grouper-users - RE: [grouper-users] attributeDef permissions issues - patched version 2.3.0
Subject: Grouper Users - Open Discussion List
List archive
- From: "Hyzer, Chris" <>
- To: Jeff McCullough <>, Gouper Users List <>
- Subject: RE: [grouper-users] attributeDef permissions issues - patched version 2.3.0
- Date: Thu, 26 Jan 2017 05:51:02 +0000
- Accept-language: en-US
- Authentication-results: spf=none (sender IP is ) ;
- Ironport-phdr: 9a23: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
- Spamdiagnosticmetadata: NSPM
- Spamdiagnosticoutput: 1:99
############ Regarding #1, can you please send a full stack from logs? I cant reproduce it. This is what I tried (note, I tried with an assignment value too): GrouperSession grouperSession = GrouperSession.startRootSession(); String groupName = "test:testGroup"; Group group = new GroupSave(grouperSession).assignCreateParentStemsIfNotExist(true).assignName(groupName).save(); group.grantPriv(SubjectTestHelper.SUBJ0, AccessPrivilege.ADMIN, false);
//attribute String nameOfAttributeDef = "test:testAttributeDef"; AttributeDef attributeDef = new AttributeDefSave(grouperSession).assignCreateParentStemsIfNotExist(true).assignName(nameOfAttributeDef) .assignAttributeDefType(AttributeDefType.attr).assignToGroup(true).assignValueType(AttributeDefValueType.string).save();
attributeDef.getPrivilegeDelegate().grantPriv(SubjectTestHelper.SUBJ0, AttributeDefPrivilege.ATTR_UPDATE, false);
String nameOfAttributeDefName = "test:testAttributeNameDef"; AttributeDefName attributeDefName = new AttributeDefNameSave(grouperSession, attributeDef).assignCreateParentStemsIfNotExist(true) .assignName(nameOfAttributeDefName).save(); GrouperSession.stopQuietly(grouperSession);
grouperSession = GrouperSession.startRootSession();
group.getAttributeDelegate().assignAttribute(attributeDefName);
group.delete();
GrouperSession.stopQuietly(grouperSession); ############ Regarding #2:
Cant reproduce that either… Do you have the full stack from logs? Full URL. Screenshot before and after error? From: [mailto:]
On Behalf Of Jeff McCullough Yesterday I asked about a group deletion error, and have installed the #42 patch. This is a different issue. The person reporting the error below was trying to delete a group. They had update, but not admin privilege on the attributeDef
in question. When I added admin privilege, they could delete the group. This seems like a bug to me. There is a related issue also below... issue #1 ----------------------- I tried deleting the group in Grouper and got an error message: Error: Cant find (or not allowed to find) AttributeDef by attributeDefNameId:
4ff11bdac2f94464b21e7fd8cd470ad0, Exception in delete: edu.internet2.middleware.grouper.attr.value.AttributeAssignValue,
, Problem in HibernateSession: HibernateSession (7acbd53f): notNew, notReadonly, READ_WRITE_NEW, activeTransaction,
session (96eef17), Exception in delete: edu.internet2.middleware.grouper.attr.value.AttributeAssignValue, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: null, tx type: null, Problem in HibernateSession: HibernateSession (5a0d5c21):
notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (96eef17), Problem deleting attribute assignValue:
AttributeAssignValue.id#8fde2c8ab7b74e76a566056601cd7ca0
, Problem in HibernateSession: HibernateSession (5dc445aa): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (96eef17), Problem deleting attribute assign: AttributeAssign[id=7236e400a7b04c729fb826b25323e313,action="assign,attributeDefName=etc:attribute:provisioningTargets:ldap:syncToLDAP,"
group=Group[name=edu:berkeley:org:bcaltest:ronnieoTestGroup4,uuid=1f2dc727796e46ca8aeba70cffe409ef]] , Problem in HibernateSession: HibernateSession (6e968920): new, notReadonly, READ_WRITE_NEW, notActiveTransaction, session (96eef17), Problem calling method
groupDeleteSubmit on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Group
issue #2 —————————— On the attributeDef privileges page, I chose “edit privileges” from the Actions item on the right side of the screen. I got the below error
message, and the screen was redirected back to the Home page.
Error: cannot find groupId, groupName, or groupIndex in url
Thanks, Jeff |
- [grouper-users] attributeDef permissions issues - patched version 2.3.0, Jeff McCullough, 01/25/2017
- RE: [grouper-users] attributeDef permissions issues - patched version 2.3.0, Hyzer, Chris, 01/26/2017
Archive powered by MHonArc 2.6.19.