super_root features - Githubissues

stfc / rucio

Rucio - Scientific Data Management

http://rucio.cern.ch

Apache License 2.0

0 stars 0 forks source link

super_root features #17

Closed elichad closed 4 years ago

elichad commented 4 years ago

[ ] Core
- [x] Add VO (including root account and corresponding identity)
- [x] Recover identity for root
- [x] VO exists (Andrew)
- [x] List VOs (Andrew)
- [x] Edit VO
- [ ] Remove VO
[ ] API
- [x] Add VO
- [x] List VOs (Andrew)
- [x] Edit VO
- [ ] Remove VO
[x] Initialise super_root with VO 'def'

No REST, Client or CLI layer for super_root features. Super_root should not have permissions for administration within a specific VO (e.g. adding users).

patrick-austin commented 4 years ago

Functionality for adding VOs is already present, however permissions to do this may need to be altered (and considered for the other features such as listing VOs) based on how the super_root is set up.

patrick-austin commented 4 years ago

Adding super_root account to 'def' when multi_vo == True is already handled by lib/rucio/db/sqla/util.py create_root_account, which is called by tools/bootstrap.py and tools/reset_database.py.

patrick-austin commented 4 years ago

Follow discussion with Martin, have decided not to implement a VO deletion feature. Practically it would require disabling all accounts/RSEs associated with the VO before it could be deleted/suspended, and in doing so the VO would be rendered effectively functionless anyway.