Difference: AuthZinMM (3 vs. 4)

Revision 42007-10-24 - SalvatoreMonforte

Line: 1 to 1
 
META TOPICPARENT name="WebHome"

How the authorization information is used in matchmaking

Line: 44 to 44
 For each defined VOView, a ClassAd representation of the CE is generated, merged with the VOView attributes and finally inserted in the ISM.
Deleted:
<
<
In order to maintain the same space of authorization rules, the splitting between the ClassAd representation of a CE and the relevant views is performed by computing the set intersection of the GlueCEAccessControlBaseRule information:

set_intersection([CE].GlueCEACBR,  [View i].GlueCEACBR)

where [CE] is the ClassAd representing the CE and [View i] is the i-th view defined for such a CE. If some entry in [CE].ACBR has not been mapped to any VOView defined for such a CE, then a CE ad with ACBR value equal to the list of such entries is also inserted in the ISM.

 In other words, for each VOView defined for a CE, the system inserts a ClassAd that is constructed by
  • taking the CE information
  • replacing the CE info with VOView info if published (i.e. EstimatedResponse-Time)
  • replacing the CE ACBR with the VOView ACBR
Changed:
<
<
After processing all the VOView for a given CE, we check whether there are ACBRs in the generic CE block which were not present in any VOView block (not mapped to any Views), or not. Accordingly, a final CE ad which comprises the CE information along with the list of the orphan CE ACBRs is generated and inserted in the ISM.
>
>
It should be pointed out that the orginal space of authorization rules should be preserved. After processing all the VOView for a given CE, we check whether there are ACBRs in the generic CE block which were not present in any VOView block (not mapped to any Views), or not. Accordingly, a final CE ad which comprises the CE information along with the list of the orphan CE ACBRs is generated and inserted in the ISM.
  As an example let’s consider the following scenario where a computing element providing access to tree different VOs has only two of these VOs bound to voviews:
 
This site is powered by the TWiki collaboration platformCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback