Skip to end of metadata
Go to start of metadata

Release Notes for Grouper 2.3

Grouper v2.3.0 includes 25 fixes and improvements over v2.2.2. See the full list.

 

New Features in Grouper 2.3.0

PSPNG

Provisioning Service Provider Next Generation (PSPNG) implementation addresses performance problems and configuration complexity of the Provisioning Service Provider (PSP)

Loader improvements

Grouper loader improvements: scheduling configuration stored in database facilitates high-availability changes to loader config files do not require restarting the loader, handling unresolvable subjects

Web Service operationsNew Web Service operations for attribute definitions, actions, and messaging
Grouper messaging

Grouper messaging system and WS with integration to the change log and ESB

UI screensUI screens for attribute definitions and inherited privileges
Export to GSH

Export Grouper objects to a Grouper Shell (GSH) script

Folder privilegesRefactor folder privileges to be “admin” and “create” instead of “stem” and “create”.  See the glossary for updated privileges and definitions.

 

v2.3.0 patches

Grouper patching instructions (how to install patches with the Grouper installer)

note: if a java file is included in a patch, then all associated classfiles are there too

Patch

Description

Files affected

grouper_v2_3_0_api_patch_0

GRP-1278: deadlock in grouper on upgrade (and maybe other times)

classes/edu/internet2/middleware/grouper/attr/assign/AttributeAssignBaseDelegate.java
classes/edu/internet2/middleware/grouper/util/GrouperUtil.java
classes/edu/internet2/middleware/grouper/FieldFinder.java

grouper_v2_3_0_api_patch_1

GRP-1287: obliterateStem and point in time

classes/edu/internet2/middleware/grouper/app/gsh/obliterateStem.java

grouper_v2_3_0_api_patch_2

GRP-1288: allow grouper config overlays to be able to easily refer to other properties in the same config file like the UI

GRP-1289: warning on new mysql driver and no ssl config in the connect url

GRP-1290: built in stem for legacy attributes should use the root stem for built in objects

classes/edu/internet2/middleware/grouperClient/util/GcElUtilsSafe.java
classes/edu/internet2/middleware/grouperClient/config/ConfigPropertiesCascadeBase.java
classes/grouper.hibernate.base.properties
classes/grouper.base.properties

grouper_v2_3_0_api_patch_3

GRP-1299: Set transaction isolation level to read committed

classes/grouper.hibernate.base.properties

grouper_v2_3_0_api_patch_4

GRP-1304: delete membership from UI has major performance problem

classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3MembershipDAO.java

grouper_v2_3_0_api_patch_5

GRP-1308: grouper_ddl is slow due to selecting * from every table/view

classes/edu/internet2/middleware/grouper/ddl/GrouperDdlUtils.java

grouper_v2_3_0_api_patch_6

GRP-1309: log4j has a potential memory leak

lib/log4j.jar
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java

grouper_v2_3_0_api_patch_7

GRP-1311: commons-lang has a potential memory leak

lib/commons-lang.jar
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java

grouper_v2_3_0_api_patch_8

GRP-1317: attributeDefSave web service doesnt work for soap

classes/edu/internet2/middleware/grouper/util/GrouperUtil.java
classes/edu/internet2/middleware/grouper/util/ChangeToVersionCustomizable.java

grouper_v2_3_0_api_patch_9

GRP-1319: Use database metadata to see if a table or view exists

classes/edu/internet2/middleware/grouper/ddl/GrouperDdl.java
classes/edu/internet2/middleware/grouper/ddl/GrouperDdlUtils.java

classes/edu/internet2/middleware/grouper/ddl/GrouperDdlUtilsTest.java

grouper_v2_3_0_api_patch_10

GRP-1323: null pointer exception with inherited rule privilege and EL then clause

classes/edu/internet2/middleware/grouper/rules/RuleFinder.java

grouper_v2_3_0_api_patch_11

GRP-1313: potential ws/ui memory leaks with threadlocals

classes/edu/internet2/middleware/grouper/j2ee/ServletContextUtils.java
classes/edu/internet2/middleware/grouper/j2ee/ServletRequestUtils.java
classes/edu/internet2/middleware/grouper/util/GrouperThreadLocalState.java

grouper_v2_3_0_api_patch_12

GRP-1327: Handle case issue between subject source and loader source

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java

grouper_v2_3_0_api_patch_13

GRP-1328: threadlocal clearing issue with Crypto

classes/edu/internet2/middleware/grouper/util/GrouperThreadLocalState.java

grouper_v2_3_0_api_patch_14

GRP-1138: add import / export auditing

classes/edu/internet2/middleware/grouper/audit/AuditTypeBuiltin.java

grouper_v2_3_0_api_patch_15

GRP-1320: show folders in new UI user should see

classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/privs/PrivilegeHelper.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3StemDAO.java

grouper_v2_3_0_api_patch_16

GRP-1303: null pointer exception in loader with default source id

classes/edu/internet2/middleware/grouper/app/loader/db/GrouperLoaderResultset.java

grouper_v2_3_0_api_patch_17

GRP-1343: Change log error when unassigning type and deleting type together

classes/edu/internet2/middleware/grouper/changeLog/ChangeLogTempToEntity.java

grouper_v2_3_0_api_patch_18

GRP-1352: GroupUniqueExtensionHook doesn't work when moving a group

classes/edu/internet2/middleware/grouper/hooks/examples/GroupUniqueExtensionHook.java

grouper_v2_3_0_api_patch_19

GRP-1351: Failures in findAllChildStems

classes/edu/internet2/middleware/grouper/validator/DeleteStemValidator.java
classes/edu/internet2/middleware/grouper/Stem.java
classes/edu/internet2/middleware/grouper/internal/dao/StemDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3StemDAO.java

grouper_v2_3_0_api_patch_20

GRP-1353: external user find create delete web services

classes/edu/internet2/middleware/grouper/externalSubjects/ExternalSubjectSave.java
classes/edu/internet2/middleware/grouper/externalSubjects/ExternalSubject.java

grouper_v2_3_0_api_patch_21

GRP-1358: grouper config should use root stem for built in objects for all configs that need it

classes/grouper.base.properties

grouper_v2_3_0_api_patch_22

GRP-1365: loader threads can cause database pool timeout errors

classes/edu/internet2/middleware/grouper/app/loader/db/GrouperLoaderDb.java
classes/grouper-loader.base.properties

grouper_v2_3_0_api_patch_23

GRP-1367: find bad memberships daemon

classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/misc/FindBadMembershipsDaemon.java
classes/grouper-loader.base.properties
classes/edu/internet2/middleware/grouper/j2ee/status/DiagnosticType.java

grouper_v2_3_0_api_patch_24

GRP-1368: TIER instrumentation

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoader.java
classes/edu/internet2/middleware/grouper/instrumentation/TierDiscovery.java
classes/edu/internet2/middleware/grouper/instrumentation/TierInstrumentationDaemon.java
classes/grouper.base.properties
classes/grouper-loader.base.properties

grouper_v2_3_0_api_patch_25

GRP-1368: TIER instrumentation (fix)

classes/edu/internet2/middleware/grouper/instrumentation/TierInstrumentationDaemon.java

grouper_v2_3_0_api_patch_26

GRP-1381: Use member table subject identifier in loader jobs to improve performance

classes/edu/internet2/middleware/grouper/app/loader/LoaderMemberWrapper.java
classes/edu/internet2/middleware/grouper/app/loader/db/GrouperLoaderResultset.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java

grouper_v2_3_0_api_patch_27

GRP-1382: Add idIndex to Changelog Entries or PIT Group

classes/edu/internet2/middleware/grouper/Group.java
classes/edu/internet2/middleware/grouper/changeLog/ChangeLogTypeBuiltin.java
classes/edu/internet2/middleware/grouper/changeLog/ChangeLogLabels.java

grouper_v2_3_0_api_patch_28

GRP-1390: esb messaging does not send a timestamp

classes/edu/internet2/middleware/grouper/changeLog/esb/consumer/EsbConsumer.java
classes/edu/internet2/middleware/grouper/changeLog/esb/consumer/EsbEvent.java

grouper_v2_3_0_api_patch_29

GRP-1395: Change log improvements

classes/grouper-loader.base.properties
classes/edu/internet2/middleware/grouper/changeLog/ChangeLogEntry.java
classes/edu/internet2/middleware/grouper/j2ee/status/DiagnosticLoaderJobTest.java
classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/changeLog/ChangeLogHelper.java
classes/edu/internet2/middleware/grouper/changeLog/ChangeLogTempToEntity.java

grouper_v2_3_0_api_patch_30

GRP-1365: loader threads can cause database pool timeout errors

classes/grouper.hibernate.base.properties

grouper_v2_3_0_api_patch_31

GRP-1412: export to gsh gives exception

classes/edu/internet2/middleware/grouper/xml/export/XmlExportMembership.java

grouper_v2_3_0_api_patch_32

GRP-1413: GroupSave with uuid and no name does not work for new uuids

classes/edu/internet2/middleware/grouper/attr/AttributeDefNameSave.java
classes/edu/internet2/middleware/grouper/StemSave.java
classes/edu/internet2/middleware/grouper/externalSubjects/ExternalSubjectSave.java
classes/edu/internet2/middleware/grouper/attr/AttributeDefSave.java
classes/edu/internet2/middleware/grouper/GroupSave.java

