Grouper Users - Open Discussion List

[Chris Hyzer <>]

I haven't used the BshServlet, but it looks like you POST a script to it and 
it will execute it.  I would not do this for security reasons since GSH 
effectively gives you full access to the registry.  If you decide to go down 
that path, make sure it has proper authentication and authorization (I would 
authenticate as strong as you can, and restrict to source IP networks).  

I would do this one of three ways:

1. Just use the Grouper Lite-UI.  It can add attribute definitions, handle 
actions, deal with privileges, etc.  This is definitely the preferred way to 
manage attributes/permission
-or- 2. If writing in Java, just use the Grouper API and use the java 
methods, not GSH
-or- 3. If not in Java (or in Java, you could do this as well), take in 
POSTed data from the UI, and repackage that into GSH command line calls, 
parse the output.  I don't really see a need to keep your own copy in the 
DB...  you could read from tables/views in grouper to display stuff before 
editing

Ok?

Thanks,
Chris


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of mohan shamachar
Sent: Monday, April 01, 2013 1:10 AM
To: 

Subject: Re: RE: RE: [grouper-users] web services REST API AttributeDefSave

Hi Chris,

Thank you.  The links provided are taking me to the wrong pages.  However, I
was able to view the documentation by replacing 2.1 to 1.6.0.

My goal is to run these grouper API (via GSH) from a browser.  I'm thinking of
options here:

Option 1:

1.  Store the permission name and actions in a database table.
2. Run a periodic service that will read the permission (attribute) and
actions data from the db-table and execute the GSH script to save them in the
grouper DB.

Option 2:
Since GSH is based on the BeanShell,  implement a BshServlet,  that will
receive the permission and actions data via a POST submit from the browser
form,  and call the GSH API.

I'm leaning toward the BshServlet.  Is there a GshServlet that's already
available for grouper that I can use?   Will this approach work?

thank you,
mohan