Description
Assign or remove attributes and values of attribute assignments. These attributes can be on groups, stems, members, memberships (immediate or any), attribute definitions, or on assignments of attributes (one level deep). You can pass in multiple of these operations in one batch which can be transactional or not (default).
You can lookup attributes by attribute definition name, or attribute definition id
All assignments will be filtered for security based on the logged in or acted as user (security rules are on attribute framework wiki)
The returned data will include the attribute assignments, value(s) on those assignments, and a normalized list of references (owner objects e.g. group/stem/etc, attribute definitions, attribute names, etc), if things changed or were already assigned, etc
You can assign attributes to one owner, definition, action, etc, though you can pass in multiple assignments.
attributeAssignType is a required field, must be: group, member, stem, any_mem, imm_mem, attr_def, group_asgn, mem_asgn, stem_asgn, any_mem_asgn, imm_mem_asgn, attr_def_asgn
attributeAssignOperation is required and is the operation to perform for attribute on owners, from enum AttributeAssignOperation: assign_attr, add_attr, remove_attr, replace_attrs. In this case, assigning an attribute will not assign if already there. add_attr will add this assignment even if it is already there (attribute definition must allow multi assignments)
attributeAssignValueOperation is required if passing values to assign. It is the operation to perform for attribute value on attribute assignments: assign_value, add_value, remove_value, replace_values. Like the attribute assign operation, assign_value will assign if not there, or ignore if already there. add_value will add even if assigned. And replace_values will remove orphans not in the assign list.
Features
- Can pass owners, actions, values, etc. If multiples are passed, then each attribute def name will be assigned for each action on each owner.
- Lookup owner or other objects by object lookup (by id, name, etc)
- Returns group / subject information, can be detailed or not
- Can actAs another user
Assign attributes lite service
- Accepts one group, or one subject, or stem, one attribute definition name, one action to assign, one value (optional)
- Documentation: SOAP (click on assignAttributesLite), REST (click on assignAttributesLite)
- For REST, the request can put data in query string (in URL or request body)
- REST request (colon is escaped to %3A):
- PUT /grouper-ws/servicesRest/v1_6_000/assignAttributes
- Note: if passing data in request body e.g. actAs, use a POST
- (see documentation above for details): Request object, response object
- Response codes
- Samples (all files with "Lite" in them, click on "download" to see file)
- Samples with value assignment
Get attribute assignments service
- Accepts multiple groups or subjects or memberhipIds (or combination) etc, attribute definitions, actions, etc to assign
- Documentation: SOAP (click on assignAttributes), REST (click on assignAttributes)
- REST request (colon is escaped to %3A):
- POST /grouper-ws/servicesRest/v1_6_000/assignAttributes
- (see documentation above for details): Request object, response object
- Response codes overall
- Returns an overall status
- Samples (all files without "Lite" in them, click on "download" to see files)
- Samples with value assignment