Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Math in visualizer

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Math in visualizer

Chronological Thread 
  • From: "Jason B. Rappaport" <>
  • To: "" <>
  • Subject: RE: [grouper-users] Math in visualizer
  • Date: Thu, 27 Jun 2019 15:53:40 +0000
  • Arc-authentication-results: i=1; 1;spf=none;dmarc=none;dkim=none;arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed;; s=testarcselector01; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zUbLOdXggixD4uTppVpZqJqdwTFRCFVT/wD1ClUVLq4=; b=cVsyvez8/DJ5NKA5qAPXPUkgMi03jHTIkyQ9JtJzFSdt3i9QsDaU+vKR24nkbXbFddbcoT0qdYL5nbpZhezXESeybrACTWctVFRJHweHVofXLMPWqUKe0pMAX2es2KNeSfNJi4fD3YzE2344sZ/KcFMyuGJYmj4Bc/2yANzZL7M=
  • Arc-seal: i=1; a=rsa-sha256; s=testarcselector01;; cv=none; b=SGN1XhQ1rYiUP8kqWQIX7+du5ZEMsshuvRudErgYWE2BlXOKbgnnVMHON/vNcGOe4tuPDR3Nt/JfGJPehTtm99ih7fEf2fIcWqTYnRYMphK6YNZsHwgCY4yuyr2hI8272diiAphzFsRLEbm/swAIzLb9zT/+1xHifuDQ6iJSc2Q=

Thank you everyone for the feedback!


I created an intersection group of NextGeneration_Users_Allow and NextGenration_Users_Deny and found there is one member in that group….so the math does make sense when you do it correctly. 


Thanks again, Jay





Jason Rappaport

Identity and Access Management Analyst

Office of Information Technology


Office:  609-258-8464


From: <> On Behalf Of Redman, Chad
Sent: Thursday, June 27, 2019 9:22 AM
Subject: RE: [grouper-users] Math in visualizer


Hmm, sounds like it would be useful to add a feature to show which members are actually excluded by the complement. And maybe another one to show which users are excluded because they aren't in the second factor of an intersect?


From: [] On Behalf Of Jeffrey Williams
Sent: Thursday, June 27, 2019 9:10 AM
To: Robert Bradley <>
Cc: Grouper-Users <>
Subject: Re: [grouper-users] Math in visualizer




| Maybe one of you deny’s are not in the allow’s?  So only one is
| subtracted?  Compare the subjectId of owner, and each factor to
| see for sure 😊

That was my guess as well, but Jason will have to comment on that
himself. :)


Correct me if I'm wrong, but I think the quickest way to find out is to change NextGenerationUsers' type of composite to an intersect(AND) and see how many members are both in allow and deny.  That will be your true operand to subtract from the NextGeneration_Users_allow.





Jeffrey Williams 

Identity Engineer
Identity & Access Services


Image removed by sender.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Archive powered by MHonArc 2.6.19.

Top of Page