Synopsis

    supervisor_default_security = comma-separated list of permission names or an integer mask

    This parameter specifies the security settings for a user who has not been explicitly granted a permission set.

    If you wish to use the integer value instead of the comma-separated list, add up the base-10 integer values to determine a composite permission setting, or perform a logical OR operation on the hexadecimal values (bet no one's ever done that...) and then convert them to decimal. In the case of high security systems, you will probably not want to allow any permissions to general users unless specified.

    Values

    Submission Permissions

    nameinteger value (base 10)hex (base16)description
    submit_job10x1submit new jobs
    submit_callback20x2submit jobs with callbacks
    submit_global_callback40x4submit jobs with global callbacks


    General Permissions

    Icon

    The general permissions only apply to a user's own jobs unless they have been granted the "admin" privilege.

    nameinteger valuehex (base16)description
    bump80x8modify job priority without reordering the queue
    kill160x10kill jobs
    remove320x20remove jobs from the Supervisor database
    modify640x40modify job properties after submission
    preempt1280x80preempt jobs
    block2560x100block jobs and take them out of the active queue
    interrupt5120x200interrupt jobs
    complete10240x400set an active job's status to "complete"
    unblock20480x800unblock jobs and put them back into the queue
    suspend40960x1000suspend jobs
    resume81920x2000resume suspended jobs
    retry163840x4000retry jobs
    requeue327680x8000requeue jobs
    migrate655360x10000migrate job processes to different Workers
    shove1310720x20000shove jobs
    fail2621440x40000set an active job's status to "fail"
    retire5242880x80000retire jobs
    reset10485760x100000reset capabilities


    Administrative Permissions

    nameinteger value (base 10)hex (base16)description
    lock_host1342177280x8000000lock/unlock a Worker machine
    sudo_admin2684354560x10000000set user as Sudo Administrator
    impersonate5368709120x20000000allows users to submit jobs as other users
    admin10737418240x40000000allow user to manage others jobs

    Example

    supervisor_default_security = 1048564
    supervisor_default_security = kill,bump

    Defaults

    supervisor_default_security = submit_job,submit_callback,kill,remove,modify,preempt,block,unblock,interrupt,
                                  complete,suspend,resume,retry,requeue,migrate,shove,fail,retire,reset,lock_host
    supervisor_default_security = 136314867

    Notes

    The default value (136314867) is a combination of all non-admin permissions except "bump", plus the lock_host privilege.

     

     

    • No labels