Grouper Users - Open Discussion List

[Rahul Doshi <>]

Not sure if the bug https://bugs.internet2.edu/jira/browse/GRP-840 is same.  Seems to have been fixed in 2.1.3

Thanks,

Rahul

From: Gagné Sébastien <>
Date: Tuesday, October 9, 2012 3:29 PM
To: Chris Hyzer <>, "" <>
Subject: [grouper-users] RE: Restricting access to Grouper UI

I’m running 2.1.2 API and UI

 

I edited : ui/conf/resources/grouper/media.properties

The one in “ui/dist/grouper/WEB-INF/classes/resources/grouper/media.properties” shows the same properties.

 

The “etc:GroupeAccesUI” was manually created in the UI with my grouper sysadmin account. It was not autocreated by GrouperSystem. In this group I only added an admin group that contains a bunch of other admin groups which is where the users actually are. I also tested by adding only one user in the UI group.

 

I tried with a user authenticated by CAS and one in the tomcat’s tomcat-user.xml (<user username="usr_gagns" password="123" roles="grouper_user"/>)

 

I don’t have any error in my logs

 

De : Chris Hyzer []
Envoyé : 9 octobre 2012 14:47
À : Gagné Sébastien;
Objet : RE: Restricting access to Grouper UI

 

There have been some issues, though in my tests it seems to work.  If someone can debug or give more info that would help.  Also, which media.propeties did you try?  If not this one, try here: resources/grouper/media.properties   (since it could also be a custom one).  Which version of Grouper are you on?  I did my testing on the latest 2.1

 

Here is a movie: http://www.youtube.com/watch?v=9bh8VhweTIQ

 

Here is a thread:  https://lists.internet2.edu/sympa/arc/grouper-users/2012-09/msg00019.html

 

Thanks,

CHris

 

 

From:On Behalf Of Gagné Sébastien
Sent: Tuesday, October 09, 2012 2:34 PM
To:
Subject: [grouper-users] Restricting access to Grouper UI

 

Hi,

I tried restricting the access to the Grouper UI to members of a specific group using the following configuration in media.properties, but it doesn’t work :

 

#users must be in this group to be able to login to the UI

require.group.for.logins=etc:GroupeAccesUI

 

I rebuilt the UI and I tried with and without CAS integration. Whatever I do, I can log in using any user, even those not in the group and even if the group is empty.

 

Am I missing something ?  Is it broken ?

 

Thanks

 

 

Sébastien Gagné,     | Analyste en informatique

514-343-6111 x33844  | Université de Montréal,

                     | Pavillon Roger-Gaudry, local X-100-11