Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] attributeDef permissions issues - patched version 2.3.0

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] attributeDef permissions issues - patched version 2.3.0


Chronological Thread 
  • From: "Hyzer, Chris" <>
  • To: Jeff McCullough <>, Gouper Users List <>
  • Subject: RE: [grouper-users] attributeDef permissions issues - patched version 2.3.0
  • Date: Thu, 26 Jan 2017 05:51:02 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

 

############

Regarding #1, can you please send a full stack from logs?  I cant reproduce it.  This is what I tried (note, I tried with an assignment value too):

 

    GrouperSession grouperSession = GrouperSession.startRootSession();

 

    String groupName = "test:testGroup";

    Group group = new GroupSave(grouperSession).assignCreateParentStemsIfNotExist(true).assignName(groupName).save();

 

    group.grantPriv(SubjectTestHelper.SUBJ0, AccessPrivilege.ADMIN, false);

   

    //attribute

    String nameOfAttributeDef = "test:testAttributeDef";

    AttributeDef attributeDef = new AttributeDefSave(grouperSession).assignCreateParentStemsIfNotExist(true).assignName(nameOfAttributeDef)

        .assignAttributeDefType(AttributeDefType.attr).assignToGroup(true).assignValueType(AttributeDefValueType.string).save();

   

    attributeDef.getPrivilegeDelegate().grantPriv(SubjectTestHelper.SUBJ0, AttributeDefPrivilege.ATTR_UPDATE, false);

   

    String nameOfAttributeDefName = "test:testAttributeNameDef";

    AttributeDefName attributeDefName = new AttributeDefNameSave(grouperSession, attributeDef).assignCreateParentStemsIfNotExist(true)

        .assignName(nameOfAttributeDefName).save();

 

    GrouperSession.stopQuietly(grouperSession);

   

    grouperSession = GrouperSession.startRootSession();

   

    group.getAttributeDelegate().assignAttribute(attributeDefName);

   

    group.delete();

   

    GrouperSession.stopQuietly(grouperSession);

 

############

Regarding #2:

 

Cant reproduce that either…

Do you have the full stack from logs?  Full URL.  Screenshot before and after error?

 

 

 

From: [mailto:] On Behalf Of Jeff McCullough
Sent: Wednesday, January 25, 2017 5:14 PM
To: Gouper Users List <>
Subject: [grouper-users] attributeDef permissions issues - patched version 2.3.0

 

Yesterday I asked about a group deletion error, and have installed the #42 patch. This is a different issue. The person reporting the error below was trying to delete a group. They had update, but not admin privilege on the attributeDef in question. When I added admin privilege, they could delete the group. This seems like a bug to me. There is a related issue also below...

 

issue #1

-----------------------

I tried deleting the group in Grouper and got an error message: Error: Cant find (or not allowed to find) AttributeDef by attributeDefNameId: 4ff11bdac2f94464b21e7fd8cd470ad0, Exception in delete: edu.internet2.middleware.grouper.attr.value.AttributeAssignValue, , Problem in HibernateSession: HibernateSession (7acbd53f): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (96eef17), Exception in delete: edu.internet2.middleware.grouper.attr.value.AttributeAssignValue, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: null, tx type: null, Problem in HibernateSession: HibernateSession (5a0d5c21): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (96eef17), Problem deleting attribute assignValue: AttributeAssignValue.id#8fde2c8ab7b74e76a566056601cd7ca0 , Problem in HibernateSession: HibernateSession (5dc445aa): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (96eef17), Problem deleting attribute assign: AttributeAssign[id=7236e400a7b04c729fb826b25323e313,action="assign,attributeDefName=etc:attribute:provisioningTargets:ldap:syncToLDAP," group=Group[name=edu:berkeley:org:bcaltest:ronnieoTestGroup4,uuid=1f2dc727796e46ca8aeba70cffe409ef]] , Problem in HibernateSession: HibernateSession (6e968920): new, notReadonly, READ_WRITE_NEW, notActiveTransaction, session (96eef17), Problem calling method groupDeleteSubmit on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Group



issue #2

——————————

On the attributeDef privileges page, I chose “edit privileges” from the Actions item on the right side of the screen. I got the below error message, and the screen was redirected back to the Home page.





Error: cannot find groupId, groupName, or groupIndex in url







Thanks,

Jeff




Archive powered by MHonArc 2.6.19.

Top of Page