Grouper custom template via GSH Internet2 example

import edu.internet2.middleware.grouper.app.attestation.*;
import edu.internet2.middleware.grouper.attr.assign.*;
import edu.internet2.middleware.grouper.privs.*;
 
String workingGroupFolderName = "ref:incommon-collab:" + gsh_input_workingGroupExtension;
  
// default value for display extension is just the extension
String displayExtension = GrouperUtil.defaultIfBlank(gsh_input_workingGroupDisplayExtension, gsh_input_workingGroupExtension);
  
// we dont want the word "null" printed out if this is null, so convert to empty string if this is null
gsh_input_workingGroupDescription = GrouperUtil.defaultString(gsh_input_workingGroupDescription);
  
// validate first
// Check if working group folder exists
Stem workingGroupFolder = StemFinder.findByName(gsh_builtin_grouperSession, workingGroupFolderName, false);
if (workingGroupFolder != null) {
  gsh_builtin_gshTemplateOutput.addValidationLine("gsh_input_workingGroupExtension","Error: working group extension '" + gsh_input_workingGroupExtension + "' already exists!");
}
  
// Check gsh_input_sympaDomain if gsh_input_isSympa
if (gsh_input_isSympa && GrouperUtil.isBlank(gsh_input_sympaDomain)) {
  gsh_builtin_gshTemplateOutput.addValidationLine("gsh_input_sympaDomain","Error: Sympa domain is required if provisioning to Sympa");
}
  
String sympaFolderName = null;
  
if (gsh_input_isSympa) {
  sympaFolderName = "app:sympa:" + gsh_input_sympaDomain + ":" + gsh_input_workingGroupExtension;
  Stem sympaFolder = StemFinder.findByName(gsh_builtin_grouperSession, sympaFolderName, false);
  if (sympaFolder != null) {
    gsh_builtin_gshTemplateOutput.addValidationLine("gsh_input_workingGroupExtension", "Error: sympa folder '" + sympaFolderName + "' already exists!");
  }
}
  
String confluenceFolderName = null;
  
if (gsh_input_isConfluence) {
  confluenceFolderName = "app:confluence:" + gsh_input_workingGroupExtension;
  Stem confluenceFolder = StemFinder.findByName(gsh_builtin_grouperSession, confluenceFolderName, false);
  if (confluenceFolder != null) {
    gsh_builtin_gshTemplateOutput.addValidationLine("gsh_input_workingGroupExtension","Error: confluence folder '" + confluenceFolderName + "' already exists!");
  }
}
  
String jiraFolderName = null;
  
if (gsh_input_isJira) {
  jiraFolderName = "app:jira:" + gsh_input_workingGroupExtension;
  Stem jiraFolder = StemFinder.findByName(gsh_builtin_grouperSession, jiraFolderName, false);
  if (jiraFolder != null) {
    gsh_builtin_gshTemplateOutput.addValidationLine("gsh_input_workingGroupExtension","Error: jira folder '" + jiraFolderName + "' already exists!");
  }
}
  
// Do not proceed is there is an error
if (GrouperUtil.length(gsh_builtin_gshTemplateOutput.getValidationLines()) > 0) {
  gsh_builtin_gshTemplateOutput.assignIsError(true);
  GrouperUtil.gshReturn();
} 

// Create working group folder
Stem workingGroupFolder = new StemSave().assignName(workingGroupFolderName).assignDisplayExtension(displayExtension).assignDescription("Folder holds working group roles.  " + gsh_input_workingGroupDescription).save();
gsh_builtin_gshTemplateOutput.addOutputLine("Folder created: " + workingGroupFolderName);

