Hi all,
I'm trying to isolate execute nodes by specific users using START expressions. e.g., [1]. I did one simple test [2], which appears like another user cannot hijack another Owner's name. Are there any other security implications
I should be thinking of?
Thanks,
Marty Kandes
UCSD
[1]
START = (Owner == "mkandes")
[2]
[1626] emfajard@pcf-osg ~$ condor_qedit 11676.0 Owner mkandes
Update of attribute "Owner" is not allowed.
Transaction failed. No attributes were set.
|