Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Re: composite-ng intersection

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Re: composite-ng intersection


Chronological Thread 
  • From: Jeffrey Crawford <>
  • To: "Hyzer, Chris" <>
  • Cc: Gouper Users List <>
  • Subject: Re: [grouper-users] Re: composite-ng intersection
  • Date: Tue, 12 Jul 2016 15:37:43 -0700

The site I found to file bugs doesn't seem to have a shibboleth front end. Am I trying the correct one?

https://bugs.internet2.edu/jira/projects/GRP

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!
---------------------------------------

On Sun, Jul 3, 2016 at 10:38 AM, Hyzer, Chris <> wrote:

If we want to do this I think we need a change log consumer that processes effective membership changes.  If that is what you need please open a jira and the Grouper team can discuss

 

Thanks

Chris

 

 

From: [mailto:] On Behalf Of Jeffrey Crawford
Sent: Friday, July 01, 2016 8:36 PM
To: Gouper Users List <>
Subject: [grouper-users] Re: composite-ng intersection

 

okay quick update, it looks consistent that RuleApi.groupIntersection will only work when the user is a "direct" member of the mustBeInGroup, if the member is an indirect member it fails to trigger.


Jeffrey E. Crawford
Enterprise Service Team

 

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------

 

On Fri, Jul 1, 2016 at 5:14 PM, Jeffrey Crawford <> wrote:

Hello,

I have a request that users are removed from groups when they are no longer eligible for a service using RuleApi.groupIntersection(subjectActAs, ruleGroup, mustBeInGroup)

if the mustBeInGroup is a group where the user is removed from directly it seems to work correctly, if however mustBeInGroup is a nested group it and a user is removed via being removed from one of its sub groups it seems to ignore the rule (I haven't tried this with composites).

I'm not sure if that the intention or if its a bug, however if its intentional it seems like you would have to maintain two lists, one with the rule api and the other in the tested group.

I hope I'm making sense. Let me know if I'm missing something.


Jeffrey E. Crawford
Enterprise Service Team

 

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------

 





Archive powered by MHonArc 2.6.19.

Top of Page