Grouper Users - Open Discussion List

[Shaun Koh <>]

Hi there,

 

I understand this question was listed for the July 14 Grouper Call though I was not able to attend it – my apologies

 

However, I am still inclined to know how this can be achieved hence this follow-up email.

 

Cheers,

Shaun K.

 

From: [mailto:] On Behalf Of Shaun Koh
Sent: Friday, 8 July 2016 4:54 p.m.
To:
Subject: [FORGED] [grouper-users] Assistance required determining privilege event from rule trigger. -- attribute assignment

 

Hi there,

 

I was wondering if there is a way to determine when a rule is triggered by a privilege event (e.g. add,delete,etc) ?

 

Specifically, I’m attempting to veto/reject `Admin` privilege assignments to groups within a folder (inc. sub-folders) if the object being assigned the privilege (group or user) is not a member of a certain group (e.g. an admin group).

 

The closest assignment value I could find is `subjectAssignInStem` for the `ruleCheckType` attribute which checks if there is a membership add, privilege add, permission add, etc.

 

Please let me know if I am not being clear enough.

 

Cheers,

Shaun K.