Grouper Users - Open Discussion List

[Chris Hyzer <>]

Hmmm, apparently non admins do not delete composites without removing the composite first very often… well, ever.

 

Yes, that is a bug, the code removes the privs first, then tries to remove the composite, but the privs aren’t there anymore.  I made a unit test and re-ordered things and now it works.

 

Do you need a patch for 2.2.1 or can it wait for 2.2.2 (to be released shortly)?

 

https://bugs.internet2.edu/jira/browse/GRP-1193

 

https://github.com/Internet2/grouper/commit/988d1a18b9c41fde3569c544abd336e00862b22d

 

 

Thanks,

Chris

 

 

From: [mailto:] On Behalf Of Tim Darby
Sent: Wednesday, September 09, 2015 1:48 PM
To: Chris Hyzer
Cc:
Subject: Re: [grouper-users] Deleting a composite group

 

Maybe this GSH session will shed some light on it. My ID (118448924299) has admin privs on groups "a" and "b".

 

gsh 0% GrouperSession.startRootSession();

edu.internet2.middleware.grouper.GrouperSession: 9ee81608d7154273837e8d3c0e775cc9,'GrouperSystem','application'

gsh 1% grouperSession = GrouperSession.start(SubjectFinder.findById("118448924299"));

edu.internet2.middleware.grouper.GrouperSession: 5f76d6fa22b74b9c9e96653907d40fac,'118448924299','person'

gsh 2% addGroup("timtest","composite","composite");

group: name='timtest:composite' displayName='timtest:composite' uuid='a6b898b3e5a34cf5aa8340b35d5bd2dc' 

gsh 4% addComposite("timtest:composite",CompositeType.COMPLEMENT,"timtest:a","timtest:b");

true

gsh 5% GroupFinder.findByName(grouperSession, "timtest:composite");

group: name='timtest:composite' displayName='timtest:composite' uuid='a6b898b3e5a34cf5aa8340b35d5bd2dc' 

gsh 6% delGroup("timtest:composite");

// Error: Cant view group: a6b898b3e5a34cf5aa8340b35d5bd2dc,

group name: timtest:composite,

Problem in HibernateSession: HibernateSession (761e074): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (43a3c3fd),

Problem in HibernateSession: HibernateSession (1c2b7850): new, notReadonly, READ_WRITE_NEW, notActiveTransaction, session (43a3c3fd)

false

gsh 7% delComposite("timtest:composite");

// Error: unable to find group by name: timtest:composite

false

gsh 8% delComposite("timtest:composite");

true

gsh 9% delGroup("timtest:composite");

true

gsh 10% 

Tim Darby

UA Information Security, Identity Services | The University of Arizona |  | +1 520.626.3799

 

On Wed, Sep 9, 2015 at 8:03 AM, Tim Darby <> wrote:

That's all there was in the logs and it's easily reproducible. Can you think of something else I can look at to figure this out?

Tim Darby

UA Information Security, Identity Services | The University of Arizona |  | +1 520.626.3799

 

On Wed, Sep 9, 2015 at 6:09 AM, Chris Hyzer <> wrote:

Is there more to the logs?  Can you reproduce this?  If so give us more details about how we can also

 

Thanks,

Chris

 

From: [mailto:] On Behalf Of Tim Darby
Sent: Thursday, August 27, 2015 12:55 PM
To:
Subject: [grouper-users] Deleting a composite group

 

I'm not able to delete a composite group (2.2.1) using either the REST interface or the UI. In the UI, I get a message like this:

 

Error: Cant view group: 750cdfccfcc34c518ed8c524668c2cd4, group name: timtest:composite, Problem in HibernateSession: HibernateSession (3b8f60f5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (4234a954), Problem in HibernateSession: HibernateSession (3f9f8c0e): new, notReadonly, READ_WRITE_NEW, notActiveTransaction, session (4234a954), Problem calling method groupDeleteSubmit on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Group

 

​I have admin privilege on all the groups involved. I can delete it if I actAs GrouperSystem.​

Tim Darby

UA Information Security, Identity Services | The University of Arizona |  | +1 520.626.3799