PP-617: PP-788: acl_groups and acl_resv_groups will allow secondary groups to submit jobs and reservations

Target release17.1.1
Bug

PP-617 : acl_groups on queue considers only primary group

PP-788 : If a user's primary group is not the same as their user name then they are not able to submit reservations when acl_resv_group_enable is set to true

Document status
DRAFT
Forum Discussion/Reviewhttp://community.pbspro.org/t/pp-617-pp-788-acl-groups-and-acl-resv-groups-will-allow-secondary-groups-to-submit-jobs-and-reservations/615
Document owner
Designer
Developers
QA


Interface change:

  • Synopsis: pbs_server will now consider job or reservation owner's entire group membership to check against the group set for acl_groups on queues and reservations or acl_resv_groups on server respectively.
  • Visibility: Public
  • Change Control: Stable
  • Details: 
    • pbs_server will now consider job owner's entire group membership to check against the value set for acl_groups on queues and reservation queues. pbs_server will allow all group users to submit job rather than primary group users and will not throw any error message such as "qsub: Unauthorized Request"
    • pbs_server will now consider reservation owner's entire group membership to check against the value set for acl_resv_groups on server. pbs_server will allow all group users to submit reservation rather than primary group users and will not throw any error message such as "pbs_rsub: Requestor's group not authorized to submit reservations"