Grouper Users - Open Discussion List

["Black, Carey M." <>]

All,

I am still kicking the UI tires and I found something curious.

Open a group
"More actions" (button/menu)
 -->   "Export Members"
           If I export a group it fails ... sometimes.

Using a group with about 310 members. (If it matters: All direct subject 
members, no groups as members)
        If I export the group with "only member IDs" then it works.
                I get a CSV with these columns:
                        sourceId,entityId

        If I export the group with "All member data" then it works.
                I get a CSV with these columns:
                        
sourceId,screenLabel,entityId,name,description,success,errorMessage

Using a group with about 764 members. (If it matters: All direct subject 
members, no groups as members)
        If I export the group with "only member IDs" then it works.
        If I export the group with "All member data" then it works.



Using a group with about 12.5k members. (If it matters: All direct subject 
members, no groups as members)
or
Using a group with about 33k members. (If it matters: All direct subject 
members, no groups as members)

        If I export the group with "only member IDs" then it works. ( after 
about 7 seconds)

        If I export the group with " All member data" then it fails. (after 
about 60 seconds [ measured several times ])
                The UI session ends on a URL like this:
                
https://....osu.edu/.../grouperUi/app/UiV2GroupImport.groupExportSubmit/groupId%3decfbfc3dd4b848209e52d2c600740414/all/groupExportAll_Group.csv
        With this page:
        "
        Service Unavailable
        The server is temporarily unable to service your request due to 
maintenance downtime or capacity problems. Please try again later.
        "

        Tomcat did not fail. ( I can go back to the root of the site ( or use 
the back button) and my session is still good, and everything works.)
                I find nothing in the UI Error.log. (and the debug log is 
empty)
        




So it seems (on the surface) like a scaling issue with the UI export 
function. But it could be much more complicated, or simpler, than that too. ( 
Shrug )

Any ideas what to look at to fix this?
        Log level suggestions?
        Any config suggestions? ( a timeout setting somewhere? )
        Is the Subject API being called with the "All member data" option or 
are more grouper RDMBS data columns being returned?


Also:
Any ideas about how to HIDE this option?
        Is there a Grouper UI ACL to restrict access to export members?
        Is there a Grouper UI ACL to restrict access to *import members*?
        Is there a Grouper UI ACL to restrict access to *Remove all members*?
                I could hack at the JSP to remove it, but it might be nice 
for some users and dangerous in the hand of others. :) [ So... ACL's to 
grant/revoke would be nice....]
                Maybe "Admin" grants these? ( It is hard to test with Shib in 
front of the UI.  I kind of need to "step down" to a lesser access to test

-- 
Carey Matthew