Grouper Users - Open Discussion List

[Andrew Morgan <>]

On Tue, 10 Apr 2018, Jeffrey Williams wrote:

> I'm working on a permissions model for a group of users to allow them to
> use a group without seeing its membership.
>
> When I apply the view permission for a group, the target user can see that
> the group exists, can't see the membership, but also cannot add it to
> groups of their own for use.
>
> To contrast, a user with read permissions can add the group as a member of
> target group.  The user with view permissions of that same target group can
> see the member group, but not the resulting indirect member names(I think
> only blank rows).
>
> Should users have read permissions in order to add a group as a member?  Is
> there something I can configure or have misconfigured to adjust that
> behavior?

If your users need to add group FOO to one of their groups, then they need 
READ privileges on group FOO.

If a person with VIEW privileges were able to add group FOO to their own 
group, they could discover the membership of group FOO.

        Andy