// Create users group
Group usersGroup = new GroupSave().assignName(workingGroupFolderName + ":users").assignDisplayExtension(displayExtension + " users").assignDescription("Users role means members of the working group with access to collaboration tools.  " + gsh_input_workingGroupDescription).save();
gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + usersGroup.getName());

if (gsh_input_isOptin) {
  usersGroup.grantPriv(SubjectFinder.findAllSubject(), AccessPrivilege.OPTIN, false);  
  gsh_builtin_gshTemplateOutput.addOutputLine("Granted optin to all for: " + usersGroup.getName());

  usersGroup.grantPriv(SubjectFinder.findAllSubject(), AccessPrivilege.OPTOUT, false);  
  gsh_builtin_gshTemplateOutput.addOutputLine("Granted optout to all for: " + usersGroup.getName());
}

// Create admins group
Group adminsGroup = new GroupSave().assignName(workingGroupFolderName + ":admins").assignDisplayExtension(displayExtension + " admins").assignDescription("Admins role means can manage / attest the working group.  " + gsh_input_workingGroupDescription).save();
gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + adminsGroup.getName());

// If the initial admin is passed in
if (gsh_builtin_subject != null && GrouperUtil.equals("ldap", gsh_builtin_subject.getSourceId())) {

  // add the initial admin to be in the admins group
  new MembershipSave().assignGroup(adminsGroup).assignSubject(gsh_builtin_subject).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added admin: " + gsh_builtin_subject.getId() + " to group: " + adminsGroup.getName());
} else {
  // if not resolvable thats just a warning
  gsh_builtin_gshTemplateOutput.addOutputLine("info","Warning: admin subject not resolvable or in wrong source '" + gsh_builtin_subjectId + "'");

}

// Assign privs for admins on folder
new PrivilegeGroupInheritanceSave().assignStem(workingGroupFolder).addPrivilegeName("admin").assignSubject(adminsGroup.toSubject()).save();
gsh_builtin_gshTemplateOutput.addOutputLine("Assigned group admin privileges to: " + adminsGroup.getName() + " inherited from folder: " + workingGroupFolder.getName());

// Assign attestation on working group folder
new AttestationStemSave().assignStemName(workingGroupFolderName).assignDaysUntilRecertify(gsh_input_attestationDays).save();
gsh_builtin_gshTemplateOutput.addOutputLine("Assigned attestation to folder: " + workingGroupFolderName);
 
// sympa folder
if (gsh_input_isSympa) {
  Stem sympaFolder = new StemSave().assignName(sympaFolderName).assignDisplayExtension(displayExtension + " sympa").assignDescription("Folder email lists for working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Folder created: " + sympaFolder.getName());

  // Create admins group
  Group ownersGroup = new GroupSave().assignName(sympaFolderName + ":owners").assignDisplayExtension(displayExtension + " sympa owners").assignDescription("Owners list manages the email list for the working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + ownersGroup.getName());

  // Create subscribers group
  Group subscribersGroup = new GroupSave().assignName(sympaFolderName + ":subscribers").assignDisplayExtension(displayExtension + " sympa subscribers").assignDescription("Subscribers list receives working group emails.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + subscribersGroup.getName());

  // Add admin group to owners group
  new MembershipSave().assignGroup(ownersGroup).assignSubject(adminsGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added member: " + adminsGroup.getName() + " to group: " + ownersGroup.getName());

  // Add users group to subscribers group
  new MembershipSave().assignGroup(subscribersGroup).assignSubject(usersGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added member: " + usersGroup.getName() + " to group: " + subscribersGroup.getName());

  // Assign privs for admins on folder
  new PrivilegeGroupInheritanceSave().assignStem(sympaFolder).addPrivilegeName("admin").assignSubject(adminsGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Assigned group admin privileges to: " + adminsGroup.getName() + " inherited from folder: " + sympaFolder.getName());

  // Add moderated marker attribute to sympa folder if gsh_input_isSympa and gsh_input_isSympaModerated
  if (gsh_input_isSympaModerated ) {
     
    // Assign a sympa attribute to the sympa folder for midpoint
    new AttributeAssignToStemSave().assignStem(sympaFolder).assignNameOrAttributeDefName("app:sympa:attribute:moderated").save();
    gsh_builtin_gshTemplateOutput.addOutputLine("Assigned attribute: app:sympa:attribute:moderated to: " + sympaFolder.getName());
  }
   