grouper_v2_3_0_api_patch_33

GRP-1411: Generic error message when attempting to delete group that is part of a composite group

classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3GroupDAO.java

grouper_v2_3_0_api_patch_34

GRP-1423: My memberships tab shows your memberships without taking into account security

classes/edu/internet2/middleware/grouper/privs/PrivilegeHelper.java

grouper_v2_3_0_api_patch_35

GRP-1417: migrate from grouper.ehcache.xml to hierarchical properties configuration

classes/ehcache.example.xml
classes/ehcache.xml
classes/grouper.cache.base.properties
classes/grouper.cache.properties
classes/edu/internet2/middleware/grouper/cfg/GrouperCacheConfig.java
classes/edu/internet2/middleware/grouper/cache/EhcacheController.java
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java 

grouper_v2_3_0_api_patch_36

GRP-1433: json in REST input disallows whitespace at end

classes/edu/internet2/middleware/grouper/util/GrouperUtil.java

grouper_v2_3_0_api_patch_37

GRP-1434: external subject WS does not save institution

classes/edu/internet2/middleware/grouper/externalSubjects/ExternalSubjectSave.java

grouper_v2_3_0_api_patch_38

GRP-1446: performance of the Trace Privileges function

classes/edu/internet2/middleware/grouper/attr/finder/AttributeDefNameFinder.java
classes/edu/internet2/middleware/grouper/attr/finder/AttributeDefFinder.java
classes/edu/internet2/middleware/grouper/GroupFinder.java
classes/edu/internet2/middleware/grouper/permissions/PermissionFinder.java
classes/edu/internet2/middleware/grouper/StemFinder.java

grouper_v2_3_0_api_patch_39

GRP-1439: remove records with a max number and loop so it doesnt fail

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java
classes/edu/internet2/middleware/grouper/hibernate/ByHqlStatic.java
classes/edu/internet2/middleware/grouper/hibernate/ByHql.java
classes/edu/internet2/middleware/grouper/hibernate/HibUtils.java

grouper_v2_3_0_api_patch_40

GRP-1454: migrate from sources.xml to hierarchical properties configuration

GRP-1452: regex replace in subject source can cause issues if subject id has dollar sign

lib/grouper/commons-digester.jar
classes/edu/internet2/middleware/subject/provider/JNDISourceAdapterLegacy.java
classes/edu/internet2/middleware/grouper/GrouperSourceAdapter.java
classes/edu/internet2/middleware/grouper/subj/InternalSourceAdapter.java
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java
classes/edu/internet2/middleware/subject/config/SubjectConfig.java
classes/edu/internet2/middleware/subject/provider/LdapSourceAdapter.java
classes/subject.base.properties
classes/edu/internet2/middleware/subject/provider/JDBCSourceAdapter.java
classes/edu/internet2/middleware/subject/provider/NullSourceAdapter.java
classes/edu/internet2/middleware/subject/provider/SourceManager.java

grouper_v2_3_0_api_patch_41

GRP-1455 grouper versions do not match - GrouperVersion.class: 2.4.0 - greater than grouper.version.properties: 2.3.0
GRP-1451: if the subject id attribute does not exist for a record in an ldap loader job, give descriptive exception

classes/edu/internet2/middleware/grouper/misc/GrouperVersion.java
classes/edu/internet2/middleware/grouper/app/loader/db/GrouperLoaderResultset.java

grouper_v2_3_0_api_patch_42

GRP-1462: cannot delete group

classes/edu/internet2/middleware/grouper/hibernate/ByHql.java
classes/edu/internet2/middleware/grouper/hibernate/ByHqlStatic.java

grouper_v2_3_0_api_patch_43

GRP-1420: Member removal from group shows recent activity as GrouperSystem

classes/edu/internet2/middleware/grouper/hibernate/GrouperContext.java

grouper_v2_3_0_api_patch_44

GRP-1441: understanding diagnostic servlet output for loader jobs

classes/edu/internet2/middleware/grouper/j2ee/status/GrouperStatusServlet.java

grouper_v2_3_0_api_patch_45

GRP-1460: grouperLoaderAndGroups doesn't work for sql jobs

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderJob.java

grouper_v2_3_0_api_patch_46

GRP-1468: commons digester doesnt work

lib/grouper/commons-digester.jar

grouper_v2_3_0_api_patch_47

GRP-1469: grouper check config is wrong for new digester jar

classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java

grouper_v2_3_0_api_patch_48

GRP-1470: grouper subject api diagnostics

classes/edu/internet2/middleware/grouper/subj/SubjectHelper.java
classes/edu/internet2/middleware/grouper/SubjectFinder.java

grouper_v2_3_0_api_patch_49

GRP-1472: readonly wheel group does not work on menu on ui

classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3StemDAO.java
classes/edu/internet2/middleware/grouper/privs/PrivilegeHelper.java
classes/edu/internet2/middleware/grouper/privs/WheelNamingResolver.java
classes/edu/internet2/middleware/grouper/privs/WheelAttrDefResolver.java

grouper_v2_3_0_api_patch_50

GRP-1471: LDAP loader property for searchResultHandlers

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderConfig.java
classes/edu/internet2/middleware/grouper/ldap/LdapSession.java
classes/grouper-loader.base.properties
classes/edu/internet2/middleware/grouper/ldap/handler/RangeSearchResultHandler.java
classes/edu/internet2/middleware/grouper/app/loader/ldap/GrouperLoaderLdapServer.java

grouper_v2_3_0_api_patch_51

GRP-1473: add more detail to subject.base.properties

classes/subject.base.properties

grouper_v2_3_0_api_patch_52

GRP-1475: Delete loader jobs when loader group is deleted

classes/edu/internet2/middleware/grouper/attr/assign/AttributeAssign.java

grouper_v2_3_0_api_patch_53

GRP-1445: Grouper loader real time updates - change log table for SQL jobs

classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3DAO.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalJob.java

grouper_v2_3_0_api_patch_54

GRP-1476: Real time loader mysql issues

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalJob.java

grouper_v2_3_0_api_patch_55

GRP-1477: Reduce error logging when code fails in threads that would be retried out of threads

classes/edu/internet2/middleware/grouper/util/GrouperUtil.java
classes/edu/internet2/middleware/grouper/misc/AddMissingGroupSets.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalJob.java
classes/edu/internet2/middleware/grouper/misc/SyncStemSets.java
classes/edu/internet2/middleware/grouper/util/GrouperCallable.java
classes/edu/internet2/middleware/grouper/misc/MigrateLegacyAttributes.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java
classes/edu/internet2/middleware/grouper/misc/GrouperStartup.java
classes/edu/internet2/middleware/grouper/misc/SyncPITTables.java

grouper_v2_3_0_api_patch_56

GRP-1492: multiple nodes loader - needs to check if job is still running

classes/grouper-loader.base.properties
classes/edu/internet2/middleware/grouper/misc/FindBadMembershipsDaemon.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoader.java
classes/edu/internet2/middleware/grouper/instrumentation/TierInstrumentationDaemon.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalJob.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderJob.java

grouper_v2_3_0_api_patch_57

GRP-1487: grouperLoader view job in the UI

classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java
lib/commons-lang3-3.5.jar
lib/cron-parser-core-2.9.jar
lib/joda-time-2.9.7.jar

grouper_v2_3_0_api_patch_58

GRP-1502: deleteGroupsIfNotUsed throws NPE in loader job

classes/edu/internet2/middleware/grouper/hooks/examples/GroupTypeTupleIncludeExcludeHook.java

grouper_v2_3_0_api_patch_59

GRP-1490: memory leak closing inputStreams

classes/edu/internet2/middleware/grouperClient/config/ConfigPropertiesCascadeBase.java
classes/edu/internet2/middleware/grouper/esb/listener/EsbHttpHandler.java

grouper_v2_3_0_api_patch_60

GRP-1507: null pointer on startup with wheel group

classes/edu/internet2/middleware/grouper/privs/WheelNamingResolver.java
classes/edu/internet2/middleware/grouper/privs/WheelCache.java

grouper_v2_3_0_api_patch_61

GRP-1514: null pointer in inherited privileges and rules

classes/edu/internet2/middleware/grouper/rules/RuleFinder.java

grouper_v2_3_0_api_patch_62

GRP-1521: Instrumentation counts

classes/edu/internet2/middleware/grouper/Group.java
classes/edu/internet2/middleware/grouper/Membership.java
classes/edu/internet2/middleware/grouper/instrumentation/TierInstrumentationDaemon.java
classes/grouper-loader.base.properties
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataInstance.java
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataInstanceFinder.java
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataCounts.java
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataUtils.java
classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoader.java
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataInstanceCounts.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java
classes/edu/internet2/middleware/grouper/Stem.java
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataBuiltinTypes.java
classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationThread.java
classes/edu/internet2/middleware/grouper/util/GrouperUtilElSafe.java

grouper_v2_3_0_api_patch_63

GRP-1532: upgrade vt-ldap due to security issue

classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java
lib/grouper/vt-ldap.jar

grouper_v2_3_0_api_patch_64

Note, after installing this you should run from gsh: loaderRunOneJob( "OTHER_JOB_attestationDaemon" );

