Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: addIncludeExclude groups

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: addIncludeExclude groups

Chronological Thread 
  • From: Chris Hyzer <>
  • To: "Bryan E. Wooten" <>, "" <>
  • Subject: [grouper-users] RE: addIncludeExclude groups
  • Date: Mon, 6 Jan 2014 17:35:04 +0000
  • Accept-language: en-US

The loader job itself shouldn’t be include/exclude, the generated/managed groups should be.


Did you see this?


I think the group name from the loader query should end in _systemOfRecord


Make the grouperLoaderGroupTypes by addIncludeExclude


You can have a query for the users as normal, then a group query.  This has a row for each group, and has the privs associated with it in columns.  In the admins col, put the name of the group which should be an admin.


If you cant get it working, give me the detailed design for exactly what you want, which group names, etc. and I can make you an example.










From: Bryan E. Wooten [mailto:]
Sent: Monday, January 06, 2014 12:03 PM
To: Chris Hyzer;
Subject: RE: addIncludeExclude groups


Thanks Chris,


Well I think I get it, but now I have confused myself even more. So I created an addIncludeExclude group called foo,  it is a SQL_GROUP_LIST with a grouperLoaderQuery: select group_name, subject_id, 'ldap' from UUIDM.UU_IDM_DEPT (this is a view).


When I created the foo group  the UI also created “foo exludes”, “foo_includes”, “foo system of record” and “foo system of record and includes”.  All as expected.


However when I run the job I get a group called “deptX_systemOfRecord as expected. But I don’t see any include or exclude groups (or other groups) created.


Am I missing something?


Also I am unclear on the purpose of the  “grouperLoaderGroupQuery”. I couldn’t find anything in the wiki.





From: Chris Hyzer []
Sent: Monday, January 06, 2014 8:52 AM
To: Bryan E. Wooten;
Subject: RE: addIncludeExclude groups


You are talking about a list of groups right?  Do they all have the same admin privs?


You need a col in the group query called “admins”, and list the group name there that should be an admin of each loader group.  Then in that group, mark it include/exclude in the UI, or if it is a loader group itself, then do the same thing you did on the other one.


Know what I mean?


Or if all your loaded groups are in a folder, you could apply a rule in that folder (and subfolders) to have a certain include/exclude group be admin of all groups.







From: [] On Behalf Of Bryan E. Wooten
Sent: Monday, January 06, 2014 10:20 AM
Subject: [grouper-users] addIncludeExclude groups


So I can successfully create a grouper loader group with andIncludesExcludes, but now I need to create a grouper loader group with admin privileges to the include and exclude groups. I can’t figure out how to do this.


Any hints?





Archive powered by MHonArc 2.6.16.

Top of Page