Wiki Home

Grouper Release Announcements

Grouper Guides

Grouper Deployment Guide

Community Contributions

Internal Developer Resources

Membership Enabled and Disabled (Start/End) Dates  

  • Membership assignments and attributes/permissions can have enabled/disabled dates where the assignment might be enabled in the future, or disabled after a certain period of time
  • Enabled/disabled dates are supported through the UI, web services, and gsh.
  • The Grouper loader daemon is required for processing the registry periodically to set the enabled/disabled flag based on dates
  • Here is the Jira issue 

  • Example of assigning these via GSH:

    membership = group.getImmediateMembership(Group.getDefaultList(), subject, true, true);

membership.setDisabledTime(GrouperUtil.toTimestamp("2009/11/02"));

membership.update();

    * Example configuration in grouper-loader.properties

    #quartz cron-like schedule for enabled/disabled daemon.  Note, this has nothing to do with the changelog
#leave blank to disable this, the default is 12:01am, 11:01am, 3:01pm every day: 0 1 0,11,15 * * ?

changeLog.enabledDisabled.quartz.cron = 0 1 0,11,15 * * ?

#number of seconds between checks for changes in enabled/disabled status
#suggested values are between 900 and 3600

changeLog.enabledDisabled.queryIntervalInSeconds = 3600

    * Example gsh call for testing

    loaderRunOneJob("MAINTENANCE__enabledDisabled");
  • Enabled/disabled dates are called Start and End Dates in the UI.

Group Enabled and Disabled (Start/End) Dates as of Grouper v2.5+

  • Grouper supports having enabled/disabled dates set on groups as of version 2.5.
  • This is also supported through the UI, web services, and gsh.
  • When a group is expired or unexpired, the result is propagated to memberships, privileges (except admin privileges), and attributes.  In other words, those objects are also expired or unexpired.
  • Here is the Jira issue which contains more details on the changes that were made.
  • You can edit enabled/disabled dates in the UI when editing a group:

See Also

See the Overview of Access Management Features page for guidelines of when to use rules, roles, permission limits, and enabled / disabled dates.

  • No labels