Fine-grained authorization for job execution in the Grid: design and implementation

• Published in: Concurrency and computation Vol. 16; no. 5; pp. 477 - 488
• Main Authors: Keahey, K., Welch, V., Lang, S., Liu, B., Meder, S.
• Format: Journal Article
• Language: English
• Published: Chichester, UK John Wiley & Sons, Ltd 25-04-2004
• Subjects: authorization; Grids; policy enforcement; resource management
• ISSN: 1532-0626; 1532-0634
• DOI: 10.1002/cpe.827

In this paper, we describe our work on enabling fine‐grained authorization for resource usage and management. We address the need of virtual organizations to enforce their own polices in addition to those of the resource owners, with regards to both resource consumption and job management. To implement this design, we propose changes and extensions to the Globus Toolkit's version 2 resource management mechanism. We describe the prototype and policy language that we have designed to express fine‐grained policies and present an analysis of our solution. Copyright © 2004 John Wiley & Sons, Ltd.