Grouper Users - Open Discussion List

[Gagné Sébastien <>]

Hi,

We were wondering if there was a way to allow users to modify attribute values, without giving them the right to delete that same attribute.

 

Our usecase is an attribute shared between departments for configuration, each one sets its own value, but allowing the “set/modify value” also allows them to go and delete the attribute and destroy everything that was made by the other. Sure we can trust the good faith of user, but it’s not enough.

 

One thing I thought of is that I could create a hook for attributes and check before each delete if the operation is done by GrouperSystem/SysAdmin, if not, I can stop the deletion.

 

Thanks

 

 

Sébastien Gagné,     | Analyste en informatique

514-343-6111 x33844  | Université de Montréal,

                     | Pavillon Roger-Gaudry, local X-100-11