SRM ACLs on spaces Sample Clauses

SRM ACLs on spaces. The syntax and semantic proposed for SRM ACLs for spaces are based on NFSv4 minor version 1 draft 21. An Access Control Entry (ACE) is a record associated with space reservation. Each ACE is defined as following: aceType, subject, subjectType, accessMask where aceType can be ALLOWED_ACE or DENIED_ACE; subject can be DN or FQAN. Empty DN/FQAN is interpreted as ANY (a reserved name can be used, e.g. EVERYONE ); subjectType specifies if the subject is a DN or FQAN; accessMask is a list set of actions associated with this ACE. The valid actions are: RELEASE_SPACE UPDATE_SPACE READ_FROM_SPACE WRITE_TO_SPACE STAGE_TO_SPACE PURGE_FROM_SPACE QUERY_SPACE MODIFY_SPACE_ACL TODO: Each SpaceManager operation have to be associated with corresponding access mask. Some 'read' operation can be in reality 'write' ( like srmPrepareToGet ). Access control list (ACL) is an ordered array of ACEs. Only ACEs which have a subject that matches the requester are considered. Each ACE is processed until all of the bits of the requester's access have been ALLOWED. Once a bit has been ALLOWED by an ALLOWED_ACE, it is no longer considered in the processing of later ACEs. If a DENIED_ACE is encountered where the requester's access still has ALLOWED bits in common with the accessMask of the ACE, the request is denied (in other words: to ALLOW all bits have to be checked, while for DENY one matching is sufficient). When the ACL is fully processed, if there are bits in the requester's mask that have not been ALLOWED or DENIED, access is denied. The following syntax can be used to set/display ACLs: subjectType:subject:accessMask:aceType Example: production write, admin all, regular user read, others – deny fqan:dteam/Role=production:RSWQP:ALLOW fqan:dteam/Role=lcgamin:DURWSPQM:ALLOW fqan:dteam/Role=NULL:RSQ:ALLOW fqan:EVERYONE:DURWSPQM:DENY read, no stage: fqan:EVERYONE:R:ALLOW fqan:EVERYONE:S:DENY power user: dn:/O=GermanGrid/OU=DESY/CN=Xxxxxx Xxxxxxxxx:S:ALLOW fqan:EVERYONE:RQ:ALLOW fqan:EVERYONE:S:DENY where accessMask is: 'D' for RELEASE_SPACE 'U' for UPDATE_SPACE 'R' for READ_FROM_SPACE 'W' for WRITE_TO_SPACE 'P' for PURGE_FROM_SPACE 'Q' for QUERY_SPACE 'M' for MODIFY_SPACE_ACL While we do not have ONWER and DEFAULT ACL, all newly created reservation will have de facto default : fqan:EVERYONE:DURWSPQM:DENY dn:EVERYONE:DURWSPQM:DENY To overcome this situation the following strategy can be used: if there is an ACL associated with Space Reservation, than the ACL is respected, otherwise acce...
AutoNDA by SimpleDocs

Related to SRM ACLs on spaces

  • Access to Premises Landlord, its agents, servants, or employees may enter the Premises at reasonable times with reasonable advance notice to Tenant (or an authorized employee of Tenant at the Premises), and at any time, upon reasonable notice to Tenant under the circumstances, in an emergency, to do the following: inspect the Premises; comply with all laws, orders, ordinances and requirements of any governmental unit or authority for which Landlord may be responsible under this Lease, if any; show the Premises to prospective lenders or purchasers and, during the ninety (90) days immediately prior to the expiration of this Lease if Tenant declines to renew for an additional term in accordance with the provisions of this Lease, to prospective tenants, but only if all such showings are accompanied by a representative of Tenant if so requested by Tenant; or post (on the Development, but not within or at the entrance of the Premises) for sale or for lease signs; provided; however, that all such entries shall be completed promptly in a good workmanlike manner so as to cause the least practical interference to Tenant’s business and Tenant’s use of the Premises. In all events, Landlord shall use commercially reasonable efforts to minimize interference with the Premises and Tenant’s business operations thereon. If Landlord’s entry materially and substantially interferes with the conduct of Tenant’s business and/or cause damage to Tenant’s property (and the entry is not needed because of Tenant’s default, negligence or willful misconduct), then in such event the rent and any sums due and payable as additional rents, shall xxxxx in proportion to the extent of the interference and Landlord shall be liable for any damage to Tenant’s property.

  • Union Access to Premises Representatives of the Union shall have access to the Company’s premises to carry on inspections or investigations pertaining to the terms and conditions of this Agreement, upon reasonable advance notice to the Company. Such access shall be carried on at reasonable hours and in such a manner so as not to interfere with the normal operations of the Company. The Union will advise the Company of its designated representatives who wish to gain access to the premises and the Union agrees to comply with all reasonable Company security precautions as may be in force from time to time.

  • Use of Basement and Service Areas The basement(s) and service areas, if any, as located within the (project name), shall be earmarked for purposes such as parking spaces and services including but not limited to electric sub-station, transformer, DG set rooms, underground water tanks, pump rooms, maintenance and service rooms, fire fighting pumps and equipment's etc. and other permitted uses as per sanctioned plans. The Allottee shall not be permitted to use the services areas and the basements in any manner whatsoever, other than those earmarked as parking spaces, and the same shall be reserved for use by the association of allottees formed by the Allottees for rendering maintenance services.

  • Access to the Premises Except as provided by local ordinance, after a good faith effort to give notice, the Lessor, its agents or employees shall have access at all reasonable hours to the leased premises for the purpose of examining or exhibiting the premises to prospective buyers or prospective residents, or for making alterations or repairs on the premises which the Lessor deems necessary. Lessor shall have access at all reasonable hours to perform Lessee requested repairs, unless indicated to the contrary by Lessee. In the event of an emergency, Lessor, its agents or employees shall have immediate access without notice.

  • Vacating Premises (i) If the Assuming Bank elects not to purchase any owned Bank Premises, the notice of such election in accordance with Section 4.6(a) shall specify the date upon which the Assuming Bank's occupancy of such premises shall terminate, which date shall not be later than ninety (90) days after the date of the Assuming Bank's notice not to exercise such option. The Assuming Bank promptly shall relinquish and release to the Receiver such premises and the Furniture and Equipment and Fixtures located thereon in the same condition as at Bank Closing, normal wear and tear excepted. By occupying any such premises after the expiration of such ninety (90)-day period, the Assuming Bank shall, at the Receiver's option, (x) be deemed to have agreed to purchase such Bank Premises, and to assume all leases, obligations and liabilities with respect to leased Furniture and Equipment and leased Fixtures located thereon and any ground lease with respect to the land on which such premises are located, and (y) be required to purchase all Furniture and Equipment and Fixtures owned by the Failed Bank and located on such premises as of Bank Closing.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!