[GE users] Privacy in SGE

Reuti reuti at staff.uni-marburg.de
Mon Aug 28 23:18:11 BST 2006


Am 28.08.2006 um 23:35 schrieb Iwona Sakrejda:

>
>
> Chris MacPhee wrote:
>
>> By default, any user can query the job status of any other user  
>> via SGE
>> tools.  This presents a privacy risk - a user can determine the email
>> address (and other info) of another.  This is also true of the cell's
>> spool directory - any user can investigate job scripts.
>> Has anyone attempted to firm up the privacy of SGE, such that  
>> commands
>> will only provide information to the job owner?  Or played with
>> permissions within the cell spool directory?
>
> If those changes are implemented, please remember that lots of  
> users work
> in groups and it is essential for them to have access to group  
> workload.
> I am actually facing an oposite issue. How users could modify/ 
> delete jobs
> started by other users in the same group.
>
> The cluster over all runs on group fair share and I have just one  
> queue
> for everybody and all works just fine. But there are times when groups
> of users run production in shifts and person who started takes a  
> break and
> another one should be able to take over if unforseen circumstances  
> occur.
> Right now they have to find me or my colleague to help them out.
> Ids there a way give a group control over group's jobs?

Well, you could make some of them an operator in SGE (qconf -ao  
<user>) with limited access to SGE's configuration options, but then  
they could also delete jobs of other groups. - Reuti

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
For additional commands, e-mail: users-help at gridengine.sunsource.net




More information about the gridengine-users mailing list