You are here: Questions and Answers › Is it possible to give a person a workspace but …

Questions and Answers: Closed Question

Status: Closed

Alisa Neeman

Is it possible to give a person a workspace but not allow submit from the workspace?

Is it possible to give a person a workspace but not allow submit from the workspace? Or limit the clusters to which the user can submit?

What I would like is that the user can use an application through the portal, have the output written to their workspace, and pick up the output via sftp.

But at the same time, they cannot run submit directly from their workspace. this is because they will be restricted as what cliusters they have access to through the portal.

Can this be done? How would i do it?

Tags:

Report abuse

Chosen Answer

  1. 0 Dislike

    Steven Clark

    There currently are three forms of restriction that can be placed on submit job submission.

    – Each tool can be restricted to use by specific individuals or groups. This restriction is configured through the tool.dat file in /opt/submit.
    – Each site can be configured to accept only jobs described by the tools.dat file. This is done by denying submission of arbitrary commands in the sites.dat file in /opt/submit.
    – Arbitrary command submission also requires membership in the group submit.

    The submit command does not make any distinction between submission from a workspace or from a tool session. Does there need to be such a differentiation?

    Report abuse

    1. Alisa Neeman

      Maybe. Suppose a hub can submit jobs to clusters at Site A and Site B. I have a workspace and am in group submit. Site A wants me to develop tools for them. Site B allows me to use their open source tools but not their licensed tools. I am a member of the group for site A and for site B. But site B doesn’t want me to submit from a workspace since submit can access licensed software on their cluster.

      Report abuse

Responses (0)

No other responses made.