Grouper Users - Open Discussion List

[Chris Hyzer <>]

The only people who can edit loader jobs are sysadmins.

 

This is kind of a complicated topic though.  If you can edit the privs tab you have admin on the object.  If you have admin on the object you can assign / edit attributes, but you have to have UPDATE on that attribute.  So if you have an attribute that you only want certain people to manage (across all objects), then only certain people should have UPDATE on that attribute, and only people with ATTR_UPDATE or ADMIN on a group/folder.

 

Ok?

 

Thanks,

Chris

 

 

From: [mailto:] On Behalf Of Jeffrey Crawford
Sent: Wednesday, October 21, 2015 7:09 PM
To: Gouper Users List
Subject: [grouper-users] Attributes and group privileges.

 

Is there a way to allow someone to manage the privileges tab in grouper but not allow them to create attributes? For example allowing someone to delegate group management from a point in the stem, but prevent them from creating loader jobs?

Jeffrey

 

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------