Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

Chad,

 

I fixed this and another attestation issue in these two patches, please try them out.

 

v2.3.0 api patch 86

v2.3.0 ui patch 34

https://bugs.internet2.edu/jira/browse/GRP-1635

 

The other issue had to do with removing attestations from objects.

 

https://bugs.internet2.edu/jira/browse/GRP-1634

 

From what I could tell, these are what the attestation attributes look like (below).  The patch will detect this situation when clicking on a group/folder attestation, or when daemon runs, and adjust it.  This is shown in the unit test:

 

https://github.com/Internet2/grouper/commit/7b7ed9cabb2756e0b0b49b6bfb2f3d3b8328598d#diff-e8054191d40e625ab76a89aba4db26d7

 

So if you want to try those patches and run the attestation daemon, things should be fixed.  If not, please let me know.  Btw, the direct assignment for a non folder assignment should be true.  Can you change those?  J  You can do this in bulk with a SQL -> GSH script or just a SQL update statement or just a GSH Java loop.  Ok?  I can help you with one of those if you like…

 

Folder (pre patch):

 

 

Group inherited pre patch:

 

 

Group direct assign pre patch:

 

 

Folder post patch:

 

Inherited group post patch:

 

 

Direct group post patch:

 

 

 

 

 

From: Redman, Chad [mailto:]
Sent: Tuesday, November 21, 2017 12:35 PM
To: Hyzer, Chris <>; Mailing List <>
Subject: RE: grouper attestation patches released

 

Hi Chris,

 

After upgrading to patch 81 (actually 84), existing attestations directly on groups show up as not being configured. From what I have traced so far, the value for attestationDirectAssignment is set to false. Maybe this should be true? If I change it to true, the attestation shows up. We don't have any folder attestation set -- we're slowly rolling this out so there are only a few specific groups with attestation.

 

We already need to run gsh to auto-create the new attestation attributes after patching, so if there is some extra step to batch fix an attribute, it's not a big deal.

 

Thanks,

Chad

 

 

 

 

 

From: [] On Behalf Of Hyzer, Chris
Sent: Monday, October 30, 2017 1:52 AM
To: Mailing List <>
Subject: [grouper-users] grouper attestation patches released

 

“Grouper attestation” is having grouper remind the group owners to review ad hoc group memberships on a periodic basis.

 

This has been in Grouper for a few months, now here are some updates and UI improvements.

 

This is in 2.3.0 API patch #81 and 2.3.0 UI patch #33.

 

Here are the docs:

 

Main: https://spaces.internet2.edu/display/Grouper/Grouper+attestation

• Grouper attestation audit log
• Grouper attestation edit settings
• Grouper attestation folder level folders and groups with settings
• Grouper attestation folder level groups that need attestation
• Grouper attestation global folders and groups with settings
• Grouper attestation global groups that need attestation
• Grouper attestation testing
• Grouper attestation view settings

 

 

Let me know any feedback.

 

Thanks to Vivek for his help with this.

 

Thanks

Chris