Uniform Authorization Management in ChinaGrid Support Platform

摘要

Users in grid computing environments typically interact with a lot of computing resource, storage resources and I/O devices. Different users are allowed to access different subsets of services, resources. These permissions should be executed correctly to guarantee the security of grid computing. In ChinaGrid Support Platform (CGSP), there are large numbers of users, services, and resources. To ensure the security of CGSP, we build a user management mechanism to identify every entity, assign different rights based on user role and the properties of services and resources to ensure containers, services and resources in CGSP being used in a right way, and return the results to the correct user. We also consider the access control of files. These are designed in a uniform authorization management mechanism in CGSP.