Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

This is an interesting request for separation of duties.  It gets a little complicated though.  Someone could add a group to the group where the self is a member of the group being added.  Or an empty group could be added and then later the self could add self to the new empty group.  It would make things easier if the group did not allow groups to be added.  So do you want me to make a rule or hook that:

 

1. Vetoes if groups are added to group
2. Vetoes if self is added to group

 

Or do you want something else?  What version do you need this in and when do you need it?  I made a jira and cc’ed you.

 

Thanks

Chris

 

From: <> On Behalf Of Crawford, Jeffrey
Sent: Thursday, March 07, 2019 10:30 AM
To:
Subject: Re: [grouper-users] Veto or Prevent user from adding themselves to a group

 

It was pointed out to me that my question probably wasn’t specific enough 😊. So the following is the example of what we need:

 

So lets pretend Bob and Henry have been designated to manage access to a screen in a financial system. They are free to add people to view this screen about employees. Now one day Bob realizes that he needs access to this screen too. But management wants an error to show up if Bob adds himself to this screen access. Bob remembering that there is a policy that prevents him from adding himself now needs Henry to add Bob. That is fine because someone else added Bob.

 

Silly example I know but that is what is being asked.

 

Thanks

Jeffrey C

 

From: <> on behalf of "Crawford, Jeffrey" <>
Reply-To: "Crawford, Jeffrey" <>
Date: Wednesday, March 6, 2019 at 7:42 AM
To: "" <>
Subject: [grouper-users] Veto or Prevent user from adding themselves to a group

 

Hi,

 

Is there a way to allow a user to add members to a group except themselves? There is an application we are supposed to integrate with that has a policy that people must be added by someone else.

 

Thanks

Jeffrey