  // Assign attestation at sympa
  new AttestationStemSave().assignStem(sympaFolder).assignDaysUntilRecertify(gsh_input_attestationDays).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Assigned attestation to folder: " + sympaFolder.getName());
 
}

if (gsh_input_isConfluence) {
  Stem confluenceFolder = new StemSave().assignName(confluenceFolderName).assignDisplayExtension(displayExtension + " confluence").assignDescription("Confluence groups for working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Folder created: " + confluenceFolder.getName());

  // Create admins group
  Group confluenceAdminsGroup = new GroupSave().assignName(confluenceFolderName + ":admins").assignDisplayExtension(displayExtension + " confluence admins").assignDescription("Admins of confluence space for working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + confluenceAdminsGroup.getName());

  // Create users group
  Group confluenceUsersGroup = new GroupSave().assignName(confluenceFolderName + ":users").assignDisplayExtension(displayExtension + " confluence users").assignDescription("Users of confluence space for working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + confluenceUsersGroup.getName());

  // Add admin group to owners group
  new MembershipSave().assignGroup(confluenceAdminsGroup).assignSubject(adminsGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added member: " + adminsGroup.getName() + " to group: " + confluenceAdminsGroup.getName());

  // Add users group to subscribers group
  new MembershipSave().assignGroup(confluenceUsersGroup).assignSubject(usersGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added member: " + usersGroup.getName() + " to group: " + confluenceUsersGroup.getName());

  // Assign privs for admins on folder
  new PrivilegeGroupInheritanceSave().assignStem(confluenceFolder).addPrivilegeName("admin").assignSubject(confluenceAdminsGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Assigned group admin privileges to: " + confluenceAdminsGroup.getName() + " inherited from folder: " + confluenceFolder.getName());

  // Assign attestation at confluence
  new AttestationStemSave().assignStem(confluenceFolder).assignDaysUntilRecertify(gsh_input_attestationDays).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Assigned attestation to folder: " + confluenceFolder.getName());

}

// jira folder
if (gsh_input_isJira) {
  Stem jiraFolder = new StemSave().assignName(jiraFolderName).assignDisplayExtension(displayExtension + " jira").assignDescription("Admins of jira project for working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Folder created: " + jiraFolder.getName());

  // Create admins group
  Group jiraAdminsGroup = new GroupSave().assignName(jiraFolderName + ":admins").assignDisplayExtension(displayExtension + " jira admins").assignDescription("Users of jira project for working group.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + jiraAdminsGroup.getName());

  // Create users group
  Group jiraUsersGroup = new GroupSave().assignName(jiraFolderName + ":users").assignDisplayExtension(displayExtension + " jira users").assignDescription("Subscribers list receives working group emails.  " + gsh_input_workingGroupDescription).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Group created: " + jiraUsersGroup.getName());

  // Add admin group to owners group
  new MembershipSave().assignGroup(jiraAdminsGroup).assignSubject(adminsGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added member: " + adminsGroup.getName() + " to group: " + jiraAdminsGroup.getName());

  // Add users group to subscribers group
  new MembershipSave().assignGroup(jiraUsersGroup).assignSubject(usersGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Added member: " + usersGroup.getName() + " to group: " + jiraUsersGroup.getName());

  // Assign privs for admins on folder
  new PrivilegeGroupInheritanceSave().assignStem(jiraFolder).addPrivilegeName("admin").assignSubject(jiraAdminsGroup.toSubject()).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Assigned group admin privileges to: " + jiraAdminsGroup.getName() + " inherited from folder: " + jiraFolder.getName());

  // Assign attestation at jira
  new AttestationStemSave().assignStem(jiraFolder).assignDaysUntilRecertify(gsh_input_attestationDays).save();
  gsh_builtin_gshTemplateOutput.addOutputLine("Assigned attestation to folder: " + jiraFolder.getName());
 
}

gsh_builtin_gshTemplateOutput.addOutputLine("Finished executing template: " + gsh_input_workingGroupExtension); 

    import edu.internet2.middleware.grouper.app.gsh.template.*;
    GrouperSession.startRootSession();
    
    GshTemplateExec exec = new GshTemplateExec();
    exec.assignConfigId("createNewWorkingGroup");
    Subject subject = SubjectFinder.findByIdAndSource("chris.hubing@at.internet2.edu", "ldap", true)
    exec.assignCurrentUser(subject);
    
    exec.assignGshTemplateOwnerType(GshTemplateOwnerType.stem);
    exec.assignOwnerStemName("ref:incommon-collab"); // run the script from test2 folder
    
    GshTemplateInput input = new GshTemplateInput();
    input.assignName("gsh_input_workingGroupExtension");
    input.assignValueString("myGroup");
    exec.addGshTemplateInput(input);
    input = new GshTemplateInput();
    input.assignName("gsh_input_workingGroupDisplayExtension");
    input.assignValueString("My group");
    exec.addGshTemplateInput(input);
    input = new GshTemplateInput();
    input.assignName("gsh_input_workingGroupDescription");
    input.assignValueString("My working group will do a lot of group work");
    exec.addGshTemplateInput(input);
    input = new GshTemplateInput();
    input.assignName("gsh_input_isSympa");
    input.assignValueString("true");
    exec.addGshTemplateInput(input);
    input = new GshTemplateInput();
    input.assignName("gsh_input_sympaDomain");
    input.assignValueString("internet2");
    exec.addGshTemplateInput(input);
    input = new GshTemplateInput();
    input.assignName("gsh_input_isSympaModerated");
    input.assignValueString("true");
    exec.addGshTemplateInput(input);
    
    // when
    GshTemplateExecOutput output = exec.execute();
    
    // then
    System.out.println("Success: " + output.isSuccess());
    if (!output.isSuccess() && output.getException() != null) {
      System.out.println(output.getExceptionStack());
    }
    System.out.println("Valid: " + output.isValid());
    System.out.println("Validation:");
    for (GshValidationLine gshValidationLine : output.getGshTemplateOutput().getValidationLines()) {
      System.out.println(gshValidationLine.getInputName() + ": " + gshValidationLine.getText());
    }
    System.out.println("Output from script:");
    for (GshOutputLine gshOutputLine : output.getGshTemplateOutput().getOutputLines()) {
      System.out.println(gshOutputLine.getMessageType() + ": " + gshOutputLine.getText());
    }
    System.out.println("Script output:");
    System.out.println(output.getGshScriptOutput());
    

Success: true
Valid: true
Validation:
Output from script:
success: Folder created: ref:incommon-collab:myGroup
success: Group created: ref:incommon-collab:myGroup:users
success: Group created: ref:incommon-collab:myGroup:admins
success: Assigned group admin privileges to: ref:incommon-collab:myGroup:admins inherited from folder: ref:incommon-collab:myGroup
success: Folder created: app:sympa:internet2:myGroup
success: Group created: app:sympa:internet2:myGroup:owners
success: Group created: app:sympa:internet2:myGroup:subscribers
success: Added member: ref:incommon-collab:myGroup:admins to group: app:sympa:internet2:myGroup:owners
success: Added member: ref:incommon-collab:myGroup:users to group: app:sympa:internet2:myGroup:subscribers
success: Assigned group admin privileges to: ref:incommon-collab:myGroup:admins inherited from folder: app:sympa:internet2:myGroup
success: Finished executing template: myGroup

