allow not having every entity assigned to attribute privileges automatically

----Original Message----
From: grouper-users-request@internet2.edu grouper-users-request@internet2.edu On Behalf Of Kumi Hagimoto
Sent: Thursday, August 17, 2017 12:11 PM
To: grouper-users@internet2.edu
Subject: [grouper-users] Attribute Privilege for EveryEntity

Hello,

I noticed yesterday that EveryEntity had a few Attribute privileges that we
didn't recall adding. They were:

entitySubjectIdentifierDef (Read,Update)
limitsDef (Read, Update)
limitsDefInt (Read,Update)
limitsDefMarker (Read,Update)

I removed all of these privileges in DEV and things seemed to work fine. This
morning, one of the attributes (entitySubjectIdentifierDef) were added back
automatically.

I'm guessing entitySubjectIdentifierDef was needed for something, but what's
adding it back and why does it need to be a global privilege? Also, does it
need the other three as well (although it hasn't been auto-added back)?

Thanks,
Kumi