Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Grouper Question

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Grouper Question

Chronological Thread 
  • From: "Black, Carey M." <>
  • To: "Hyzer, Chris" <>, Angel Fancher <>, "" <>
  • Subject: RE: [grouper-users] Grouper Question
  • Date: Fri, 13 Sep 2019 13:41:41 +0000
  • Arc-authentication-results: i=1; 1; spf=pass; dmarc=pass action=none; dkim=pass; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed;; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HZj4aG+NL+UM8AcIyIfa3bVCLhJ2Y3L+4qQ8cT7vdno=; b=UHdym2cutLTAXF6Dd1Kn9+Gr6NpCRM/QsY7Xm3fd1aYTbRAy6ZxDvRAuo+L2aEw5rfJ6rmojiPzwp7JZsR0ndbN4smhlSt0yOJ4cr9yHDzYseRDM8OV4pwpIp27N6S7ngioLAd13gQ3MYsuegzsornHcpsSHEYE7Ils5KnTUmEQngHf09In4jnB/0el2yXrRz6yxg2n4escJ4JVOrEDiP/Z9AM3fydnR/JL6wcGQMgKNhbptTY7HbaBAVlp+KNvMEUvLibf+qF4CtHuTpeqN6dNE8K0sp7QCqnkfXKiye4YQ4/GxjC5z27s0YWmeF5K6Cu8XI4NoGlQ4sknmLB4VlQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901;; cv=none; b=YPUc4d6XAWqacttbCC2h93HLH5gx1P2IO7ko9GOairKph79bpDxhU97EEciAGBdhxtHXdPF4EMVUVZbZUZr3EfBL7WbrsZ621rsR/qdrkbIGea1BW6t0+FPM/t0WPJVGqgDVKBuUKQN/eQMJi2fHAp1d96VCaMftsWf0rDHoDdoRzufFVrFjfQ/QAEqo0OJBmyawwZlFjw4FrAA4lm0tsg+P9ju7tIsCOI3LEjr3KVlqA7v4aE5ltApJlYkCvCc1pFgBoFpjidYTuF2c1uRerVnj8HVl3ZAn7Bgf3T6iarRHQD3grKioQb1FIvz1hy/eRCbd+3rw7RRXIwk+6caTNg==



I don’t think I understand your concerns. What do you think will break?


“…and I am wondering how that will affect the folders and groups going forward? “

                To my knowledge it will not have any effect.

                I suspect the owner (display value) might be “odd”, but I would hope that would be ok too. In fact I would be a bit disappointed if the display string even changes. I would hope that enough data would be cached in the Member tables to still display something. But I have not tested that idea.


Do you have any existing examples currently?

Are you doing something “else” with your Subject API’s in the upgrade process?


FWIW: I have chosen to have a Subject source directly tied to our IDM system, and it’s primary identifier, to avoid this issue. ( Currently we do not “throw away” identities. )



As far as I know the only concern I would have would be about access controls to the folder.

                Until v2.3 patch (38?) the creator always got “admin” privileges directly assigned to them. ( In the patch Grouper stopped doing that if the creator was also in a group that had Admin.) However that “problem” would happen as soon as the individual ( assuming they were the only person who had admin to that folder ) left the organization. So that issue is not triggered by the Subject API not being able to resolve them.


I have not looked at the API for this feature before…

However a quick look…. Maybe this would work?

                Class edu.internet2.middleware.grouper.Stem


                Has a method:

                                public void setCreatorUuid(String creatorUUID) { . . . }


                                public void store() { . . . }


                So I would think that GSH ( or any other API ) could find the Stem, then call those two methods to alter the value.

                NOTE: UUID is likely the grouper ‘Member ID’ value that you see when you expand the “More” list on the member. ( But I am guessing at that. )



Carey Matthew


P.S. RE: “blind email” … Isn’t that what mailing lists were created for? 😊

P.S.S.  If you want to discuss more details off list, feel free to send directly to me.


P.S.S. I just saw that Chris also responded… So “What he said.” 😊 No wait.. I will reply to his email instead… ( copy and paste ensued…)




Carey Matthew


From: <> On Behalf Of Hyzer, Chris
Sent: Friday, September 13, 2019 9:38 AM
To: Angel Fancher <>;
Subject: RE: [grouper-users] Grouper Question


I think you will see their subject id if they are not resolvable…  right?  so you don’t need to worry about it, just do your upgrade.  If an error is thrown we can fix that.


If you want to do some sql you could change them…  otherwise theres not really a way to change the creator since the creator is the creator 😊




From: <> On Behalf Of Angel Fancher
Sent: Thursday, September 12, 2019 6:31 PM
Subject: [grouper-users] Grouper Question


I am trying desperately to find the answer in the Grouper 2.4 and 2.2 documentation but I am coming up a blank. I seem to be going around in circles and wondered if you could direct me to the right area? 


In folders in Grouper, how can the creator be changed? In this instance, as we move to upgrade from 2.2 to 2.4 we have creators of groups that are no longer with the University and so no longer on LDAP and I am wondering how that will affect the folders and groups going forward? 


Sorry to send a  blind email, but I am getting desperate!!  We don't think there is a way in the UI. I wonder if there is a way with the API? 



Angelique Fancher

Identity and Access Management Systems Analyst

West Bank Office Building, 626-A

University of Minnesota

Minneapolis, MN 55414


Archive powered by MHonArc 2.6.19.

Top of Page