

 

I’m imagining a scenario where the organizational hierarchy has been loaded into grouper with many levels of folders and groups (divisions, sub-divisions, departments, etc.).  Let’s say we create a folder in a different  area for the Math Department and give them admin control of the folder.  They may want to work with groups in the organizational hierarchy related to Math, but might need to  be restricted from other sections of the orgs.  Can we limit visibility? How do you handle this at Penn?

 

Thanks,

 

Lawrence

 

 

From: Chris Hyzer []
Sent: Thursday, May 17, 2012 10:26 AM
To: Klug, Lawrence;
Subject: RE: Folder visibility

 

Well, there is no VIEW privilege on folders, so I don’t think the API hides them.

However, the UI should not show folders that are not applicable to a user (e.g. no privileges and no objects inside which are viewable or have privileges).  Right?  Or does it show them somewhere?

There is a find folder WS operation, maybe that should be locked down in a similar fashion if it is not already.

 

Thanks,

Chris

 

From: On Behalf Of Klug, Lawrence
Sent: Thursday, May 17, 2012 1:20 PM
To:
Subject: [grouper-users] Folder visibility

 

I have a question about folder visibility in Grouper.  Are all folders other than root:etc visible by default to non-sysadmingroup members?  Is this configurable?

 

Thanks,

 

Lawrence Klug

IMS Platform Development

310 825-2061

ext 52061