Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 629901

Summary:	[RFE] Add approval mechanism for running job on a system user has not permissions for
Product:	[Retired] Beaker	Reporter:	Marian Csontos <mcsontos>
Component:	scheduler	Assignee:	Nick Coghlan <ncoghlan>
Status:	CLOSED WONTFIX	QA Contact:
Severity:	medium	Docs Contact:
Priority:	low
Version:	0.5	CC:	bpeck, dcallagh, jburke, kbaker, llim, mcsontos, rmancy
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	GroupModel
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-15 08:24:17 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	629902

Description Marian Csontos 2010-09-03 08:37:23 UTC

The current system does not allow users queuing jobs on systems they have no permissions for. One has to loan the machine first, which is not what we want in such case. When the job ends the user could (and often will) forget to return it.

Adding approvals to beaker would enable queuing such a jobs:
- jobs would remain in the queue until approved
- owner would get notified on any such request and could Approve/Deny access
- user would get notified after Owner A/D the access
- on deny the job would be marked cancelled with Owner's comment

Add a field for justification of request. This will help keep track why's the system in use by unauthorized person.

Comment 1 Marian Csontos 2010-09-03 08:47:56 UTC

Approvals should be optional per system and requester:

- people in these groups will {always/never} require approval
- systems in these groups will {always/newer} require approval
- systems in certain group will {always/never} require approval for people in following groups:...

Comment 2 Nick Coghlan 2012-10-17 04:40:05 UTC

Bulk reassignment of issues as Bill has moved to another team.

Comment 3 Nick Coghlan 2013-04-15 08:24:17 UTC

We have no current plans to support a queue with manual intervention for third party system access.

Instead, we plan to implement a more flexible prioritization system that allows system owners to grant access to other users, while still allowing jobs from the appropriate groups to have higher priority. See http://beaker-project.org/dev/proposals/effective-job-priorities.html for more details.