Fine-Grain Authorization Policies in the GRID: Design and Implementation

In this paper we describe our work on enabling fine-grain authorization for resource usage and management. We address the need of Virtual Organizations (VOs) to enforce their own polices in addition to those of the resource owners, both in regard to resource consumption and job management. To implement this design we propose changes and extensions to the Globus Toolkit’s version 2 (GT2) resource management mechanism. We describe the prototype and the policy language that we designed to express fine-grain policies. We then analyze our solution and describe plans for future work.