Grouper Users - Open Discussion List

[Derek D Owens <>]

In our Grouper 2.3.0 system, we're using a Db view via GrouperJdbcSourceAdapter2 for subjects. The subjects in our Db contain many different types of user NetIDs, including ones used for administrative (privileged) access. Due to concerns about information exposure, it's been requested that we restrict access to these privileged accounts within the Grouper UI so that they do not return in search results for end-users of the UI.  We do need to have these subjects available to place into groups, so they need to be available and resolvable in our subject Db. 

I'm investing writing a SubjectCustomizer with filterSubjects to filter out the search results in the UI. However, would a viable quick fix be to create a new subject view in our subjects Db which does not return the privileged subjects and configure our Grouper UI instance to use it? We'd keep our grouper daemon (etc.) configured to the use the full subject Db view. Would there be any issues caused by the Grouper UI using a different subject Db than the other grouper components? Could this affect the membership data in the grouper Db for those privileged subjects?

Thanks!

Regards,
Derek