{
  "WsRestGshTemplateExecRequest":{
    "gshTemplateActAsSubjectLookup": {
      "subjectSourceId":"ldap",
      "subjectId":"eisbruch@at.internet2.edu"
    },
    "ownerStemLookup":{
      "stemName":"ref:incommon-collab"
    },
    "ownerType":"stem",
    "configId":"createNewWorkingGroup",
    "inputs":[
      {
        "name":"gsh_input_workingGroupExtension",
        "value":"test"
      },
      {
        "name":"gsh_input_workingGroupDisplayExtension",
        "value":"Test"
      },     
      {
        "name":"gsh_input_workingGroupDescription",
        "value":"This is a test."
      },     
      {
        "name":"gsh_input_isSympa",
        "value":"true"
      },     
      {
        "name":"gsh_input_sympaDomain",
        "value":"incommon"
      },     
      {
        "name":"gsh_input_isSympaModerated",
        "value":"false"
      },     
      {
        "name":"gsh_input_isOptin",
        "value":"true"
      },     
      {
        "name":"gsh_input_attestationDays",
        "value":"78"
      },     
      {
        "name":"gsh_input_isConfluence",
        "value":"true"
      },     
      {
        "name":"gsh_input_isJira",
        "value":"true"
      }
    ]
  }
}

