problem with multiple rules on the same group

Jeffrey Crawford  4 days ago
Hey,
I’ve been playing with assignMembershipDisabledDaysForOwnerGroupId. I had a question on when the grace group get applied. It looks like there is a gap between the base-policy and base-grace groups, when someone is removed from the base-policy, it takes a min for them to get added to the base-grace groups with the disable date.
Am I missing something to help bridge that gap? I can imagine that we would have 10k students to no longer be students and have the entitlement/role/groupMembership disappear and then reappear in the downstream system. They could be without access for some time while we wait for the provisioner to remove memberships and then add it back.

Chris Hyzer  4 days ago
does the "recent memberships" loader help with that?  there shouldnt be a gap there

Jeffrey Crawford  3 days ago
maybe I’m doing something wrong. my test case is creating two policy groups:
ref-employees
ref-students
two member service groups:
bol-policy
bol-grace
I’ve assigned the bol-grace the assignMembershipDisabledDaysForOwnerGroupId rule. Then the final group which drives the access bol-service which contains bol-policy and bol-grace. I added members to ref-students and ref-employees and when I remove someone from them. It seems to be gone for a while but comes back.

Jeffrey Crawford  3 days ago
okay found this page and I think I was doing this wrong:
https://spaces.at.internet2.edu/pages/viewpage.action?pageId=168690139

Jeffrey Crawford  3 days ago
okay I think this works but say for example we wanted to send emails out warning people that their membership will end in X number of days? It looks like the rule based stuff relies on the end date being populated, and that doesn’t appear to be how this one works?

Chris Hyzer  3 days ago
when exactly do you want emails sent, and just one or recurring?

Jeffrey Crawford  3 days ago
I wanted to set up grace period for some services, but also warn the user that they are under grace period. and send an email when the grace period starts and one more the day before it ends.

Jeffrey Crawford  3 days ago
Okay I’m wondering if this need to be split into two different groups:
policy-grace (uses the loader config)
policy-mail (uses combo of assignMembershipDisabledDaysForOwnerGroupId and sendEmail)

Jeffrey Crawford  3 days ago
policy-grace is used to drive the policy and the policy-mail is used to just track what’s happening on policy-grace and set end dates and email?

Jeffrey Crawford  3 days ago
@mchyzer Okay I set this up to be an option using templates, however what I’m seeing is that the policy-mail group has the settings above, and it works with assigning a membership with an end date, but the email isn’t being sent. We have this in non production so “Send all messages here” is set to our team email address, but it should still send the test emails there correct?
Added to your saved items

Jeffrey Crawford  3 days ago
here are the settings to see if this is set up correctly
Screen Shot 2022-06-14 at 2.43.09 PM.png 
Screen Shot 2022-06-14 at 2.43.09 PM.png

 

Chris Hyzer  2 days ago
i will need to try that out... there is also this email notification that with creative SQL we could do what you want, but i think the rule should work
https://spaces.at.internet2.edu/display/Grouper/Grouper+daily+email+notification

Jeffrey Crawford  2 days ago
I guess what you are saying is that if you could construct a query where a subject only shows up on the days you want the email sent then this job could do that?
Alternatively is there something somewhere when grouper tries to send an email that shows it was tried?

Chris Hyzer  1 day ago
set the smtp server in the email external system to "testing", and you should se logs of emails.
if you set logging to DEBUG for this package: edu.internet2.middleware.grouper.rules   you should see rules logs
New

Jeffrey Crawford  3 hours ago
@mchyzer,
Is it possible that you can only have one RuleApi.emailOnFlattenedDisabledDate assigned to the group at a time? I was adding two, one that was supposed to trigger when the user had a disable date set, and the other that would send a message the day before. I accidentally removed one and it suddenly started working.

Chris Hyzer  < 1 minute ago
anything is possible :slightly_smiling_face:  We can track that in a jira and get back to it :slightly_smiling_face: