Bug 629901 - [RFE] Add approval mechanism for running job on a system user has not permissions for
Summary: [RFE] Add approval mechanism for running job on a system user has not permiss...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Beaker
Classification: Retired
Component: scheduler
Version: 0.5
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Nick Coghlan
QA Contact:
URL:
Whiteboard: GroupModel
Depends On:
Blocks: 629902
TreeView+ depends on / blocked
 
Reported: 2010-09-03 08:37 UTC by Marian Csontos
Modified: 2013-04-15 08:24 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2013-04-15 08:24:17 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 809027 0 high CLOSED RFE: beaker should permit schedule jobs anywhere (private pools of another teams included) 2021-02-22 00:41:40 UTC

Internal Links: 809027

Description Marian Csontos 2010-09-03 08:37:23 UTC
The current system does not allow users queuing jobs on systems they have no permissions for. One has to loan the machine first, which is not what we want in such case. When the job ends the user could (and often will) forget to return it.

Adding approvals to beaker would enable queuing such a jobs:
- jobs would remain in the queue until approved
- owner would get notified on any such request and could Approve/Deny access
- user would get notified after Owner A/D the access
- on deny the job would be marked cancelled with Owner's comment

Add a field for justification of request. This will help keep track why's the system in use by unauthorized person.

Comment 1 Marian Csontos 2010-09-03 08:47:56 UTC
Approvals should be optional per system and requester:

- people in these groups will {always/never} require approval
- systems in these groups will {always/newer} require approval
- systems in certain group will {always/never} require approval for people in following groups:...

Comment 2 Nick Coghlan 2012-10-17 04:40:05 UTC
Bulk reassignment of issues as Bill has moved to another team.

Comment 3 Nick Coghlan 2013-04-15 08:24:17 UTC
We have no current plans to support a queue with manual intervention for third party system access.

Instead, we plan to implement a more flexible prioritization system that allows system owners to grant access to other users, while still allowing jobs from the appropriate groups to have higher priority. See http://beaker-project.org/dev/proposals/effective-job-priorities.html for more details.


Note You need to log in before you can comment on or make changes to this bug.