[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-02 Thread Bjørn-Helge Mevik
Taras Shapovalov writes: > If I have these options in slurm.conf: > > PrivateData=jobs > MCSPlugin=mcs/group > MCSParameters=enforced,noselect,privatedata > > And if Alice is in user group A, Bob is in user group B. > Then label A will be assigned to all Alice's jobs and > label B will be

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-02 Thread Mikhail Kuzminsky
Do I undestand correctly, that detailed user restrictions for scontrol command via AdminLevel are available  only via sacctmgr and work of slurm DB ?  Mikhail >Вторник, 1 ноября 2016, 18:31 +03:00 от Kilian Cavalotti >: > > >On Tue, Nov 1, 2016 at 7:34 AM, Taras Shapovalov >< taras.shapova..

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-02 Thread Taras Shapovalov
Hi Bjørn-Helge, Thanks, this plugin looks pretty interesting! Could you just confirm my understand about the plugin: If I have these options in slurm.conf: PrivateData=jobs MCSPlugin=mcs/group MCSParameters=enforced,noselect,privatedata And if Alice is in user group A, Bob is in user grou

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-02 Thread Bjørn-Helge Mevik
There is a plugin under development, that will/might provide those features. It was presented at SLUG 16: http://slurm.schedmd.com/SLUG16/MCS.pdf -- Regards, Bjørn-Helge Mevik, dr. scient, Department for Research Computing, University of Oslo

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-01 Thread Taras Shapovalov
Kilian, thanks for the suggestion, submitted: https://bugs.schedmd.com/show_bug.cgi?id=3228 Best regards, Taras On Tue, Nov 1, 2016 at 6:32 PM, Kilian Cavalotti < kilian.cavalotti.w...@gmail.com> wrote: > > On Tue, Nov 1, 2016 at 7:34 AM, Taras Shapovalov > wrote: > > Yeah, PrivateData does n

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-01 Thread Kilian Cavalotti
On Tue, Nov 1, 2016 at 7:34 AM, Taras Shapovalov wrote: > Yeah, PrivateData does not really help here. Would be useful to see in the > future such PrivateData options like 'group' or 'account'. I'd suggest submitting this as an enhancement request at https://bugs.schedmd.com Cheers, -- Kilian

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-01 Thread Taras Shapovalov
Yeah, PrivateData does not really help here. Would be useful to see in the future such PrivateData options like 'group' or 'account'. Best regards, Taras On Tue, Nov 1, 2016 at 5:08 PM, Nathan Harper wrote: > Unfortunately those don't give quite the level of control that I was > after. It's

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-01 Thread Nathan Harper
Unfortunately those don't give quite the level of control that I was after. It's possible to make it so that a user can see nothing but their own jobs, but not their jobs, their colleagues jobs (in the same account) but no others. The only way to fudge it is to make every user with access to an

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-01 Thread Paul Edmon
For slurmdbd you can set this: *PrivateData* This controls what type of information is hidden from regular users. By default, all information is visible to all users. User *SlurmUser*, *root*, and users with AdminLevel=Admin can always view all information. Multiple values may be spec

[slurm-dev] Re: Restrict users to see only jobs of their groups

2016-11-01 Thread Nathan Harper
Hi, No solution, but a 'me too'. -- *Nathan Harper* // IT Systems Lead *e: * nathan.har...@cfms.org.uk // *t: * 0117 906 1104 // *m: * 07875 510891 // *w: * www.cfms.org.uk // [image: Linkedin grey icon scaled] C