GRP-1538: attestation

classes/grouper-loader.base.properties
classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/audit/AuditTypeBuiltin.java
classes/edu/internet2/middleware/grouper/app/loader/OtherJobBase.java
classes/edu/internet2/middleware/grouper/attr/assign/AttributeAssignBaseDelegate.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java
classes/edu/internet2/middleware/grouper/app/attestation/GrouperAttestationJob.java

grouper_v2_3_0_api_patch_65

GRP-1540: pspng not starting due to grouper session and thread

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java

grouper_v2_3_0_api_patch_66

GRP-1543: Add instrumentation thread to grouperWs

classes/edu/internet2/middleware/grouper/instrumentation/InstrumentationDataBuiltinTypes.java

grouper_v2_3_0_api_patch_67

GRP-1547: group name hooks not registered in GSH, but are registered in WS and UI

classes/edu/internet2/middleware/grouper/hooks/logic/GrouperHooksUtils.java

grouper_v2_3_0_api_patch_68

GRP-1565: usdu will not remove memberships of unresolvables if the membership has a start or end date

classes/edu/internet2/middleware/grouper/app/usdu/USDU.java

grouper_v2_3_0_api_patch_69

GRP-1560: IncludeExclude requires requireGroups.use to be installed but fails to do the install

classes/edu/internet2/middleware/grouper/hooks/examples/GroupTypeTupleIncludeExcludeHook.java

grouper_v2_3_0_api_patch_70

GRP-1566: grouper loader ui overall

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java

grouper_v2_3_0_api_patch_71

GRP-1569: priority in loader job has issue

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderJob.java

grouper_v2_3_0_api_patch_72

GRP-1553: Improve GSH

classes/edu/internet2/middleware/grouper/app/gsh/findSubject.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlUpdateFromFile.java
classes/groovysh.profile
classes/edu/internet2/middleware/grouper/app/gsh/StemHelper.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlFromFile.java
classes/edu/internet2/middleware/grouper/app/gsh/groupAddType.java
classes/edu/internet2/middleware/grouper/app/gsh/hasMember.java
classes/edu/internet2/middleware/grouper/app/gsh/groupHasType.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlUpdateFromString.java
classes/edu/internet2/middleware/grouper/app/gsh/typeAdd.java
classes/edu/internet2/middleware/grouper/app/gsh/setStemAttr.java
classes/edu/internet2/middleware/grouper/app/gsh/p.java
classes/edu/internet2/middleware/grouper/app/gsh/stemSave2.java
classes/edu/internet2/middleware/grouper/app/gsh/loaderDryRunOneJob.java
classes/edu/internet2/middleware/grouper/app/gsh/transactionCommit.java
classes/edu/internet2/middleware/grouper/app/gsh/registryInstall.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlFromString.java
classes/edu/internet2/middleware/grouper/app/gsh/resetRegistry.java
classes/edu/internet2/middleware/grouper/app/gsh/transactionRollback.java
classes/edu/internet2/middleware/grouper/app/gsh/delComposite.java
lib/grouper/groovy-all-2.4.11.jar
classes/edu/internet2/middleware/grouper/app/gsh/usdu.java
classes/edu/internet2/middleware/grouper/app/gsh/setGroupAttr.java
classes/edu/internet2/middleware/grouper/app/gsh/typeDel.java
classes/edu/internet2/middleware/grouper/app/gsh/typeAddList.java
classes/edu/internet2/middleware/grouper/app/gsh/transactionStart.java
classes/edu/internet2/middleware/grouper/app/gsh/findBadMemberships.java
classes/edu/internet2/middleware/grouper/app/gsh/usduBySource.java
classes/edu/internet2/middleware/grouper/app/gsh/getStems.java
classes/edu/internet2/middleware/grouper/app/gsh/delStem.java
classes/edu/internet2/middleware/grouper/app/gsh/typeDelField.java
classes/edu/internet2/middleware/grouper/app/gsh/getSources.java
classes/edu/internet2/middleware/grouper/app/gsh/typeGetFields.java
classes/edu/internet2/middleware/grouper/app/gsh/getGroupAttr.java
classes/edu/internet2/middleware/grouper/app/gsh/delMember.java
classes/edu/internet2/middleware/grouper/app/gsh/hasPriv.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlToString.java
classes/edu/internet2/middleware/grouper/app/gsh/transactionEnd.java
classes/edu/internet2/middleware/grouper/app/gsh/version.java
classes/edu/internet2/middleware/grouper/app/gsh/assertTrue.java
lib/grouper/jline-2.12.jar
classes/edu/internet2/middleware/grouper/app/gsh/revokePriv.java
classes/edu/internet2/middleware/grouper/app/gsh/usduByMember.java
classes/edu/internet2/middleware/grouper/app/gsh/typeFind.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlUpdateFromURL.java
classes/edu/internet2/middleware/grouper/app/gsh/addMember.java
classes/edu/internet2/middleware/grouper/app/gsh/GrouperShell.java
classes/edu/internet2/middleware/grouper/app/gsh/addRootStem.java
classes/edu/internet2/middleware/grouper/app/gsh/sqlRun.java
classes/edu/internet2/middleware/grouper/app/gsh/addGroup.java
classes/edu/internet2/middleware/grouper/app/gsh/transactionStatus.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlToFile.java
classes/edu/internet2/middleware/grouper/util/GrouperUtil.java
classes/edu/internet2/middleware/grouper/app/gsh/getMembers.java
classes/edu/internet2/middleware/grouper/app/gsh/grantPriv.java
classes/edu/internet2/middleware/grouper/app/gsh/getStemAttr.java
classes/edu/internet2/middleware/grouper/app/gsh/addSubject.java
classes/edu/internet2/middleware/grouper/app/gsh/registryInitializeSchema.java
classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/app/gsh/help.java
classes/edu/internet2/middleware/grouper/app/gsh/addStem.java
classes/edu/internet2/middleware/grouper/app/gsh/delGroup.java
classes/edu/internet2/middleware/grouper/app/gsh/xmlFromURL.java
classes/edu/internet2/middleware/grouper/app/gsh/obliterateStem.java
classes/edu/internet2/middleware/grouper/app/gsh/getGroups.java
classes/edu/internet2/middleware/grouper/app/gsh/loaderRunOneJobAttr.java
classes/edu/internet2/middleware/grouper/app/gsh/loaderRunOneJob.java
classes/edu/internet2/middleware/grouper/app/gsh/typeAddAttr.java
classes/edu/internet2/middleware/grouper/app/gsh/addComposite.java
classes/edu/internet2/middleware/grouper/app/gsh/groupGetTypes.java
classes/edu/internet2/middleware/grouper/app/gsh/groupDelType.java
classes/GSHFileLoad.properties

grouper_v2_3_0_api_patch_73

GRP-1570: Add PageSize and PageNumber to GetMemberships

classes/edu/internet2/middleware/grouperClient/GrouperClient.java
classes/edu/internet2/middleware/grouperClient/api/GcGetMemberships.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3GroupDAO.java
classes/edu/internet2/middleware/grouperClient/ws/beans/WsRestGetMembershipsRequest.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3StemDAO.java
classes/grouper.client.usage.example.txt
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3MembershipDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3AttributeDefDAO.java

grouper_v2_3_0_api_patch_74

GRP-1568: active PIT objects not found should be handled gracefully

classes/edu/internet2/middleware/grouper/internal/dao/PITGroupDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3PITGroupDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3PITMemberDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/PITMemberDAO.java
classes/edu/internet2/middleware/grouper/changeLog/ChangeLogTempToEntity.java
classes/edu/internet2/middleware/grouper/internal/dao/PITStemDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3PITStemDAO.java

grouper_v2_3_0_api_patch_75

GRP-1585: Duplicate self group sets

classes/edu/internet2/middleware/grouper/internal/dao/GroupSetDAO.java
classes/edu/internet2/middleware/grouper/misc/FindBadMemberships.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3GroupSetDAO.java

grouper_v2_3_0_api_patch_76

GRP-1586: rabbitmq config and tarball

classes/edu/internet2/middleware/grouperClient/messaging/GrouperMessagingConfig.java
classes/edu/internet2/middleware/grouperClient/util/GrouperClientConfig.java
classes/edu/internet2/middleware/grouperClientExt/org/apache/commons/lang3/RandomUtils.java

grouper_v2_3_0_api_patch_77

GRP-1590: better logging for daemons

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalJob.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoader.java
classes/grouper-loader.base.properties
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderJob.java
classes/edu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog.java
classes/edu/internet2/middleware/grouper/util/GrouperThreadLocalState.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderLogger.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderType.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderLog.java
classes/log4j.example.properties

