Grouper Users - Open Discussion List

[Steven Carmody <>]

Chris -- this turned out to be my fault; I made a mistake. Sorry for 
causing alarm.

On 8/10/17 3:10 PM, Hyzer, Chris wrote:
> 1.Tell me which groups you get in the UI.
>
> 2.Tell me which groups you get in the WS.
>
> 3.Tell me the relationships of those groups (which are members of which).
>
> 4.Does the NewUI give the correct result? (this groups memberships in 
> other groups)
>
> 5.Run this:
>
> select gmlv.* from grouper_memberships_lw_v gmlv,
>
> grouper_groups gg_member
>
> where GMLV.SUBJECT_ID = GG_MEMBER.ID
>
> and gmlv.subject_source = 'g:gsa'
>
> and GG_MEMBER.NAME = 'MEMBER:GROUP:NAME'
>
> and GMLV.LIST_NAME = 'members'
>
> 6.Take everything out of WS call and see what you get.  Send me the full 
> output of this call
>
> [mchyzer@flash pennGroupsClient-2.3.0]$ java -jar grouperClient.jar 
> --operation=getGroupsWs --subjectIdentifiers=MEMBER:GROUP:NAME --debug=true
>
> POST /grouperWs/servicesRest/v2_3_000/subjects HTTP/1.1
>
> <WsRestGetGroupsRequest>
>
>    <subjectLookups>
>
>      <WsSubjectLookup>
>
>        <subjectIdentifier>MEMBER:GROUP:NAME</subjectIdentifier>
>
>      </WsSubjectLookup>
>
>    </subjectLookups>
>
>    <enabled>T</enabled>
>
> </WsRestGetGroupsRequest>
>
> 7.Run this in GSH in the UI, send me the results
>
> gsh 0% grouperSession = GrouperSession.startRootSession();
>
> edu.internet2.middleware.grouper.GrouperSession: 
> c3df973ef3eb468fa17aef679b2d82f1,'GrouperSystem','application'
>
> gsh 1% group = GroupFinder.findByName(grouperSession, "MEMBER:GROUP:NAME");
>
> group: name='test:testGroup' displayName='test:testGroup' 
> uuid='dbfa18c3-a025-47b6-a9a0-be5ac02e8270'
>
> gsh 2% subject = group.toSubject();
>
> subject: id='dbfa18c3-a025-47b6-a9a0-be5ac02e8270' type='group' 
> source='g:gsa' name='test:testGroup'
>
> gsh 3% for (Object[] result : new 
> MembershipFinder().addSubject(subject).findMembershipsMembers()) 
> {System.out.println(result[1]);}
>
> Group[name=test:testGroup4,uuid=e705557b648d4c0ca3efc1705f98225d]
>
> Group[name=test:testGroup3,uuid=6f6c6b952dcd4b328d436219e9055a44]
>
> Group[name=test:testGroup5,uuid=8e3682d08e5f43c6ac2d265bcd8be093]
>
> gsh 4%
>
> 8.Run that in GSH in the WS, send me the results
>
> -----Original Message-----
> From: Steven Carmody 
> [mailto:]
> Sent: Thursday, August 10, 2017 2:26 PM
> To: Hyzer, Chris <>; Grouper-Users 
> <>
> Subject: Re: [grouper-users] web services, get groups, seems to be 
> returning a subset ?
>
> took some time to make sure this info is accurate --
>
> with the GUI I'm authenticating as myself; I'm in the wheel group; I
>
> select "Act as ADMIN".
>
> The application is authenticating to the web services endpoint as
>
> GrouperSystem.
>
> On 8/9/17 11:12 AM, Hyzer, Chris wrote:
>
>  > Is the authenticated user the same?  i.e. maybe in the UI you are a 
> wheel member and in the WS you are not?  Are you using actas in WS?  The 
> results should be the same :)
>
>  >
>
>  > -----Original Message-----
>
>  > From:  
> <mailto:> 
> [mailto:] On Behalf Of Steven Carmody
>
>  > Sent: Wednesday, August 09, 2017 11:07 AM
>
>  > To: Grouper-Users < 
> <mailto:>>
>
>  > Subject: [grouper-users] web services, get groups, seems to be 
> returning a subset ?
>
>  >
>
>  > Hi,
>
>  >
>
>  > If I use the ADMIN GUI, and Explore to a group, and click View Entity
>
>  > Details, and ask to "Show all groups where this entity is a member
>
>  > (DIRECT or INDIRECT)", I can see 8 groups in the list that are under the
>
>  > BROWN:SERVICES stem.
>
>  >
>
>  > However, if I use the WS getGroups method, I'm only returned five
>
>  > groups. I'm somewhat surprised, too, that the return set includes groups
>
>  > where my "member group" is both a direct and indirect member. There's no
>
>  > obvious differentiator between the ones that were included and the ones
>
>  > that weren't.
>
>  >
>
>  > When I invoke getGroups, I'm passing the "member group"s UUID value. I'm
>
>  > also passing a stemName ("BROWN:SERVICES"), and a stemScope
>
>  > ('ALL_IN_SUBTREE'), and a memberFilter ('All').
>
>  >
>
>  > Any thoughts or suggestions ?
>
>  >
>
>  > thanks !
>
>  >