Skip to Content.
Sympa Menu

grouper-users - RE: RE: RE: [grouper-users] web services REST API AttributeDefSave

Subject: Grouper Users - Open Discussion List

List archive

RE: RE: RE: [grouper-users] web services REST API AttributeDefSave

Chronological Thread 
  • From: Chris Hyzer <>
  • To: mohan shamachar <>, "" <>
  • Subject: RE: RE: RE: [grouper-users] web services REST API AttributeDefSave
  • Date: Mon, 1 Apr 2013 16:13:33 +0000
  • Accept-language: en-US
  • Authentication-results:; dkim=neutral (message not signed) header.i=none

I haven't used the BshServlet, but it looks like you POST a script to it and
it will execute it. I would not do this for security reasons since GSH
effectively gives you full access to the registry. If you decide to go down
that path, make sure it has proper authentication and authorization (I would
authenticate as strong as you can, and restrict to source IP networks).

I would do this one of three ways:

1. Just use the Grouper Lite-UI. It can add attribute definitions, handle
actions, deal with privileges, etc. This is definitely the preferred way to
manage attributes/permission
-or- 2. If writing in Java, just use the Grouper API and use the java
methods, not GSH
-or- 3. If not in Java (or in Java, you could do this as well), take in
POSTed data from the UI, and repackage that into GSH command line calls,
parse the output. I don't really see a need to keep your own copy in the
DB... you could read from tables/views in grouper to display stuff before



-----Original Message-----

On Behalf Of mohan shamachar
Sent: Monday, April 01, 2013 1:10 AM

Subject: Re: RE: RE: [grouper-users] web services REST API AttributeDefSave

Hi Chris,

Thank you. The links provided are taking me to the wrong pages. However, I
was able to view the documentation by replacing 2.1 to 1.6.0.

My goal is to run these grouper API (via GSH) from a browser. I'm thinking of
options here:

Option 1:

1. Store the permission name and actions in a database table.
2. Run a periodic service that will read the permission (attribute) and
actions data from the db-table and execute the GSH script to save them in the
grouper DB.

Option 2:
Since GSH is based on the BeanShell, implement a BshServlet, that will
receive the permission and actions data via a POST submit from the browser
form, and call the GSH API.

I'm leaning toward the BshServlet. Is there a GshServlet that's already
available for grouper that I can use? Will this approach work?

thank you,

Archive powered by MHonArc 2.6.16.

Top of Page