Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Math in visualizer

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Math in visualizer

Chronological Thread 
  • From: "Black, Carey M." <>
  • To: " Mailing List" <>
  • Subject: RE: [grouper-users] Math in visualizer
  • Date: Thu, 27 Jun 2019 14:52:39 +0000
  • Arc-authentication-results: i=1; 1;spf=pass (sender ip is;dmarc=pass (p=none sp=none pct=100) action=none;dkim=pass (signature was verified);arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed;; s=testarcselector01; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4s2YITvfhphLVa/XbLYTBEzz2FBgO/hnud0vyTiFh8I=; b=RdrcTARtGo0Hw+F1dLQS4ZLtsbkpP1X7iZCNPn4quce4w41d0NH7Iaqrnk7Q6wd6a81wlLUks/3zxnkhbEa/7ojC1l/zk9wgtcSJeO8hL3Ipb/jeYD3QLqOPrjXzHkOI3Fvis9lWTVciFuwJN8kFCevA+N5xAA3vXuEal6fVsd0=
  • Arc-seal: i=1; a=rsa-sha256; s=testarcselector01;; cv=none; b=PhHUpnYKzvEpcnp6lemroMqnQKPqT5EfE2ddI/PY1VYniGZZhNqr9DRlMa5l2xVnnfH8tVAQZsh/4wON3k1IQsWq+gGG+WYWzYxn9mvmrRXVidKKvSMCWS9byyzXS6ZuxqvZruSHHNs7dQULTZqbNz8D8IA4o+LYBmL0G2aZd14=


RE: “add a feature to show which members are actually excluded by the complement.”  ß That is the intersection of the two groups that make up the complement.


Maybe you could create an intersection (composite) and add that as a member of the exclude group to get it into the graph.

( Waiting to see if someone thinks this will break grouper in the process. :) Hint. It works just fine. Thank you grouper “circular references are ok” magic! )


                Composite 1 = (Include - Exclude )

                Composite 2 = (Include {intersected with} Exclude)

                Exclude  is a list of:


                                + Composite 2

                Include is a list of:



I think that might get the info into the graph.


Ah… “Quick! To the 2.4 demo server Batman!”




Include has:


Exclude has:


So only “Carey Black (google)” is in both Include and Exclude.




Ok. Name the “Composite 1” and “Composite 2” better… “Excluded users from Include list” and I think you can already do what you want, whenever you want it. :)


Does not look like a feature request to me. :)



Carey Matthew


From: <> On Behalf Of Hyzer, Chris
Sent: Thursday, June 27, 2019 10:20 AM
To: Redman, Chad <>;
Subject: RE: [grouper-users] Math in visualizer


My own opinion is we are just discussing why this is.  I don’t think we need it in the graph since people can just subtract in their heads right?  😊  We have a lot in the graph right now and its going to get cluttered.  Unless people disagree…  😊


From: <> On Behalf Of Redman, Chad
Sent: Thursday, June 27, 2019 9:22 AM
Subject: RE: [grouper-users] Math in visualizer


Hmm, sounds like it would be useful to add a feature to show which members are actually excluded by the complement. And maybe another one to show which users are excluded because they aren't in the second factor of an intersect?


From: [] On Behalf Of Jeffrey Williams
Sent: Thursday, June 27, 2019 9:10 AM
To: Robert Bradley <>
Cc: Grouper-Users <>
Subject: Re: [grouper-users] Math in visualizer




| Maybe one of you deny’s are not in the allow’s?  So only one is
| subtracted?  Compare the subjectId of owner, and each factor to
| see for sure 😊

That was my guess as well, but Jason will have to comment on that
himself. :)


Correct me if I'm wrong, but I think the quickest way to find out is to change NextGenerationUsers' type of composite to an intersect(AND) and see how many members are both in allow and deny.  That will be your true operand to subtract from the NextGeneration_Users_allow.





Jeffrey Williams 

Identity Engineer
Identity & Access Services


Image removed by sender.

Archive powered by MHonArc 2.6.19.

Top of Page