Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Target release17.1.1
Bug

PP-617 : acl_groups on queue considers only primary group

PP-788 : If a user's primary group is not the same as their user name then they are not able to submit reservations when acl_resv_group_enable is set to true

Document status
DRAFT
Forum Discussion/Reviewhttp://community.pbspro.org/t/pp-617-pp-788-acl-groups-and-acl-resv-groups-will-allow-secondary-groups-to-submit-jobs-and-reservations/615
Document owner
Designer
Developers
QA

...



Interface change:

acl_groups on queue's and reservations and acl_resv_groups on server was not allowing users for whom the group set is secondary group to submit jobs and reservations respectively.

Interface change:

  • Synopsis: If a user for whom the set group on acl_groups Synopsis: pbs_server will now consider job or reservation owner's entire group membership to check against the group set for acl_groups on queues and reservations or acl_resv_groups in a secondary group job or reservation submission wont throw any error message on server respectively.
  • Visibility: Public
  • Change Control: Stable
  • Details: 
    • Prior to this change if a group is set on acl_groups for a queue or reservation and an user for whom the group is a secondary group would submit a job onto that queue or reservation , The job submission would throw an error saying pbs_server will now consider job owner's entire group membership to check against the value set for acl_groups on queues and reservation queues. pbs_server will allow all group users to submit job rather than primary group users and will not throw any error message such as "qsub: Unauthorized Request". After this change now no such error message will be thrown and job will be submitted.Prior to this change if a group is set on
    • pbs_server will now consider reservation owner's entire group membership to check against the value set for acl_resv_groups on server and an user for whom the group is a secondary group would submit a reservation , The reservation submission would throw an error saying . pbs_server will allow all group users to submit reservation rather than primary group users and will not throw any error message such as "pbs_rsub: Requestor's group not authorized to submit reservations". After this change now no such error message will be thrown and reservation will be submitted.