Grouper Users - Open Discussion List

["Robinson, Justin S" <>]

Hi Josh,

There are probably other (possibly better) ways to achieve this - but one way is to use the RuleApi and GSH to inherit privileges. The example below should do it:

grouperSession = GrouperSession.startRootSession();

someStem = StemFinder.findByName(grouperSession, "stem:path");

webServiceClientUsers = GroupFinder.findByName(grouperSession, "etc:webServiceClientUser");

RuleApi.inheritGroupPrivileges(SubjectFinder.findRootSubject(), someStem, Stem.Scope.SUB, webServiceClientUsers.toSubject(), Privilege.getInstances("read"));

RuleApi.runRulesForOwner(someStem);

Thanks,

Justin Robinson

Indiana University

On Jul 26, 2018, at 12:42 PM, O'Dowd, Josh <> wrote:

Hi,

I am wondering if it is possible to give an etc:webServiceClientUsers group member READ(not ADMIN) privilege for ALL groups(including any new), instead of having to add that privilege to each group individually?  More of a global group READ privilege, similar to what the etc:sysadmingroup has with the ADMIN priv for all groups is what we are looking for.

Any help is much appreciated.

Thanks.
-Josh O’Dowd
University of Montana

Attachment: smime.p7s
Description: S/MIME cryptographic signature