Grouper Users - Open Discussion List

[Chris Hyzer <>]

There isn’t currently a way, so if you can write a hook that would be great.  Let me know if you need help (not sure this hook has been done before)  J. 

 

Thanks,

Chris

 

From: [mailto:] On Behalf Of Gagné Sébastien
Sent: Sunday, November 25, 2012 3:13 PM
To:
Subject: [grouper-users] Attributes permission

 

Hi,

We were wondering if there was a way to allow users to modify attribute values, without giving them the right to delete that same attribute.

 

Our usecase is an attribute shared between departments for configuration, each one sets its own value, but allowing the “set/modify value” also allows them to go and delete the attribute and destroy everything that was made by the other. Sure we can trust the good faith of user, but it’s not enough.

 

One thing I thought of is that I could create a hook for attributes and check before each delete if the operation is done by GrouperSystem/SysAdmin, if not, I can stop the deletion.

 

Thanks

 

 

Sébastien Gagné,     | Analyste en informatique

514-343-6111 x33844  | Université de Montréal,

                     | Pavillon Roger-Gaudry, local X-100-11