grouper-users - Re: [grouper-users] Defining rule-based group privileges?
Subject: Grouper Users - Open Discussion List
List archive
- From: Peter DiCamillo <>
- To: Shilen Patel <>
- Cc: Chris Hyzer <>, Gagné Sébas tien <>, "" <>
- Subject: Re: [grouper-users] Defining rule-based group privileges?
- Date: Thu, 31 Jan 2013 15:01:41 -0500
Thanks, I'll try changing includeFlattenedPrivileges, it's set to true now. I tested by adding a person to the group that is used for privileges. We have about 800,000 course groups, since we have to keep the course memberships for at least five years.
Peter
On 1/31/13 1:08 PM, Shilen Patel wrote:
The delay may be in creating change log entries for the flattened
privileges. In the grouper-loader.properties file, what do you have
changeLog.includeFlattenedPrivileges set to? If it's true and you don't
care about flattened privileges, set that to false and see if it resolves
the issue. However, in either case, I wouldn't think it would take an
hour to do this. Is the member (that's being added to the group which has
privileges to all the course groups) a person or a group? How many course
groups are there?
Thanks!
-- Shilen
On 1/31/13 9:40 AM, "Peter DiCamillo"
<>
wrote:
On 1/30/13 5:55 PM, Chris Hyzer wrote:
I do still see one problem. If we make a change to the membership of theWe've encountered performance problems when assigning the members of aI think that was on an old version of Grouper, this is not a problem
group privileges to thousands of groups,
anymore, right?
group that has privileges for all the course groups, entries in the
change log temp table are not processed for a very long time. For
Grouper 2.1, I stopped timing it after an hour. It took several hours
for 1.6. We use a change log consumer for near real-time provisioning,
so that's a problem. In some cases, users are making requests to access
a service, and expect to get access within about 10 minutes. The only
solution I have is to handle changes to that group as a maintenance
activity.
Peter
- [grouper-users] Defining rule-based group privileges?, Peter DiCamillo, 01/30/2013
- RE: [grouper-users] Defining rule-based group privileges?, Gagné Sébastien, 01/30/2013
- RE: [grouper-users] Defining rule-based group privileges?, Chris Hyzer, 01/30/2013
- Re: [grouper-users] Defining rule-based group privileges?, Peter DiCamillo, 01/31/2013
- Re: [grouper-users] Defining rule-based group privileges?, Shilen Patel, 01/31/2013
- Re: [grouper-users] Defining rule-based group privileges?, Peter DiCamillo, 01/31/2013
- Re: [grouper-users] Defining rule-based group privileges?, Shilen Patel, 01/31/2013
- RE: [grouper-users] Defining rule-based group privileges?, Chris Hyzer, 01/31/2013
- Re: [grouper-users] Defining rule-based group privileges?, Peter DiCamillo, 01/31/2013
- Re: [grouper-users] Defining rule-based group privileges?, Shilen Patel, 01/31/2013
- Re: [grouper-users] Defining rule-based group privileges?, Peter DiCamillo, 01/31/2013
- RE: [grouper-users] Defining rule-based group privileges?, Chris Hyzer, 01/30/2013
- RE: [grouper-users] Defining rule-based group privileges?, Gagné Sébastien, 01/30/2013
Archive powered by MHonArc 2.6.16.