{
  "WsGshTemplateExecResult": {
    "resultMetadata": {
      "success": "T",
      "resultCode": "SUCCESS",
      "resultMessage": "Success for: clientVersion: 2.5.0, configId: createNewWorkingGroup, ownerType: stem , inputs: Array size: 6: [0]: edu.internet2.middleware.grouper.ws.coresoap.WsGshTemplateInput@4ce20936\n[1]: edu.internet2.middleware.grouper.ws.coresoap.WsGshTemplateInput@421fb26b\n[2]: edu.internet2.middlew...\n, actAsSubject: null, paramNames: \n, params: null"
    },
    "gshScriptOutput": "groovy:001> import edu.internet2.middleware.grouper.app.gsh.template.*;\ngroovy:002> import edu.internet2.middleware.grouper.util.*;\ngroovy:003> GshTemplateOutput gsh_builtin_gshTemplateOutput = GshTemplateOutput.retrieveGshTemplateOutput(); \n===> edu.internet2.middleware.grouper.app.gsh.template.GshTemplateOutput@abf4469\ngroovy:004> GshTemplateRuntime gsh_builtin_gshTemplateRuntime = GshTemplateRuntime.retrieveGshTemplateRuntime(); \n===> edu.internet2.middleware.grouper.app.gsh.template.GshTemplateRuntime@4aa02244\ngroovy:005> GrouperSession gsh_builtin_grouperSession = gsh_builtin_gshTemplateRuntime.getGrouperSession();\n===> fa3a616b1fe5426dbeb573f6accba9ab,'GrouperSystem','application'\ngroovy:006> Subject gsh_builtin_subject = gsh_builtin_gshTemplateRuntime.getCurrentSubject();\n===> Subject id: comanage_provision, sourceId: ldap, name: comanage_provision\ngroovy:007> String gsh_builtin_subjectId = \"comanage_provision\";\n===> comanage_provision\ngroovy:008> String gsh_builtin_ownerStemName = \"ref:incommon-collab\";\n===> ref:incommon-collab\ngroovy:009> String gsh_input_workingGroupExtension = \"test\";\n===> test\ngroovy:010> String gsh_input_workingGroupDisplayExtension = \"Test\";\n===> Test\ngroovy:011> String gsh_input_workingGroupDescription = \"This is a test.\";\n===> This is a test.\ngroovy:012> Boolean gsh_input_isSympa = true;\n===> true\ngroovy:013> String gsh_input_sympaDomain = \"incommon\";\n===> incommon\ngroovy:014> Boolean gsh_input_isSympaModerated = false;\n===> false\ngroovy:015> import edu.internet2.middleware.grouper.app.attestation.*;\ngroovy:016> import edu.internet2.middleware.grouper.attr.assign.*;\ngroovy:017>  \ngroovy:018> String workingGroupFolderName = \"ref:incommon-collab:\" + gsh_input_workingGroupExtension;\n===> ref:incommon-collab:test\ngroovy:019>   \ngroovy:020> // default value for display extension is just the extension\ngroovy:021> String displayExtension = GrouperUtil.defaultIfBlank(gsh_input_workingGroupDisplayExtension, gsh_input_workingGroupExtension);\n===> Test\ngroovy:022>   \ngroovy:023> // we dont want the word \"null\" printed out if this is null, so convert to empty string if this is null\ngroovy:024> gsh_input_workingGroupDescription = GrouperUtil.defaultString(gsh_input_workingGroupDescription);\n===> This is a test.\ngroovy:025>   \ngroovy:026> // validate first\ngroovy:027> // Check if working group folder exists\ngroovy:028> Stem workingGroupFolder = StemFinder.findByName(gsh_builtin_grouperSession, workingGroupFolderName, false);\ngroovy:029> if (workingGroupFolder != null) {\ngroovy:030>   gsh_builtin_gshTemplateOutput.addValidationLine(\"gsh_input_workingGroupExtension\",\ngroovy:031>     \"Error: working group extension '\" + gsh_input_workingGroupExtension + \"' already exists!\");\ngroovy:032> }\ngroovy:033>   \ngroovy:034> // Check gsh_input_sympaDomain if gsh_input_isSympa\ngroovy:035> if (gsh_input_isSympa && GrouperUtil.isBlank(gsh_input_sympaDomain)) {\ngroovy:036>   gsh_builtin_gshTemplateOutput.addValidationLine(\"gsh_input_sympaDomain\",\ngroovy:037>     \"Error: Sympa domain is required if provisioning to Sympa\");\ngroovy:038> }\ngroovy:039>   \ngroovy:040> String sympaFolderName = null;\ngroovy:041>   \ngroovy:042> if (gsh_input_isSympa) {\ngroovy:043>   sympaFolderName = \"app:sympa:\" + gsh_input_sympaDomain + \":\" + gsh_input_workingGroupExtension;\ngroovy:044>   Stem sympaFolder = StemFinder.findByName(gsh_builtin_grouperSession, sympaFolderName, false);\ngroovy:045>   if (workingGroupFolder != null) {\ngroovy:046>     gsh_builtin_gshTemplateOutput.addValidationLine(\"gsh_input_workingGroupExtension\",\ngroovy:047>       \"Error: sympa folder '\" + sympaFolderName + \"' already exists!