Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Grouper Question

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Grouper Question


Chronological Thread 
  • From: "Black, Carey M." <>
  • To: "Hyzer, Chris" <>, Angel Fancher <>, "" <>
  • Subject: RE: [grouper-users] Grouper Question
  • Date: Fri, 13 Sep 2019 13:41:41 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=osu.edu; dmarc=pass action=none header.from=osu.edu; dkim=pass header.d=osu.edu; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HZj4aG+NL+UM8AcIyIfa3bVCLhJ2Y3L+4qQ8cT7vdno=; b=UHdym2cutLTAXF6Dd1Kn9+Gr6NpCRM/QsY7Xm3fd1aYTbRAy6ZxDvRAuo+L2aEw5rfJ6rmojiPzwp7JZsR0ndbN4smhlSt0yOJ4cr9yHDzYseRDM8OV4pwpIp27N6S7ngioLAd13gQ3MYsuegzsornHcpsSHEYE7Ils5KnTUmEQngHf09In4jnB/0el2yXrRz6yxg2n4escJ4JVOrEDiP/Z9AM3fydnR/JL6wcGQMgKNhbptTY7HbaBAVlp+KNvMEUvLibf+qF4CtHuTpeqN6dNE8K0sp7QCqnkfXKiye4YQ4/GxjC5z27s0YWmeF5K6Cu8XI4NoGlQ4sknmLB4VlQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YPUc4d6XAWqacttbCC2h93HLH5gx1P2IO7ko9GOairKph79bpDxhU97EEciAGBdhxtHXdPF4EMVUVZbZUZr3EfBL7WbrsZ621rsR/qdrkbIGea1BW6t0+FPM/t0WPJVGqgDVKBuUKQN/eQMJi2fHAp1d96VCaMftsWf0rDHoDdoRzufFVrFjfQ/QAEqo0OJBmyawwZlFjw4FrAA4lm0tsg+P9ju7tIsCOI3LEjr3KVlqA7v4aE5ltApJlYkCvCc1pFgBoFpjidYTuF2c1uRerVnj8HVl3ZAn7Bgf3T6iarRHQD3grKioQb1FIvz1hy/eRCbd+3rw7RRXIwk+6caTNg==

Angelique,

 

I don’t think I understand your concerns. What do you think will break?

 

“…and I am wondering how that will affect the folders and groups going forward? “

                To my knowledge it will not have any effect.

                I suspect the owner (display value) might be “odd”, but I would hope that would be ok too. In fact I would be a bit disappointed if the display string even changes. I would hope that enough data would be cached in the Member tables to still display something. But I have not tested that idea.

 

Do you have any existing examples currently?

Are you doing something “else” with your Subject API’s in the upgrade process?

 

FWIW: I have chosen to have a Subject source directly tied to our IDM system, and it’s primary identifier, to avoid this issue. ( Currently we do not “throw away” identities. )

 

 

As far as I know the only concern I would have would be about access controls to the folder.

                Until v2.3 patch (38?) the creator always got “admin” privileges directly assigned to them. ( In the patch Grouper stopped doing that if the creator was also in a group that had Admin.) However that “problem” would happen as soon as the individual ( assuming they were the only person who had admin to that folder ) left the organization. So that issue is not triggered by the Subject API not being able to resolve them.

 

I have not looked at the API for this feature before…

However a quick look…. Maybe this would work?

                Class edu.internet2.middleware.grouper.Stem

 

                Has a method:

                                public void setCreatorUuid(String creatorUUID) { . . . }

                                and

                                public void store() { . . . }

 

                So I would think that GSH ( or any other API ) could find the Stem, then call those two methods to alter the value.

                NOTE: UUID is likely the grouper ‘Member ID’ value that you see when you expand the “More” list on the member. ( But I am guessing at that. )

 

--

Carey Matthew

 

P.S. RE: “blind email” … Isn’t that what mailing lists were created for? 😊

P.S.S.  If you want to discuss more details off list, feel free to send directly to me.

 

P.S.S. I just saw that Chris also responded… So “What he said.” 😊 No wait.. I will reply to his email instead… ( copy and paste ensued…)

 

 

--

Carey Matthew

 

From: <> On Behalf Of Hyzer, Chris
Sent: Friday, September 13, 2019 9:38 AM
To: Angel Fancher <>;
Subject: RE: [grouper-users] Grouper Question

 

I think you will see their subject id if they are not resolvable…  right?  so you don’t need to worry about it, just do your upgrade.  If an error is thrown we can fix that.

 

If you want to do some sql you could change them…  otherwise theres not really a way to change the creator since the creator is the creator 😊

 

thanks

 

From: <> On Behalf Of Angel Fancher
Sent: Thursday, September 12, 2019 6:31 PM
To:
Subject: [grouper-users] Grouper Question

 

I am trying desperately to find the answer in the Grouper 2.4 and 2.2 documentation but I am coming up a blank. I seem to be going around in circles and wondered if you could direct me to the right area? 

 

In folders in Grouper, how can the creator be changed? In this instance, as we move to upgrade from 2.2 to 2.4 we have creators of groups that are no longer with the University and so no longer on LDAP and I am wondering how that will affect the folders and groups going forward? 

 

Sorry to send a  blind email, but I am getting desperate!!  We don't think there is a way in the UI. I wonder if there is a way with the API? 

 

--

Angelique Fancher

Identity and Access Management Systems Analyst

West Bank Office Building, 626-A

University of Minnesota

Minneapolis, MN 55414

612-301-9186




Archive powered by MHonArc 2.6.19.

Top of Page