Grouper Users - Open Discussion List

[Chris Hyzer <>]

See this:

 

https://spaces.internet2.edu/display/Grouper/Grouper+rules+use+case+-+Inherited+privileges+on+groups#Grouperrulesusecase-Inheritedprivilegesongroups-AnotherPennexample

 

You are assigning privs to groups, but not folders… do something like this:

 

gsh 0% grouperSession = GrouperSession.startRootSession();

 

gsh 1% stem1 = StemFinder.findByName(grouperSession, "ucla:test:group");

 

gsh 2% group1 = GroupFinder.findByName(grouperSession, "ucla:testAdmin");

 

gsh 3% RuleApi.inheritFolderPrivileges(SubjectFinder.findRootSubject(), stem1, Stem.Scope.SUB, group1.toSubject(),Privilege.getInstances("stem, create"));

 

gsh 4% RuleApi.runRulesForOwner(stem1);

 

Thanks,

Chris

 

From: [mailto:] On Behalf Of Doppala, Karthik
Sent: Thursday, July 03, 2014 6:09 PM
To:
Subject: [grouper-users] Stem admin privileges

 

Hi All,

I use the following commands to assign admin privilege to an individual or a group on a folder. I noticed that that when members in this admin group login they do not see the “create group” link under the folder, they are able to add members to an already existing group but cannot add a group themselves even though they have been assigned admin privilege. Am I missing something? Appreciate your input.

 

sh 2% grouperSession = GrouperSession.startRootSession();

 

gsh 3% stem1 = StemFinder.findByName(grouperSession, "ucla:test:group");

 

gsh 4% group1 = GroupFinder.findByName(grouperSession, "ucla:testAdmin");

 

gsh 5% RuleApi.inheritGroupPrivileges(SubjectFinder.findRootSubject(), stem1, Stem.Scope.SUB, group1.toSubject(), Privilege.getInstances("admin"));

 

 

RuleApi.runRulesForOwner(stem1)

 

Thanks,

Karthik