grouper_v2_3_0_api_patch_78

GRP-1592: grouper actAs for messaging to WS bridge
GRP-1593: grouperClient debug mode has too many debug lines

classes/edu/internet2/middleware/grouperClient/config/ConfigPropertiesCascadeCommonUtils.java
classes/edu/internet2/middleware/grouperClient/GrouperClient.java
classes/edu/internet2/middleware/grouperClient/config/ConfigPropertiesCascadeBase.java
classes/edu/internet2/middleware/grouperClient/util/GrouperClientCommonUtils.java
classes/edu/internet2/middleware/grouperClient/GrouperClientState.java
classes/edu/internet2/middleware/grouperClient/util/GrouperClientLog.java
classes/edu/internet2/middleware/grouperClient/ws/GrouperClientWs.java
classes/grouper.client.usage.example.txt
classes/edu/internet2/middleware/grouperClient/failover/FailoverClient.java

grouper_v2_3_0_api_patch_79

GRP-1598: allow not having every entity assigned to attribute privileges automatically

classes/grouper.base.properties
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java

grouper_v2_3_0_api_patch_80

GRP-1595: Real time loader and messaging

classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderJob.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalMessagingListener.java
classes/edu/internet2/middleware/grouper/app/loader/GrouperLoaderIncrementalJob.java

grouper_v2_3_0_api_patch_81

GRP-1609: attestation to new ui wizard

classes/edu/internet2/middleware/grouper/Stem.java
classes/edu/internet2/middleware/grouper/internal/dao/StemDAO.java
classes/edu/internet2/middleware/grouper/StemFinder.java
classes/edu/internet2/middleware/grouper/attr/finder/AttributeAssignFinder.java
classes/edu/internet2/middleware/grouper/internal/dao/GroupDAO.java
classes/edu/internet2/middleware/grouper/audit/AuditTypeBuiltin.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3GroupDAO.java
classes/edu/internet2/middleware/grouper/attr/finder/AttributeAssignValueFinder.java
classes/edu/internet2/middleware/grouper/app/attestation/GrouperAttestationJob.java
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3AttributeAssignDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3StemDAO.java
classes/edu/internet2/middleware/grouper/internal/dao/hib3/Hib3AttributeDefNameDAO.java
classes/edu/internet2/middleware/grouper/util/GrouperUtil.java
classes/edu/internet2/middleware/grouper/audit/AuditFieldType.java
classes/edu/internet2/middleware/grouper/GroupFinder.java
classes/edu/internet2/middleware/grouper/internal/dao/AttributeAssignDAO.java

grouper_v2_3_0_api_patch_82

GRP-1612: external subject source does not register email attribute correctly

classes/edu/internet2/middleware/grouper/externalSubjects/ExternalSubjectAutoSourceAdapter.java

grouper_v2_3_0_api_patch_83

GRP-1625: Upgrade groovy and allow typed variables

GRP-1626: Arrow keys don't work in Windows

classes/groovysh.profile
classes/edu/internet2/middleware/grouper/app/gsh/jline/WindowsTerminal.java
lib/grouper/groovy-all-2.5.0-beta-2.jar
lib/grouper/commons-cli.jar
classes/edu/internet2/middleware/grouper/app/gsh/GrouperShell.java
lib/grouper/jline-2.14.5.jar
classes/edu/internet2/middleware/grouper/misc/GrouperCheckConfig.java

grouper_v2_3_0_api_patch_84

GRP-1629: XML export issue with groovy

classes/edu/internet2/middleware/grouper/xml/export/XmlExportMain.java

grouper_v2_3_0_ui_patch_0

GRP-1286: Fix UI wording for v2.3.0 folder privilege changes

classes/grouperText/grouper.text.en.us.base.properties
files/WEB-INF/jsp/gettingStarted.jsp
files/WEB-INF/jsp/generalHelp.jsp

grouper_v2_3_0_ui_patch_1

GRP-1291: grouper ui text config should use superclass to implement local references to properties

classes/edu/internet2/middleware/grouperClient/config/GrouperUiTextConfig.java

grouper_v2_3_0_ui_patch_2

GRP-1313: potential ws/ui memory leaks with threadlocals

classes/edu/internet2/middleware/grouper/ui/GrouperUiFilter.java
classes/edu/internet2/middleware/grouper/ui/GrouperSessionAttributeListener.java

grouper_v2_3_0_ui_patch_3

GRP-1138: add import / export auditing

classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GroupImport.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GuiAuditEntry.java
classes/grouperText/grouper.text.en.us.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/SimpleMembershipUpdateImportExport.java

grouper_v2_3_0_ui_patch_4

GRP-1334: control links from new UI to admin and lite UIs via group

classes/edu/internet2/middleware/grouper/ui/GrouperUiFilter.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/IndexContainer.java

grouper_v2_3_0_ui_patch_5

GRP-1333: control which attributes are displayed for a subject and in which order

classes/grouper-ui.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiSubject.java
files/WEB-INF/grouperUi2/subject/subjectHeader.jsp

grouper_v2_3_0_ui_patch_6

GRP-1361: ui button to run loader job not showing up if "etc" is not stem for built in objects

classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiGroup.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Group.java

grouper_v2_3_0_ui_patch_7

GRP-1405: csrf error on grouper ui with no slash required token is missing from the request

classes/Owasp.CsrfGuard.overlay.properties

grouper_v2_3_0_ui_patch_8

GRP-1411: Generic error message when attempting to delete group that is part of a composite group

classes/grouperText/grouper.text.en.us.base.properties
files/grouperExternal/public/assets/js/grouper.js
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Group.java

grouper_v2_3_0_ui_patch_9

GRP-1423: My memberships tab shows your memberships without taking into account security

classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2MyGroups.java

grouper_v2_3_0_ui_patch_10

GRP-1438: Admin UI CSRF error adding subject from workspace

classes/Owasp.CsrfGuard.overlay.properties

grouper_v2_3_0_ui_patch_11

GRP-1448: do not allow enter key in dojo combobox

classes/edu/internet2/middleware/grouper/ui/tags/GrouperComboboxTag2.java
files/grouperExternal/public/assets/js/grouperUi.js

grouper_v2_3_0_ui_patch_12

GRP-1453: Audit log Actor UI tooltip truncated

files/grouperExternal/public/assets/css/bootstrap.css

grouper_v2_3_0_ui_patch_13

GRP-1418: removeMembers redirect to main page for non-wheel user with Admin priv but not update

classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Group.java

grouper_v2_3_0_ui_patch_14

GRP-1463: what if you have a subject in your source identified by GrouperSystem

classes/edu/internet2/middleware/grouper/ui/GrouperUiFilter.java
classes/grouper-ui.base.properties
classes/edu/internet2/middleware/grouper/ui/LoginCheckFilter.java

grouper_v2_3_0_ui_patch_15

GRP-1470: grouper subject api diagnostics

classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/ProvisioningContainer.java
classes/grouper-ui.base.properties
classes/grouperText/grouper.text.en.us.base.properties
classes/Owasp.CsrfGuard.overlay.properties
classes/edu/internet2/middleware/grouper/j2ee/GrouperUiRestServlet.java
files/WEB-INF/grouperUi2/index/miscellaneous.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/AdminContainer.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Admin.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperRequestContainer.java
files/WEB-INF/grouperUi2/admin/adminSubjectApiDiagnostics.jsp

grouper_v2_3_0_ui_patch_16

GRP-1487: grouperLoader view job in the UI

classes/edu/internet2/middleware/grouper/ui/util/GrouperUiUtils.java
files/grouperExternal/public/assets/css/grouperUi2.css
classes/grouper-ui.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Group.java
classes/grouperText/grouper.text.en.us.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperRequestContainer.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GrouperLoader.java
files/WEB-INF/grouperUi2/group/groupEdit.jsp
files/WEB-INF/grouperUi2/group/grouperLoaderEditGroupTab.jsp
files/WEB-INF/grouperUi2/group/grouperLoaderGroupTab.jsp
files/WEB-INF/grouperUi2/group/groupMoreTab.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperLoaderContainer.java

grouper_v2_3_0_ui_patch_17

GRP-1500: grouper loader logs in ui

files/WEB-INF/tld/grouper-el.tld
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GrouperLoader.java
classes/grouperText/grouper.text.en.us.base.properties
classes/grouper-ui.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiHib3GrouperLoaderLog.java
classes/edu/internet2/middleware/grouper/ui/tags/GrouperUiFunctions.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperLoaderContainer.java
files/WEB-INF/grouperUi2/group/grouperLoaderGroupTab.jsp
files/WEB-INF/grouperUi2/group/grouperLoaderMoreActionsButtonContents.jsp
files/WEB-INF/grouperUi2/group/grouperLoaderViewLogsTab.jsp
files/WEB-INF/grouperUi2/group/grouperLoaderViewLogsResults.jsp

grouper_v2_3_0_ui_patch_18

GRP-1501: grouper loader diagnostics in UI

classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GrouperLoader.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperLoaderContainer.java
files/WEB-INF/grouperUi2/group/grouperLoaderDiagnostics.jsp
classes/grouperText/grouper.text.en.us.base.properties
files/WEB-INF/grouperUi2/group/grouperLoaderMoreActionsButtonContents.jsp

grouper_v2_3_0_ui_patch_19

GRP-1480: users with admin priv can't remove group via subject page

classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Subject.java

grouper_v2_3_0_ui_patch_20

GRP-1506: New feature - Configurable subject icons (ready for pull)

classes/grouperText/grouper.text.fr.fr.base.properties
classes/grouperText/grouper.text.en.us.base.properties
classes/edu/internet2/middleware/grouper/ui/util/GrouperUiUtils.java
files/WEB-INF/grouperUi2/subject/subjectHeader.jsp
classes/grouper-ui.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiSubject.java

grouper_v2_3_0_ui_patch_21

GRP-1520: grouper loader security for group and admins

classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/ProvisioningContainer.java
classes/edu/internet2/middleware/grouper/ui/GrouperUiFilter.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/AdminContainer.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/IndexContainer.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperLoaderContainer.java

grouper_v2_3_0_ui_patch_22

GRP-1521: Instrumentation counts

classes/edu/internet2/middleware/grouper/ui/GrouperUiFilter.java
files/grouperExternal/public/assets/css/c3.min.css
files/WEB-INF/grouperUi2/index/miscellaneous.jsp
files/WEB-INF/grouperUi2/admin/adminInstrumentation.jsp
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Admin.java
files/WEB-INF/grouperUi2/admin/adminInstrumentationInstance.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiInstrumentationDataInstance.java
files/grouperExternal/public/assets/js/c3.min.js
files/grouperExternal/public/assets/js/d3.min.js
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/AdminContainer.java
files/WEB-INF/grouperUi2/assetsJsp/commonHead.jsp
classes/grouper-ui.base.properties
classes/grouperText/grouper.text.en.us.base.properties

grouper_v2_3_0_ui_patch_23

GRP-1519: grouper loader edit screen in ui

classes/grouperText/grouper.text.en.us.base.properties
files/WEB-INF/grouperUi2/group/grouperLoaderEditGroupTab.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiSource.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GrouperLoader.java
files/WEB-INF/grouperUi2/group/grouperLoaderMoreActionsButtonContents.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperLoaderContainer.java
files/WEB-INF/grouperUi2/group/grouperLoaderGroupTab.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperRequestContainer.java
files/grouperExternal/public/assets/css/grouperUi2.css

grouper_v2_3_0_ui_patch_24

GRP-1538: attestation

files/WEB-INF/grouperUi2/group/groupMoreActionsButtonContents.jsp
files/WEB-INF/grouperUi2/stem/stemViewAttestation.jsp
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Stem.java
files/WEB-INF/grouperUi2/stem/stemEditAttestation.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GroupContainer.java
files/WEB-INF/grouperUi2/group/groupViewAttestation.jsp
files/WEB-INF/grouperUi2/group/groupAttestation.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GuiAttestation.java
files/WEB-INF/grouperUi2/group/groupNoAttestation.jsp
files/WEB-INF/grouperUi2/stem/stemMoreActionsButtonContents.jsp
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Attestation.java
files/WEB-INF/grouperUi2/group/groupEditAttestation.jsp
files/WEB-INF/grouperUi2/stem/stemAttestation.jsp
files/WEB-INF/grouperUi2/stem/stemNoAttestation.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/StemContainer.java

grouper_v2_3_0_ui_patch_25

GRP-1543: Add instrumentation thread to grouperWs

classes/grouperText/grouper.text.en.us.base.properties

grouper_v2_3_0_ui_patch_26

GRP-1545: subject api diagnostics on ui does not show for admins
GRP-1542: same subject id or identifier in multiple sources will cause error in ui
GRP-1546: can be looping in csrf protection if old session

classes/edu/internet2/middleware/grouper/ui/util/GrouperUiUtils.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2AttributeDef.java
files/grouperExternal/public/assets/js/grouperUi.js
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/AdminContainer.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Group.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GroupImport.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Stem.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2ExternalEntities.java
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/SubjectPicker.java

grouper_v2_3_0_ui_patch_27

GRP-1380 - Add focus and aria attributes when Add Members button is clicked
GRP-1394 - Add role=button to Add Members link
GRP-1397 - Attach the label to correct input field
GRP-1398 - Toggle aria-expande based on pull down menu status
GRP-1399 - Add tabs accessibility
GRP-1400 - Add labels for checkboxes and Actions header in the group detail page
GRP-1407 - Add placeholder text in the entity name text field
GRP-1408 - Change the html to have the left box appear before the main content in the right side
GRP-1409 - Add role=alert to the messages (still has issues)
GRP-1410 - Create a hidden header element for the breadcrumb
GRP-1431 - Add aria-label property to More links
GRP-1432 - Announce addition/deletion of Custom Privileges section from add memebers page
GRP-1436 - Add aria attributes to Quick Links
GRP-1437 - Add aria label to refresh folder browse icon and change hard coded english aria labels to property file
GRP-1442 - Add table header to recent activity table on the home page
GRP-1478 - Make the privileges checkboxes which are icons more accessible for screenreaders
GRP-1482 - Announce when the filter is applied and the results are updated
GRP-1544 : Fix accessibility issues

files/WEB-INF/grouperUi2/attributeDef/attributeDefMoreActionsButtonContents.jsp
files/WEB-INF/grouperUi2/group/thisGroupsStemPrivilegesContents.jsp
files/WEB-INF/grouperUi2/index/myActivity.jsp
files/WEB-INF/grouperUi2/subject/thisSubjectsGroupPrivileges.jsp
files/WEB-INF/grouperUi2/stem/stemPrivilegeContents.jsp
files/WEB-INF/grouperUi2/group/groupViewAudits.jsp
files/WEB-INF/grouperUi2/stem/privilegesInheritedToObjects.jsp
files/WEB-INF/grouperUi2/myStems/myStemsContainingAttributesImanage.jsp
files/WEB-INF/grouperUi2/subject/thisSubjectsStemPrivilegesContents.jsp
files/WEB-INF/grouperUi2/index/myServices.jsp
files/WEB-INF/grouperUi2/group/thisGroupsAttributeDefPrivileges.jsp
files/WEB-INF/grouperUi2/subject/thisSubjectsStemPrivileges.jsp
files/WEB-INF/grouperUi2/group/groupPrivilegeContents.jsp
files/WEB-INF/grouperUi2/group/groupPrivileges.jsp
files/WEB-INF/grouperUi2/myGroups/myGroupsJoinContents.jsp
files/WEB-INF/grouperUi2/myGroups/myGroupsJoin.jsp
files/WEB-INF/grouperUi2/subject/thisSubjectsAttributeDefPrivileges.jsp
files/WEB-INF/grouperUi2/index/index.jsp
files/WEB-INF/grouperUi2/group/newGroup.jsp
files/WEB-INF/grouperUi2/subject/viewSubject.jsp
files/WEB-INF/grouperUi2/stem/stemEdit.jsp
files/WEB-INF/grouperUi2/group/groupContents.jsp
files/WEB-INF/grouperUi2/stem/stemPrivileges.jsp
files/grouperExternal/public/assets/dojo/grouper/nls/grouperDojo_en-us.js
files/WEB-INF/grouperUi2/subject/thisSubjectsInheritedPrivilegesInvolvement.jsp
files/WEB-INF/grouperUi2/groupImport/groupImport.jsp
files/WEB-INF/grouperUi2/subject/subjectContents.jsp
files/WEB-INF/grouperUi2/stem/stemMove.jsp
files/WEB-INF/grouperUi2/group/thisGroupsMembershipsContents.jsp
files/WEB-INF/grouperUi2/subject/thisSubjectsAttributeDefPrivilegesContents.jsp
files/WEB-INF/grouperUi2/group/thisGroupsPrivilegesInheritedFromFolders.jsp
files/WEB-INF/grouperUi2/group/viewGroup.jsp
files/WEB-INF/grouperUi2/group/groupHeader.jsp
files/grouperExternal/public/assets/css/bootstrap.css
files/WEB-INF/grouperUi2/myGroups/myGroups.jsp
files/WEB-INF/grouperUi2/group/assignedToGroupInheritedPrivilegesInvolvement.jsp
files/WEB-INF/grouperUi2/stem/stemMoreTab.jsp
files/WEB-INF/grouperUi2/attributeDef/viewAttributeDef.jsp
files/WEB-INF/grouperUi2/group/thisGroupsStemPrivileges.jsp
files/WEB-INF/grouperUi2/stem/thisFoldersPrivilegesInheritedFromFolders.jsp
files/WEB-INF/grouperUi2/attributeDef/attributeDefEdit.jsp
files/WEB-INF/grouperUi2/subject/subjectMoreTab.jsp
files/WEB-INF/grouperUi2/myStems/myStems.jsp
files/WEB-INF/grouperUi2/group/groupProvisioning.jsp
files/WEB-INF/grouperUi2/myGroups/myGroupsMembershipsContents.jsp
files/WEB-INF/grouperUi2/stem/stemViewAudits.jsp
files/WEB-INF/grouperUi2/stem/stemCopy.jsp
files/WEB-INF/grouperUi2/index/myFavorites.jsp
files/WEB-INF/grouperUi2/group/thisGroupsAttributeDefPrivilegesContents.jsp
files/WEB-INF/grouperUi2/attributeDef/thisAttributeDefsPrivilegesInheritedFromFolders.jsp
files/WEB-INF/grouperUi2/attributeDef/attributeDefPrivilegeContents.jsp
files/WEB-INF/grouperUi2/stem/stemHeader.jsp
files/WEB-INF/grouperUi2/group/thisGroupsGroupPrivileges.jsp
files/WEB-INF/grouperUi2/attributeDef/attributeDefMoreTab.jsp
files/WEB-INF/grouperUi2/attributeDef/attributeDefContents.jsp
files/WEB-INF/grouperUi2/myStems/myStemsContainingGroupsImanage.jsp
classes/grouperText/grouper.text.en.us.base.properties
files/WEB-INF/grouperUi2/attributeDef/attributeDefPrivileges.jsp
files/WEB-INF/grouperUi2/group/thisGroupsMemberships.jsp
files/WEB-INF/grouperUi2/attributeDef/attributeDefHeader.jsp
files/WEB-INF/grouperUi2/group/thisGroupsGroupPrivilegesContents.jsp
files/WEB-INF/grouperUi2/myGroups/myGroupsMemberships.jsp
files/WEB-INF/grouperUi2/stem/stemDelete.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiObjectBase.java
files/WEB-INF/grouperUi2/index/indexColumnMenu.jsp
files/WEB-INF/grouperUi2/attributeDef/newAttributeDef.jsp
files/WEB-INF/grouperUi2/stem/newStem.jsp
files/WEB-INF/grouperUi2/subject/thisSubjectsGroupPrivilegesContents.jsp
files/WEB-INF/grouperUi2/index/indexMain.jsp
files/WEB-INF/grouperUi2/stem/viewStem.jsp

