Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Privileges on Grouper attributes

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Privileges on Grouper attributes


Chronological Thread 
  • From: Gagné Sébastien <>
  • To: "Keith Hazelton" <>, <>
  • Subject: RE: [grouper-users] Privileges on Grouper attributes
  • Date: Wed, 27 Feb 2013 08:24:55 -0500
  • Authentication-results: sfpop-ironport04.merit.edu; dkim=neutral (message not signed) header.i=none

I would assume #1 is doable since it's done in the Lite UI (search for you
attrDef then there's a "Privileges" button at the bottom) , but I can't find
the exact method to used in the API

As for #2, privileges are based on attributeDefs only, attribute names don't
have privileges (unfortunately)

-----Message d'origine-----
De :


[mailto:]
De la part de Keith Hazelton
Envoyé : 26 février 2013 23:02
À :

Objet : [grouper-users] Privileges on Grouper attributes

I see in grouper.properties:
----------
# If set to _true_, the ALL subject will be granted that privilege on
# each new attributeDef that is created.
attributeDefs.create.grant.all.attrAdmin = false
attributeDefs.create.grant.all.attrOptin = false
attributeDefs.create.grant.all.attrOptout = false
attributeDefs.create.grant.all.attrRead = false
attributeDefs.create.grant.all.attrUpdate = false
attributeDefs.create.grant.all.attrView = false
----------

My questions are
1) If attributeDefs were created with all these set to false, are there
Grouper API calls to grant these privileges selectively to groups and/or
individuals?
2) Are there also privileges like this on individual attributes as well as
attributeDefs?

--Keith



Archive powered by MHonArc 2.6.16.

Top of Page