Enterprise Authorization Working Group Meeting Minutes 2008-6-19

The group helped discuss the problem and current situation regarding authorization within our applications
- We discussed shadow data, code duplication/maintainability, decentralization, etc.
- Scott mentioned that he is suffering from the exact same problems and is inline with out goals
- Discussed proposed solutions
  - Signet+Grouper
  - Vendor: Sun/Novell
Departmental support was discussed
- John mentioned he might have issues with the new Dean
- Scott mentioned that his director supports anything that Scott supports
Neil shared his knowledge of UCLA's plan
- They have funding for four employees
- However, they are focusing on the UI specifically. This only marginally benefits our cause

- UCLA plans on using Grouper itself to manage access control
  - John pointed out reasons why this would not work at UCI
    - The number of necessary groups could quickly balloon out of control
We discussed our concerns about Signets maturity rate
- There was a roadblock in terms of the architecture of the Hooks + Plugins framework
- There is still a fairly low adoption rate
Initial discussions about group definitions began
- Initially, Communications would only need around 6 groups for 25 users. This number would grow fairly slowly for quite sometime and then quickly grow in a very short period of time
- The A&BS groups could quickly create a few thousand groups
  - For example: Should there be a group for each title code? Home Dept Code? etc.
  - The FS, Payroll, and Home Department hierarchies are a must
- John mentioned that he could use the academic groups (provided by the registrar) to solve many of his problems, but certainly not all without using signet as well.

All are to look over the group definitions and augment, redefine, or suggest exclusion of the provided groups
Dana to setup vendor demo meetings with Novell and Sun
Neil work with Dana and/or Steve to try to get Sun Access Manager up and running?
Scott to get in touch with his EEE contacts