grouper_v2_3_0_ui_patch_28

GRP-1558: default subject display shows "email" attribute, which source might not have

classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiSubject.java

grouper_v2_3_0_ui_patch_29

GRP-1566: grouper loader ui overall

files/WEB-INF/grouperUi2/index/miscellaneous.jsp
files/WEB-INF/grouperUi2/group/grouperLoaderOverall.jsp
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GrouperLoader.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperLoaderContainer.java
classes/grouperText/grouper.text.en.us.base.properties
classes/edu/internet2/middleware/grouper/grouperUi/beans/api/GuiGrouperLoaderJob.java
files/WEB-INF/grouperUi2/group/grouperLoaderMoreActionsButtonContents.jsp

grouper_v2_3_0_ui_patch_30

GRP-1489: Can't type multiple lines in Add Members copy/paste

files/grouperExternal/public/assets/js/grouperUi.js
files/WEB-INF/grouperUi2/assetsJsp/commonBottom.jsp

grouper_v2_3_0_ui_patch_31

GRP-1548: Edit LDAP Loader in UI fails when legacy group type doesn't exist

classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2GrouperLoader.java

grouper_v2_3_0_ui_patch_32

GRP-1604: wrong label in read/update priv in stem and attributeDef

files/WEB-INF/grouperUi2/attributeDef/attributeDefHeader.jsp
files/WEB-INF/grouperUi2/stem/stemHeader.jsp

grouper_v2_3_0_ui_patch_33

GRP-1609: attestation to new ui wizard

classes/grouperText/grouper.text.en.us.base.properties
files/WEB-INF/grouperUi2/stem/stemMoreActionsButtonContents.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GuiAuditEntry.java
files/WEB-INF/grouperUi2/group/grouperLoaderEditGroupTab.jsp
files/WEB-INF/grouperUi2/group/groupAttestationListOfSettingsHelper.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/AttestationContainer.java
files/WEB-INF/grouperUi2/group/groupAttestationOverallMoreActionsButtonContents.jsp
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Group.java
files/WEB-INF/grouperUi2/group/groupAttestationOverallSettings.jsp
files/WEB-INF/grouperUi2/group/groupAttestationView.jsp
classes/edu/internet2/middleware/grouper/grouperUi/serviceLogic/UiV2Attestation.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GrouperRequestContainer.java
files/WEB-INF/grouperUi2/group/groupAttestationEdit.jsp
files/WEB-INF/grouperUi2/group/groupAttestation.jsp
files/WEB-INF/grouperUi2/group/groupAttestationListOfGroupsHelper.jsp
files/WEB-INF/grouperUi2/stem/stemAttestationSettings.jsp
files/WEB-INF/grouperUi2/group/groupAttestationViewAuditsContents.jsp
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GuiAttestation.java
classes/edu/internet2/middleware/grouper/grouperUi/beans/ui/GroupContainer.java
files/WEB-INF/grouperUi2/group/groupAttestationOverall.jsp
files/WEB-INF/grouperUi2/stem/stemAttestationGroups.jsp
files/WEB-INF/grouperUi2/stem/stemAttestationEdit.jsp
files/WEB-INF/grouperUi2/index/miscellaneous.jsp
files/grouperExternal/public/assets/js/grouperUi.js
files/WEB-INF/grouperUi2/stem/stemAttestationMoreActionsButtonContents.jsp
files/WEB-INF/grouperUi2/stem/stemAttestation.jsp
files/WEB-INF/grouperUi2/group/groupAttestationMoreActionsButtonContents.jsp
files/WEB-INF/grouperUi2/group/groupAttestationViewAudits.jsp
files/WEB-INF/grouperUi2/group/viewGroup.jsp

grouper_v2_3_0_ws_patch_0

GRP-1317: attributeDefSave web service doesnt work for soap, GRP-1322: acknowledge message ws had an issue

classes/edu/internet2/middleware/grouper/ws/GrouperServiceLogic.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsAttributeDefActionOperationPerformed.java
classes/edu/internet2/middleware/grouper/ws/rest/WsRestClassLookup.java
classes/edu/internet2/middleware/grouper/ws/rest/messaging/WsRestAcknowledgeMessageRequest.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsAttributeDefActionOperationPerformed.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/GrouperService.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsAttributeDef.java
classes/edu/internet2/middleware/grouper/ws/rest/GrouperServiceRest.java
classes/edu/internet2/middleware/grouper/ws/rest/method/GrouperWsRestPut.java

grouper_v2_3_0_ws_patch_1

GRP-1324: acknowledge message soap ws had an issue, GRP-1325: grouper WS send, receive, acknowledge message does not set Grouper headers

classes/edu/internet2/middleware/grouper/ws/coresoap/GrouperService.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/GrouperService.java

grouper_v2_3_0_ws_patch_2

GRP-1313: potential ws/ui memory leaks with threadlocals

classes/edu/internet2/middleware/grouper/ws/GrouperServiceJ2ee.java
classes/edu/internet2/middleware/grouper/ws/j2ee/GrouperJ2eeListener.java

grouper_v2_3_0_ws_patch_3

GRP-1348: web services including hasMember doesnt not work when looking up group with alternate name

classes/edu/internet2/middleware/grouper/ws/coresoap/WsGroupLookup.java

grouper_v2_3_0_ws_patch_4

GRP-1353: external user find create delete web services

classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectDeleteResults.java
classes/edu/internet2/middleware/grouper/ws/coresoap/GrouperService.java
classes/edu/internet2/middleware/grouper/ws/GrouperServiceLogic.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectLookup.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectDeleteResult.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubject.java
classes/edu/internet2/middleware/grouper/ws/rest/GrouperServiceRest.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectAttribute.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsFindExternalSubjectsResults.java
classes/edu/internet2/middleware/grouper/ws/rest/externalSubject/WsRestExternalSubjectDeleteRequest.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectLookup.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubject.java
classes/edu/internet2/middleware/grouper/ws/rest/method/GrouperWsRestDelete.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectSaveResults.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectSaveResults.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/GrouperService.java
classes/edu/internet2/middleware/grouper/ws/rest/WsRestClassLookup.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectSaveResult.java
classes/edu/internet2/middleware/grouper/ws/rest/externalSubject/WsRestFindExternalSubjectsRequest.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectDeleteResults.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectAttribute.java
classes/edu/internet2/middleware/grouper/ws/rest/externalSubject/WsRestExternalSubjectSaveRequest.java
classes/edu/internet2/middleware/grouper/ws/rest/method/GrouperWsRestGet.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsGroupDeleteResults.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectToSave.java
classes/edu/internet2/middleware/grouper/ws/rest/method/GrouperWsRestPut.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsFindExternalSubjectsResults.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectToSave.java
classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectDeleteResult.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/WsExternalSubjectSaveResult.java
files/WEB-INF/services/GrouperService_v2_3.aar

