Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

That is great Chad!  I added that to the GSH wiki.

https://spaces.internet2.edu/pages/viewpage.action?pageId=14517859

Rory, do you have a copy of the stacktrace that gave the original error?  
Please send it along if so.

Thanks
Chris

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Redman, Chad
Sent: Saturday, February 10, 2018 1:44 AM
To: Rory Larson 
<>;
 

Subject: [grouper-users] RE: How to delete direct memberships without 
touching subgroups and their members

Hi Rory,

The Group class has methods for getImmediateMembers() and 
getEffectiveMembers(), so the combination of those two would make it a 
straightforward task. Here are two sample scripts. Depending on your GSH 
version (original bsh or the newer groovy), you may need to fold the 
multi-line blocks into a single line.


# (1) Print tab-separated summary of all group members, and flags for direct, 
indirect, or both
# Depending on the results, you could use the data to create a scrutinized 
list of Ids to delete, then import it and delete in a loop

me = SubjectFinder.findByIdentifierAndSource("my-username", "pid", true);
session = GrouperSession.start(me);
// OR: session = GrouperSession.startRootSession(True)

group = GroupFinder.findByName(session, "tmp:my:group", true);

effectiveMembers = group.getEffectiveMembers();
immediateMembers = group.getImmediateMembers();

System.out.println(String.join("\t", "id", "name", "Effective", "Immediate"));

for (Member m: group.getMembers()) {
    System.out.print(m.getSubject().getId() + "\t" + m.getSubject().getName() 
+ "\t");
    System.out.print(effectiveMembers.contains(m).toString() + "\t");
    System.out.println(immediateMembers.contains(m).toString() + "\t");
}



# (2) Get the immediate and effective members for a specific source ("pid" in 
this example), intersect them to find the redundant ones
# This has a dryRun flag, so you can test first

sources = new HashSet<Source>()
sources.add(SourceManager.getInstance().getSource("pid"))

effectiveUsers = group.getEffectiveMembers(Group.getDefaultList(), sources, 
null)
immediateUsers = group.getImmediateMembers(Group.getDefaultList(), sources, 
null)

# use retainAll() to find the intersection; i.e., users both as effective and 
immediate member
immediateUsers.retainAll(effectiveUsers)

System.out.println("There are " + immediateUsers.size() + " users having both 
direct + indirect memberships");

dryRun = true

for (Member m: immediateUsers) {
    if (dryRun) {
        System.out.println("Ok to delete " + m.getSubject().getId());
    } else {
        System.out.println("Deleting " + m.getSubject().getId());
        group.deleteMember(m, false);
    }
}


Hope this helps!

Chad








-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Rory Larson
Sent: Friday, February 09, 2018 8:52 PM
To: 

Subject: [grouper-users] How to delete direct memberships without touching 
subgroups and their members

Hello,

I have a group with largely redundant membership.  It was originally created 
with direct memberships from one data source, and then given a few groups 
from another data source that had most of the same people, in a process 
intended to be a smooth transition.  Now I would like to remove all the old 
direct memberships from the group, leaving only the new subgroups with their 
members.

When I try this through the Grouper New UI, marking all direct members on the 
page for deletion, it grinds for a while, deletes a few members, and then 
crashes with a pink error message telling me to start over.  It works as 
advertised for the few it does delete, but since I'm dealing with a 
membership of over 7500, this route does not look promising.

I would like to handle this through gsh, but I'm having trouble figuring out 
how to filter.  The query I've been developing might look something like this:

$ for (mem : getMembers("my:group:name")) {System.out.println("deleting: " + 
mem.getName()); mem.delete();}

But I'm queasy about using this, because I'm not sure what all I'm deleting, 
and where.  I don't want to delete my subgroups, and I don't want to delete 
anybody inside those subgroups.  I tried testing with an if statement to 
check names against who shows up with direct and indirect memberships in the 
New UI, and was disappointed to discover that getMembers() returns both 
direct and indirect members.

Is there a method that will return only the direct members of a group, but 
not member groups?  Or is there a filter I could use to select only the ones 
I want through an if statement?

Thanks,
Rory