\");\ngroovy:048>   }\ngroovy:049> }\ngroovy:050>   \ngroovy:051> // Do not proceed is there is an error\ngroovy:052> if (GrouperUtil.length(gsh_builtin_gshTemplateOutput.getOutputLines()) > 0) {\ngroovy:053>   gsh_builtin_gshTemplateOutput.assignIsError(true);\ngroovy:054> } else {\ngroovy:055>   \ngroovy:056>   // Create working group folder\ngroovy:057>   Stem workingGroupFolder = new StemSave().assignName(workingGroupFolderName).assignDisplayExtension(displayExtension)\ngroovy:058>     .assignDescription(\"Folder holds working group roles.  \" + gsh_input_workingGroupDescription).save();\ngroovy:059>   gsh_builtin_gshTemplateOutput.addOutputLine(\"Folder created: \" + workingGroupFolderName);\ngroovy:060>   \ngroovy:061>   // Create users group\ngroovy:062>   Group usersGroup = new GroupSave().assignName(workingGroupFolderName + \":users\")\ngroovy:063>     .assignDisplayExtension(displayExtension + \" users\")\ngroovy:064>     .assignDescription(\"Users role means members of the working group with access to collaboration tools.  \"\ngroovy:065>        + gsh_input_workingGroupDescription).save();\ngroovy:066>   gsh_builtin_gshTemplateOutput.addOutputLine(\"Group created: \" + usersGroup.getName());\ngroovy:067>   \ngroovy:068>   // Create admins group\ngroovy:069>   Group adminsGroup = new GroupSave().assignName(workingGroupFolderName + \":admins\")\ngroovy:070>     .assignDisplayExtension(displayExtension + \" admins\")\ngroovy:071>     .assignDescription(\"Admins role means can manage / attest the working group.  \" + gsh_input_workingGroupDescription).save();\ngroovy:072>   gsh_builtin_gshTemplateOutput.addOutputLine(\"Group created: \" + adminsGroup.getName());\ngroovy:073>   \ngroovy:074>   // If the initial admin is passed in\ngroovy:075>   if (gsh_builtin_subject != null && GrouperUtil.equals(\"ldap\", gsh_builtin_subject.getSourceId())) {\ngroovy:076>   \ngroovy:077>     // add the initial admin to be in the admins group\ngroovy:078>     new MembershipSave().assignGroup(adminsGroup).assignSubject(gsh_builtin_subject).save();\ngroovy:079>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Added admin: \" + gsh_builtin_subject.getId() + \" to group: \" + adminsGroup.getName());\ngroovy:080>   } else {\ngroovy:081>     // if not resolvable thats just a warning\ngroovy:082>     gsh_builtin_gshTemplateOutput.addOutputLine(\"info\",\ngroovy:083>       \"Warning: admin subject not resolvable or in wrong source '\" + gsh_builtin_subjectId + \"'\");\ngroovy:084>   \ngroovy:085>   }\ngroovy:086>   \ngroovy:087>   // Assign privs for admins on folder\ngroovy:088>   new PrivilegeGroupInheritanceSave().assignStem(workingGroupFolder)\ngroovy:089>       .addPrivilegeName(\"admin\").assignSubject(adminsGroup.toSubject()).save();\ngroovy:090>   gsh_builtin_gshTemplateOutput.addOutputLine(\"Assigned group admin privileges to: \" + adminsGroup.getName() + \" inherited from folder: \" + workingGroupFolder.getName());\ngroovy:091>   \ngroovy:092>   // Assign attestation on working group folder\ngroovy:093>   new AttestationStemSave().assignStemName(workingGroupFolderName).assignDaysUntilRecertify(90).save();\ngroovy:094>   gsh_builtin_gshTemplateOutput.addOutputLine(\"Assigned attestation to folder: \" + workingGroupFolderName);\ngroovy:095>    \ngroovy:096>   // sympa folder\ngroovy:097>   if (gsh_input_isSympa) {\ngroovy:098>     Stem sympaFolder = new StemSave().assignName(sympaFolderName).assignDisplayExtension(displayExtension + \" sympa\")\ngroovy:099>       .assignDescription(\"Folder email lists for working group.  \" + gsh_input_workingGroupDescription).save();\ngroovy:100>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Folder created: \" + sympaFolder.getName());\ngroovy:101>   \ngroovy:102>     // Create admins group\ngroovy:103>     Group ownersGroup = new GroupSave().assignName(sympaFolderName + \":owners\")\ngroovy:104>       .assignDisplayExtension(displayExtension + \" sympa owners\")\ngroovy:105>       .assignDescription(\"Owners list manages the email list for the working group.  \" + gsh_input_workingGroupDescription).save();\ngroovy:106>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Group created: \" + ownersGroup.getName());\ngroovy:107>   \ngroovy:108>     // Create subscribers group\ngroovy:109>     Group subscribersGroup = new GroupSave().assignName(sympaFolderName + \":subscribers\")\ngroovy:110>       .assignDisplayExtension(displayExtension + \" sympa subscribers\")\ngroovy:111>       .assignDescription(\"Subscribers list receives working group emails.  \" + gsh_input_workingGroupDescription).save();\ngroovy:112>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Group created: \" + subscribersGroup.getName());\ngroovy:113>   \ngroovy:114>     // Add admin group to owners group\ngroovy:115>     new MembershipSave().assignGroup(ownersGroup).assignSubject(adminsGroup.toSubject()).save();\ngroovy:116>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Added member: \" + adminsGroup.getName() + \" to group: \" + ownersGroup.getName());\ngroovy:117>   \ngroovy:118>     // Add users group to subscribers group\ngroovy:119>     new MembershipSave().assignGroup(subscribersGroup).assignSubject(usersGroup.toSubject()).save();\ngroovy:120>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Added member: \" + usersGroup.getName() + \" to group: \" + subscribersGroup.getName());\ngroovy:121>   \ngroovy:122>     // Assign privs for admins on folder\ngroovy:123>     new PrivilegeGroupInheritanceSave().assignStem(sympaFolder)\ngroovy:124>       .addPrivilegeName(\"admin\").assignSubject(adminsGroup.toSubject()).save();\ngroovy:125>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Assigned group admin privileges to: \" + adminsGroup.getName() + \" inherited from folder: \" + sympaFolder.getName());\ngroovy:126>   \ngroovy:127>     // Add moderated marker attribute to sympa folder if gsh_input_isSympa and gsh_input_isSympaModerated\ngroovy:128>     if (gsh_input_isSympaModerated ) {\ngroovy:129>        \ngroovy:130>       // Assign a sympa attribute to the sympa folder for midpoint\ngroovy:131>       new AttributeAssignToStemSave().assignStem(sympaFolder).assignNameOrAttributeDefName(\"app:sympa:attribute:moderated\").save();\ngroovy:132>       gsh_builtin_gshTemplateOutput.addOutputLine(\"Assigned attribute: app:sympa:attribute:moderated to: \" + sympaFolder.getName());\ngroovy:133>     }\ngroovy:134>      \ngroovy:135>     // Assign attestation at sympa\ngroovy:136>     new AttestationStemSave().assignStem(sympaFolder).assignDaysUntilRecertify(90).save();\ngroovy:137>     gsh_builtin_gshTemplateOutput.addOutputLine(\"Assigned attestation to folder: \" + sympaFolder.getName());\ngroovy:138>  \ngroovy:139>   }\ngroovy:140> }\n===> edu.internet2.middleware.grouper.app.gsh.template.GshTemplateOutput@abf4469\ngroovy:141> gsh_builtin_gshTemplateOutput.addOutputLine(\"Finished executing template: \" + gsh_input_workingGroupExtension);\n===> edu.internet2.middleware.grouper.app.gsh.template.GshTemplateOutput@abf4469",
    "gshOutputLines": [
      {
        "messageType": "success",
        "text": "Folder created: ref:incommon-collab:test"
      },
      {
        "messageType": "success",
        "text": "Group created: ref:incommon-collab:test:users"
      },
      {
        "messageType": "success",
        "text": "Group created: ref:incommon-collab:test:admins"
      },
      {
        "messageType": "success",
        "text": "Added admin: comanage_provision to group: ref:incommon-collab:test:admins"
      },
      {
        "messageType": "success",
        "text": "Assigned group admin privileges to: ref:incommon-collab:test:admins inherited from folder: ref:incommon-collab:test"
      },
      {
        "messageType": "success",
        "text": "Assigned attestation to folder: ref:incommon-collab:test"
      },
      {
        "messageType": "success",
        "text": "Folder created: app:sympa:incommon:test"
      },
      {
        "messageType": "success",
        "text": "Group created: app:sympa:incommon:test:owners"
      },
      {
        "messageType": "success",
        "text": "Group created: app:sympa:incommon:test:subscribers"
      },
      {
        "messageType": "success",
        "text": "Added member: ref:incommon-collab:test:admins to group: app:sympa:incommon:test:owners"
      },
      {
        "messageType": "success",
        "text": "Added member: ref:incommon-collab:test:users to group: app:sympa:incommon:test:subscribers"
      },
      {
        "messageType": "success",
        "text": "Assigned group admin privileges to: ref:incommon-collab:test:admins inherited from folder: app:sympa:incommon:test"
      },
      {
        "messageType": "success",
        "text": "Assigned attestation to folder: app:sympa:incommon:test"
      },
      {
        "messageType": "success",
        "text": "Finished executing template: test"
      }
    ],
    "responseMetadata": {
      "serverVersion": "2.5.44",
      "millis": "28553"
    },
    "gshValidationLines": [],
    "transaction": false
  }
}