Page History

...

At the time of writing, the attribute mechanism in Grouper is not overly user friendly or intuitive to use. We would not want our end users to have to go through the complicated process of setting an attribute on a group. Our front-end to Grouper called "Manifest" allows a group administrator to easily set what EntityIDs they want their group released to:

Generic Implementation (with Default Release)

<resolver:DataConnector id="udsDB3" xsi:type="dc:RelationalDatabase" readOnlyConnection="false" queryTimeout="PT3S">
  <resolver:Dependency ref="SubjectID"/>
  <dc:BeanManagedConnection>TheGrouperDatabase</dc:BeanManagedConnection>
  <dc:QueryTemplate><![CDATA[
      #if (${SubjectID.size()} > 0)
          SELECT DISTINCT GROUPER_MEMBERSHIPS_LW_V.GROUP_NAME 
          FROM GROUPER_AVAL_ASN_GROUP_V 
          JOIN GROUPER_MEMBERSHIPS_LW_V 
          USING (GROUP_ID)
          WHERE SUBJECT_ID='$SubjectID.get(0)'
              AND GROUPER_AVAL_ASN_GROUP_V.ATTRIBUTE_DEF_NAME_NAME='control:attr:ShibEntityId'
              AND (VALUE_STRING = '$requestContext.getPeerEntityId()' OR VALUE_STRING='DEFAULT')
              AND GROUPER_AVAL_ASN_GROUP_V.ENABLED='T'
      #else
          SELECT 1 FROM DUAL
      #end
  ]]></dc:QueryTemplate>
 </resolver:DataConnector>

...