grouper loader security for group and admins

----Original Message----
From: Kumi Hagimoto
Sent: Thursday, April 06, 2017 1:07 PM
To: grouper-users@internet2.edu
Subject: Re: RE: [grouper-users] grouper loader management in UI

Hi Chris,

We've applied the required patches and have loader menus in UI now. We'd like
to disable access to group admins so in grouper-ui.properties, I set

uiV2.loader.view.by.group.admins = false

However, the group admin (not sysadmin) is still able to see the "Loader" menu
under More tab and is able to run the loader, view log, etc. The two loader
menus from the "More actions" button is gone however.

I also tried setting uiV2.loader.must.be.in.group to a group where this group
admin was not a member. Still see the Loader menu under More tab, except an
error is generated when this group admin user tries to access it. Error is:
"Error: Problem calling method loader on
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2GrouperLoader"

What am I doing wrong?
Please let me know if you need more details from the logs.
Thanks!
Kumi