Grouper Users - Open Discussion List

[Gagné Sébastien <>]

FYI, GrouperAll gets some privileges set at creation, by default it's "read" 
and "view". They could include "admin" if you configure it that way, they can 
be adjusted in grouper.properties :

# If set to _true_, the ALL subject will be granted that privilege on
# each new group that is created.  Note, you can override the default
# checkboxes on screen of UI in media.properties.
groups.create.grant.all.admin         = false
groups.create.grant.all.optin         = false
groups.create.grant.all.optout        = false
groups.create.grant.all.read          = true
groups.create.grant.all.update        = false
groups.create.grant.all.view          = true

-----Message d'origine-----
De : 

 
[mailto:]
 De la part de Keith Hazelton
Envoyé : 27 janvier 2013 10:27
À : 

Objet : Re: [grouper-users] Limiting admin rights to creator of a group

The issue for me was whether anyone OTHER than the creator and wheel group 
folks got admin/update on the new group by default.  Looks like they don't 
which is what I was hoping.

         --Keith
__________________
On Jan 27, 2013, at 08:57:12, Chris Hyzer wrote:

> In all of grouper a creator has admin rights of an object, otherwise they 
> cant go back and edit/edit/admin it later...
> 
> Thanks,
> Chris
> ________________________________________
> From: 
> 
>  
> []
>  on behalf of Keith Hazelton 
> []
> Sent: Saturday, January 26, 2013 2:13 PM
> To: 
> 
> Subject: Re: [grouper-users] Limiting admin rights to creator of a group
> 
> It looks like this may be the default behavior when using the Grouper UI.  
> Is that true?
> _____________
> On Jan 25, 2013, at 15:26:32, Keith Hazelton wrote:
> 
>> Let's say I have a Grouper group, root:abc:colleagues, that has admin 
>> rights on a given folder, root:def:sandbox.
>> 
>> What I'd like to do is when a particular member of 'colleagues' creates a 
>> new group in 'sandbox', give them exclusive admin privileges on that new 
>> group.
>> E.g. let's say Sandy is in 'colleagues' and creates a group 
>> 'root:def:sandbox:grp01'
>> I would like Sandy to be the only subject with admin rights over 'grp01'
>> and I would like to automate this process.
>> 
>> Ideas on how to implement such a rule?
>> 
>>        Thanks for suggestions,   --Keith
>