grouper_v2_3_0_ws_patch_5

GRP-1434: external subject WS does not save institution

classes/edu/internet2/middleware/grouper/ws/coresoap/WsExternalSubjectToSave.java

grouper_v2_3_0_ws_patch_6

GRP-1447: Old version of mysql connector jar lurking in the V2.3.0 web service installation

lib/mysql-connector-java-5.1.5-bin.jar

grouper_v2_3_0_ws_patch_7

GRP-1449: getGroups paging does not work if you dont pass in a stem

classes/edu/internet2/middleware/grouper/ws/GrouperServiceLogic.java

grouper_v2_3_0_ws_patch_8

GRP-1543: Add instrumentation thread to grouperWs

classes/edu/internet2/middleware/grouper/ws/rest/GrouperRestServlet.java
classes/edu/internet2/middleware/grouper/ws/GrouperServiceAxisServlet.java
classes/edu/internet2/middleware/grouper/ws/GrouperServiceJ2ee.java

grouper_v2_3_0_ws_patch_9

GRP-1570: Add PageSize and PageNumber to GetMemberships

classes/edu/internet2/middleware/grouper/ws/rest/membership/WsRestGetMembershipsLiteRequest.java
classes/edu/internet2/middleware/grouper/ws/coresoap/GrouperService.java
classes/edu/internet2/middleware/grouper/ws/rest/membership/WsRestGetMembershipsRequest.java
classes/edu/internet2/middleware/grouper/ws/soap_v2_3/GrouperService.java
classes/edu/internet2/middleware/grouper/ws/GrouperServiceLogic.java
files/WEB-INF/services/GrouperService_v2_3.aar
classes/edu/internet2/middleware/grouper/ws/rest/GrouperServiceRest.java

grouper_v2_3_0_ws_patch_10

GRP-1584: WS allow multiple login subject sources

classes/edu/internet2/middleware/grouper/ws/GrouperServiceJ2ee.java
classes/grouper-ws.base.properties

grouper_v2_3_0_ws_patch_11

GRP-1592: grouper actAs for messaging to WS bridge

classes/grouper-ws.base.properties
lib/joda-time-1.5.1.jar
classes/edu/internet2/middleware/grouper/ws/GrouperServiceJ2ee.java

grouper_v2_3_0_psp_patch_0

GRP-1385: null pointer in psp change log consumer

classes/edu/internet2/middleware/psp/grouper/PspChangeLogConsumer.java

grouper_v2_3_0_psp_patch_1

GRP-1388: timer issue in psp

classes/edu/internet2/middleware/psp/grouper/PspChangeLogConsumer.java

grouper_v2_3_0_pspng_patch_0

GRP-1318: PSPNG-Creation and Location of provision_to and do_not_provision_to

GRP-1316: PSPNG: Support disabling of LDAP Paging

classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/GrouperGroupInfo.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/ProvisionerConfiguration.java
classes/edu/internet2/middleware/grouper/pspng/PspUtils.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisionerConfiguration.java

grouper_v2_3_0_pspng_patch_1

GRP-1383-fixes for several pspng issues: GRP-1372 (Case sensitivity) || GRP-1312 (Group selection: too many groups provisioned) || GRP-1362 (Recovering from ldap connection problems while in pool (connection validation)) || GRP-1378 (Nested groups can lead to subject-lookup errors) || GRP-1373 (Group-deletion can lead to jexl expression error) || GRP-1375 (Deleted groups can lead to Cant find group by uuid exception) || GRP-1371 (Better FullSync Logs)

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/ProvisionerFactory.java
classes/edu/internet2/middleware/grouper/pspng/PspUtils.java
classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisionerConfiguration.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisionerConfiguration.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/PspChangelogConsumerShim.java
classes/edu/internet2/middleware/grouper/pspng/GrouperGroupInfo.java
classes/edu/internet2/middleware/grouper/pspng/LdapSystem.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/ProvisioningWorkItem.java

grouper_v2_3_0_pspng_patch_2

GRP-1392: Fixes slow group-selecting performance with large group registries

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/ProvisionerConfiguration.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java

grouper_v2_3_0_pspng_patch_3

GRP-1401: pspng error: If you are passing in a parentStemId or a stemScope, then you need to pass both of them

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java

grouper_v2_3_0_pspng_patch_4

GRP-1391 - Treats missing subjects in destination system as warnings instead of errors

classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/Provisioner.java

grouper_v2_3_0_pspng_patch_5

GRP-1392, fixing PSPNG for large group registries

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java

grouper_v2_3_0_pspng_patch_6

GRP-1391 Debugging. Improve logging throughout pspng.

classes/edu/internet2/middleware/grouper/pspng/ProvisionerFactory.java
classes/edu/internet2/middleware/grouper/pspng/LdapSystem.java
classes/edu/internet2/middleware/grouper/pspng/PspChangelogConsumerShim.java
classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapObject.java
classes/edu/internet2/middleware/grouper/pspng/PspMessageConsumerShim.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncStarter.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java

grouper_v2_3_0_pspng_patch_7

GRP-1391: Failing on missing members (FullSync). Refactored the JexlExpression evaluation

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java

grouper_v2_3_0_pspng_patch_8

GRP-1479 - Fix NullPointerExceptions, particularly when groups are deleted

classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapSystem.java
classes/edu/internet2/middleware/grouper/pspng/Provisioner.java

grouper_v2_3_0_pspng_patch_9

GRP-1488 - Fixed problem where a null subject was referenced, causing a NullPointerException. Also improved some logging.

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/ProvisioningWorkItem.java

grouper_v2_3_0_pspng_patch_10

GRP-1376 - Support for LDAP Groups that require members / Additional logging and other full-sync improvements

classes/edu/internet2/middleware/grouper/pspng/PspUtils.java
classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisionerConfiguration.java
classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/GrouperGroupInfo.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncStarter.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisionerFactory.java

grouper_v2_3_0_pspng_patch_11

GRP-1505 - PSPNG FullSync job statuses are incorrect

classes/edu/internet2/middleware/grouper/pspng/FullSyncStarter.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/JobStatistics.java

grouper_v2_3_0_pspng_patch_12

GRP-1551 - PSPNG support for encrypted passwords

classes/edu/internet2/middleware/grouper/pspng/LdapSystem.java
classes/edu/internet2/middleware/grouper/pspng/LdapProvisioner.java

grouper_v2_3_0_pspng_patch_13

GRP-1533 Problems with commas in group names (RDN)

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/FullSyncProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapSystem.java
classes/edu/internet2/middleware/grouper/pspng/LdapAttributeProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/PspUtils.java
classes/edu/internet2/middleware/grouper/pspng/PspJexlUtils.java

grouper_v2_3_0_pspng_patch_14

GRP-1533 Problems with commas in group names (RDN): Adjusting DN-escaping to be more consistent.

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java

grouper_v2_3_0_pspng_patch_15

GRP-1588: Ldap Groups - "Entry already exists" errors when groups found by DN/EntryDn/DistinguishedName

classes/edu/internet2/middleware/grouper/pspng/Provisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisionerConfiguration.java

grouper_v2_3_0_pspng_patch_16

GRP-1533: [More] BushyDn groups that need DN escaping, particularly when group-search filter is based on dn/entryDn/distinguishedName

classes/edu/internet2/middleware/grouper/pspng/PspJexlUtils.java
classes/edu/internet2/middleware/grouper/pspng/LdapGroupProvisioner.java


For more information about upcoming plans, see the Grouper Product Roadmap .

Many other fixes and improvements were also made to all components of the Grouper Toolkit: Grouper API, Administrative & Lite UIs, Grouper Web Services, Grouper Client, Grouper Shell, Grouper Loader, PSP, and the Subject API.

Upgrading to Grouper 2.3 from Grouper 2.2

Using the Grouper Upgrader can simplify your upgrade process. Here is a movie demonstrating the Grouper upgrader.  The upgrader can upgrade an installed env of the API, UI, WS, client, PSP, etc.  If you dont have a build script to manage multiple envs, you might want to use the upgrader.

Important Changes in Grouper 2.3 that impact the upgrade

Inherited Privileges: The Grouper v2.3 UI has support for privilege inheritance.  By default, if you are an admin on a folder, you can assign inherited privileges on it.  Note that one potential side effect of this feature is that it allows end users to gain access to sub-folders and groups because they have admin access to a parent folder.  In most cases, this is expected behavior because folders are typically delegated and managed hierarchically.  However, if you do not allow parent folder admins to have access to all child objects, then you may want to disable this feature.  You have the option to lock this feature down so only Grouper admins can use it or people in a certain group.

Other items before upgrading

  1. You may want to have your DBAs make sure you are not close to running out of tablespace.  In general, it may be useful to have your DBAs available when you upgrade.
  2. If you have views that other systems use, you could replace them as tables before beginning. 
  3. If you have other systems using Grouper, you could temporarily disable them.

