accesscontroltool Simplify Migration

If we need to migrate any user either name change or change the path to a different location, we have to run the yaml rules (all the aces), however the actual change is linked only with group creation, members migration & group deletion. Can this operation be added to the JMX console?

Mar 29 '17 19:03 chetanyajain

With https://github.com/Netcentric/accesscontroltool/blob/develop/docs/Configuration.md#configuration-of-groups migrateFrom you can rename groups while maintaining their members, is it that what you need? Would you like to have an operation that only performs the groups maintenance (and leaves ACLs unchanged)?

Mar 30 '17 11:03 ghenzler

Georg, I have been using migrateFrom but that enforces us to define the acls as well if I just need to rename a group or move to a different folder/path. So you are right - an operation that just performs group maintenance.

Mar 30 '17 16:03 chetanyajain

@chetanyajain, to achieve this you can run java.lang.String execute(java.lang.String paths) in JMX with a path like /does-not-exist which will do all the "group work" but skip the ACEs with a message like Will install AC Config at 0 paths (skipping 758 due to paths restriction [/does-not-exist])

This has been available since v1.9.2

Mar 30 '17 20:03 ghenzler

This will still force me to define the yaml with all the ACEs. Is there a possibility of defining the method Migrate(currentId, newId, path) or something similar where currentId -> Current id of the user / group newId -> New id of the user/group (optional: if specified it will migrate current to new id) path -> path of the where this user needs to be (optional: i.e. if specified it will move to new path)

Mar 30 '17 20:03 chetanyajain