Grouper Users - Open Discussion List

["William G. Thompson, Jr." <>]

Grouper Friends,

In the next version of the Grouper Deployment Guide we'd like to add a
section dealing with the Grouper security model. This section will
describe the privileges associated with Grouper objects (folders,
groups, attributes) along with a strategy for managing those
privileges to achieve various access control goals within Grouper
itself. At a high level this is mostly about who has access to what
objects within Grouper, and how do we managed/audit/maintain those
privileges.

We're interested in distilling community practice into a TIER
recommended approach. This is similar to the approach we took with the
folder and groups section of the first version. We're seeking input
both from folks who already have a local security model/approach, and
from folks who have questions about how to achieve various access
control goals within Grouper.

If you have a long standing or a newish Grouper deployment, how are
you managing Grouper privileges? Have you adopted any organizing
principles to help maintain them? Running any scripts or Grouper rules
to enforce a security model? Adopted a naming convention for grouper
security groups? Doing any audit of grouper privileges?

Please feel free to share directly on this list or contact me directly
at 
.

Thanks,
Bill