[8.0] Interpret outputPath with LFN: prefix as an absolute one - #8603
[8.0] Interpret outputPath with LFN: prefix as an absolute one#8603atsareg wants to merge 11 commits into
Conversation
|
Thank you. All seems fine to me. |
fstagni
left a comment
fstagni
left a comment
There was a problem hiding this comment.
@aldbr has added a lot of tests for JobWrapper in https://github.com/DIRACGrid/DIRAC/blob/integration/src/DIRAC/WorkloadManagementSystem/JobWrapper/test/Test_JobWrapper.py.
Can you see if (some of) those can be used here? I am always somewhat scared of changing the JobWrapper.
Yes, there are many tests to JobWrapper added to the integration/9.0 . In 8.0 there are just few. Will see if I can add something here |
| - if given as ``"LFN:/output/path"``, it will be taken as an absolute path for | ||
| output files in the logical namespace. It is the responsibility of the user to make | ||
| sure that this path is accessible for writing for the user's data. |
There was a problem hiding this comment.
I would like to double check this. What if the user is indeed "not prevented" to upload to such location, but there are no effective policies preventing it? For example, is a simple user prevented from specifying "LFN:/lhcb/user/a/anotheruser" ?
There was a problem hiding this comment.
What does prevent it now, if anything ? We've been getting around this restriction for ever by using dirac-dms-add-file directly.
There was a problem hiding this comment.
I am not trying to fix the whole loose security system of the grid, because as we know "the tokens will solve that" ™️
But at least we can try to fix one such use case server side.
There was a problem hiding this comment.
If you are feeling ambitious ;-). But I have never seen an incident like that.
eb5aa56 to
623c71b
Compare
623c71b to
c3e6be2
Compare
5 participants
This PR allows to define absolute outputPath by specifying it with the LFN: prefix.
It also allows using wild cards in outputData file names specified as LFNs
BEGINRELEASENOTES
*WorkloadManagement
NEW: JobWrapper - interpret outputPath with LFN: prefix as an absolute one
NEW: JobWrapper - allow wild cards in output LFNs
For examples look into release.notes
ENDRELEASENOTES