Upgrade Steps

  1. You should get v2.3 versions of the Grouper API, Grouper UI, Grouper WS, Grouper Daemon, etc. from the Grouper Downloads page.  You will need to merge configuration files and JARs.
  2. Stop the Grouper Daemon.  Once you prevent users from making updates to your Grouper instance, run the changeLogTempToChangeLog daemon to clear out the temp changelog using your existing v2.2 API.  Here's an example using GSH.

    gsh 0% loaderRunOneJob("CHANGE_LOG_changeLogTempToChangeLog")
    
  3. Before performing any upgrade steps, export your Grouper registry.  Options include performing a database backup (recommended) or using the XML Export utility in Grouper (not recommended since certain features may not get exported).
  4. Using the 2.3 API, perform a registry check using GSH to create an SQL file that will contain the DDL to update your database. To do this, run: gsh -registry -check     Note you may need to increase memory.  For instance..

    $ export MEM_MAX=2000m
    $ ./bin/gsh.sh -registry -check
    Using GROUPER_HOME: /opt/grouper
    Using GROUPER_CONF: /opt/grouper/conf
    Using JAVA: java
    using MEMORY: 64m-2000m
    Grouper starting up: version: 2.3.0, build date: 2016/04/20 16:15:04, env: <no label configured>
    grouper.properties read from: /opt/grouper/conf/grouper.properties
    Grouper current directory is: /opt/grouper
    log4j.properties read from:   /opt/grouper/conf/log4j.properties
    Grouper is logging to file:   /opt/grouper/logs/grouper_debug.log, /opt/grouper/logs/grouper_error.log, at min level INFO for package: edu.internet2.middleware.grouper, based on log4j.properties
    grouper.hibernate.properties: /opt/grouper/conf/grouper.hibernate.properties
    grouper.hibernate.properties: sa@jdbc:hsqldb:hsql://localhost:9001/grouper
    sources.xml read from:        /opt/grouper/conf/sources.xml
    sources.xml groupersource id: g:gsa
    sources.xml groupersource id: grouperEntities
    sources.xml jdbc source id:   jdbc: GrouperJdbcConnectionProvider
    This db user 'sa' and url 'jdbc:hsqldb:hsql://localhost:9001/grouper' are allowed to be changed in the grouper.properties
    Continuing...
    Grouper ddl object type 'Grouper' has dbVersion: 29 and java version: 30
    Grouper database schema DDL requires updates
    (should run script manually and carefully, in sections, verify data before drop statements, backup/export important data before starting, follow change log on confluence, dont run exact same script in multiple envs - generate a new one for each env),
    script file is:
    /opt/grouper/ddlScripts/grouperDdl_20160420_16_15_53_708.sql
    Note: this script was not executed due to option passed in
    To run script via gsh, carefully review it, then run this:
    gsh -registry -runsqlfile /opt/grouper/ddlScripts/grouperDdl_20160420_16_15_53_708.sql
    
    1. In this example above, an SQL script called /opt/grouper/ddlScripts/grouperDdl_20160420_16_15_53_708.sql was created.
    2. Postgres only - If using postgres, you should see foreign keys being dropped at the top of the script. If not, try setting the ddlutils.schema grouper.properties setting and run again. If you still don't see foreign keys being dropped at the top of the script, manually drop all foreign keys before running the script.
    3. Postgres and hsql only - You should backup any non grouper views that depend on Grouper views, run the grouper script (which deletes those views due to drop view cascade), and then you should recreate those non grouper views.
  5. Run the SQL script. 

    If you are running via GSH, make sure this is in log4j.properties so that you know which line of the script is currently executing to see progress and troubleshoot

    log4j.logger.org.apache.tools.ant = WARN



    To do this, run:  gsh -registry -runsqlfile /path/to/sql/file.sql  For instance..

    $ ./bin/gsh.sh -registry -runsqlfile /opt/grouper/ddlScripts/grouperDdl_20160420_16_15_53_708.sql
    Using GROUPER_HOME: /opt/grouper
    Using GROUPER_CONF: /opt/grouper/conf
    Using JAVA: java
    using MEMORY: 64m-2000m
    This db user 'sa' and url 'jdbc:hsqldb:hsql://localhost:9001/grouper' are allowed to be changed in the grouper.properties
    Continuing...
    Script was executed successfully
    
    Grouper starting up: version: 2.3.0, build date: 2016/04/20 16:15:04, env: <no label configured>
    grouper.properties read from: /opt/grouper/conf/grouper.properties
    Grouper current directory is: /opt/grouper
    log4j.properties read from:   /opt/grouper/conf/log4j.properties
    Grouper is logging to file:   /opt/grouper/logs/grouper_debug.log, /opt/grouper/logs/grouper_error.log, at min level INFO for package: edu.internet2.middleware.grouper, based on log4j.properties
    grouper.hibernate.properties: /opt/grouper/conf/grouper.hibernate.properties
    grouper.hibernate.properties: sa@jdbc:hsqldb:hsql://localhost:9001/grouper
    sources.xml read from:        /opt/grouper/conf/sources.xml
    sources.xml groupersource id: g:gsa
    sources.xml groupersource id: grouperEntities
    sources.xml jdbc source id:   jdbc: GrouperJdbcConnectionProvider
    Grouper note: auto-created stem: etc:attribute:messages
    Grouper note: auto-created role: etc:attribute:messages:grouperMessageRole
    Grouper note: auto-created attributeDef: etc:attribute:messages:grouperMessageTopicDef
    Grouper note: auto-created attributeDef: etc:attribute:messages:grouperMessageQueueDef
    Grouper note: auto-created stem: etc:attribute:messages:grouperMessageTopics
    Grouper note: auto-created stem: etc:attribute:messages:grouperMessageQueues
    

    Note that if one of the SQL statements in the script fails, the process will abort leaving the rest of the SQL statements from executing.  If this happens, in most cases, you can't just re-run the full script since re-executing some of the DDL changes that previously succeeded would fail now (e.g. dropping a view or constraint that was previously dropped successfully.)  You could edit the script to remove the statements that previously succeeded in order to re-execute the statement that failed and the ones after it.  Or you can run the previous step again to generate a new SQL script.

  6. Now that the DDL updates have been made, there is an additional GSH command that needs to be run.  To do this, run: gsh ../misc/postGrouper2_3_0Upgrade.gsh (The gsh script is in the "misc" directory.)  Note you should check the output to make sure no errors are thrown. If you see an error, it is safe to re-run. For instance..

    $ ./bin/gsh.sh misc/postGrouper2_3_0Upgrade.gsh
    Using GROUPER_HOME: /opt/grouper
    Using GROUPER_CONF: /opt/grouper/conf
    Using JAVA: java
    using MEMORY: 64m-2000m
    Grouper starting up: version: 2.3.0, build date: 2016/04/20 16:15:04, env: <no label configured>
    grouper.properties read from: /opt/grouper/conf/grouper.properties
    Grouper current directory is: /opt/grouper
    log4j.properties read from:   /opt/grouper/conf/log4j.properties
    Grouper is logging to file:   /opt/grouper/logs/grouper_debug.log, /opt/grouper/logs/grouper_error.log, at min level INFO for package: edu.internet2.middleware.grouper, based on log4j.properties
    grouper.hibernate.properties: /opt/grouper/conf/grouper.hibernate.properties
    grouper.hibernate.properties: sa@jdbc:hsqldb:hsql://localhost:9001/grouper
    sources.xml read from:        /opt/grouper/conf/sources.xml
    sources.xml groupersource id: g:gsa
    sources.xml groupersource id: grouperEntities
    sources.xml jdbc source id:   jdbc: GrouperJdbcConnectionProvider
    Type help() for instructions
    Error: Cannot properly read UTF string from resource: grouperUtf8.txt: 'ٹٺٻټكلل'
    
    
    ##########################################
    # Grouper 2.3.0 Upgrade Step 1/1: Remove grouperLoaderLdapErrorUnresolvable attribute
    ##########################################
    edu.internet2.middleware.grouper.GrouperSession: 5868a5370afd4941bf3f340bf632546f,'GrouperSystem','application'
    edu.internet2.middleware.grouper.attr.AttributeDefName: AttributeDefName[name=etc:attribute:loaderLdap:grouperLoaderLdapErrorUnresolvable,uuid=799596896dd0426fb4c4e8edf9bd8a98]
    Successfully removed attribute.
    



  7. Analyze your tables. (To avoid any performance issues later.)
  8. Start the Grouper Daemon and all other Grouper components (UI/WS).
  9. The Grouper member table (grouper_members) now has a new column to store subject identifiers.  Post 2.3.0, this will be used to help improve Grouper's performance in various aspects.  You will need to configure your sources.xml file and sync the new column.  For details: Subject Identifier column in member table
  10. By default any folder owner can assign inherited privileges, which means they can get control of any descendant object.  If you do not want this you can lock down control

See Also

Release Notes for Grouper 2.3

See Also

Grouper Downloads

Grouper Changes v2.2

  1. GRP-1452

regex replace in subject source can cause issues if subject id has dollar sign

 


  • No labels