Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

With your version of the UI you need a rule in GSH.  IF you upgrade/patch you can do this via UI.

 

https://spaces.internet2.edu/display/Grouper/Grouper+rules+use+case+-+Inherited+privileges+on+groups

 

grouperSession = GrouperSession.startRootSession();

 

## this is the folder enclosing the groups

stemToAssign = StemFinder.findByName(grouperSession, "a:b:c");

 

## this is the group of admins

admins = GroupFinder.findByName(grouperSession, "penn:someFolder:security:someFolderAdmins");

 

## do you need “admin”, or “read,update”  ?

RuleApi.inheritGroupPrivileges(SubjectFinder.findRootSubject(), stemToAssign, Stem.Scope.SUB, admins.toSubject(), Privilege.getInstances("admin"));

 

RuleApi.runRulesForOwner(stemToAssign);

 

 

Thanks

Chris

 

From: [mailto:] On Behalf Of Julio Macavilca
Sent: Monday, March 26, 2018 12:15 PM
To: Siju Jacob <>
Cc: Mailing List <>; Omer Almatary <>; Nazeer Syed <>
Subject: Re: [grouper-users] admin users created in a group at higher level folder is not able to see the groups in lower level folder in the hierarchy

 

Are you saying the permissions weren't inherited, if so, I found this helpful:

https://spaces.internet2.edu/display/Grouper/Grouper+rules+privileges+inheritance+on+UI

 

Or you can also write a rule in gsh.

 

thanks,

Julio

 

On Mon, Mar 26, 2018 at 11:04 AM, Siju Jacob <> wrote:

Hi,

    I created a admin group as below and added few users to it.

       orgs:10014:ru-Newark Chancellor's Office_Admin

But these users are not able to see the groups within the subfolders inside this folder (orgs:10014).

 

Below is the subfolder which has 8 groups, which is not visible to the admin users who belong to ru-Newark Chancellor's Office_Admin.

orgs:10014:10056:ref.

 

I am sure, something is missed on my part while configuring this admin group.

 

Any advice or guidance would be greatly appreciated..!

Thanks,

Siju