PP-617: PP-788: acl_groups and acl_resv_groups will allow secondary groups to submit jobs and reservations

PP-617: PP-788: acl_groups and acl_resv_groups will allow secondary groups to submit jobs and reservations

Target release

17.1.1

Bug

PP-617 : acl_groups on queue considers only primary group

PP-788 : If a user's primary group is not the same as their user name then they are not able to submit reservations when acl_resv_group_enable is set to true

Document status

DRAFT

Forum Discussion/Review

http://community.pbspro.org/t/pp-617-pp-788-acl-groups-and-acl-resv-groups-will-allow-secondary-groups-to-submit-jobs-and-reservations/615

Document owner

@Vishesh Hadimane

Designer

@Václav Chlumský

Developers

@Václav Chlumský

QA

 

Interface change:

  • Synopsis: pbs_server will now consider job or reservation owner's entire group membership to check against the group set for acl_groups on queues and reservations or acl_resv_groups on server respectively.

  • Visibility: Public

  • Change Control: Stable

  • Details: 

    • pbs_server will now consider job owner's entire group membership to check against the value set for acl_groups on queues and reservation queues. pbs_server will allow all group users to submit job rather than primary group users and will not throw any error message such as "qsub: Unauthorized Request"

    • pbs_server will now consider reservation owner's entire group membership to check against the value set for acl_resv_groups on server. pbs_server will allow all group users to submit reservation rather than primary group users and will not throw any error message such as "pbs_rsub: Requestor's group not authorized to submit reservations"