Page History

Grouper Web Services

Description

Get permission assignments.  These permissions can be on roles or subjects (note if assignment is assigned directly to a subject, it is in the context of a role).

...

• Can base permission assign list based on action, active, etc
• Lookup owner or other objects by object lookup (by id, name, etc)
• Returns role / subject information etc, can be detailed or not
• Can actAs another user
• For 2.0+, you can pass in pointInTimeFrom and pointInTimeTo to check permissions at a certain point in time in the past, or in a date range. This should be formatted: yyyy/MM/dd HH:mm:ss.SSS

Get permission assignments lite service

• Accepts one role, or one subject, or attribute definition, or attribute definition name to get permission assignments for.   You can mix and match, but at least one must be passed in (e.g. you can query for a subject's permissions in a role)
• Documentation: SOAP (click on getPermissionAssignmentsLite), REST (click on getPermissionAssignmentsLite)
• For REST, the request can put data in query string (in URL or request body)
• REST request (colon is escaped to %3A):
  • GET /grouper-ws/servicesRest/v1_6_000/permissionAssignments
  • Note: if passing data in request body e.g. actAs, use a POST
• (see documentation above for details): Request object, response object
• Response codes
• Samples (all files with "Lite" in them, click on "download" to see file)

...

• Accepts multiple roles or subjects or attribute definitions (or combination) etc to retrieve lists of permission assignments
• Documentation: SOAP (click on getPermissionAssignments), REST (click on getPermissionAssignments)
• REST request (colon is escaped to %3A):
  • POST /grouper-ws/servicesRest/v1_6_000/permissionAssignments
• (see documentation above for details): Request object, response object
• Response codes overall
• Returns an overall status
• Samples (all files without "Lite" in them, click on "download" to see files)