Apache Airavata Sharing Service
1 like76 views
1. User collaboration is an important but overlooked aspect of science gateways. 2. The document describes the design and implementation of a sharing service for enabling user collaboration in science gateways. 3. The sharing service integrates with the Apache Airavata framework and provides a generic tool for granting and revoking access permissions on experiments and other resources.
Apache Airavata Sharing Service
- 1. Apache Airavata Sharing Service: A Tool for Enabling User Collaboration in Science Gateways Supun Nakandala Indiana University
- 3. Science centric user environments that enable broader and more effective use of scientific computing resources, applications, and data. Science Gateways ?
- 5. How can we make Science Gateways like Google Drive? (Box, DropBox, etc…)
- 12. User1: Grant READ access to Group1 on Experiment1 and its children
- 13. User1: Grant READ access to Group1 on Experiment1 and its children User1: Grant PERMISSION_GRANT access to User3 on Project1 and its children
- 15. Owner: User1 Group1 User1: Grant Access to Group1 on Resource User1: Grant Access to Group1 on Application
- 16. IU Group SEAGrid Admin: Grant Access to IU_Group on BigRed11
- 17. Requirement 1 Grant and revoke permissions Requirement 2 Check permission for a given entity Requirement 3 Browse and search within all accessible entities Requirement 4 Efficient and generic implementation System Requirements
- 20. Sharing Service Generic first-class component to handle diverse user collaboration aspects
- 21. Sharing Service Generic first-class component to handle diverse user collaboration aspects Group Management, Registering Entities, Definition and Enforcement of Sharing Rules
- 23. Grant and revoke permissions
- 24. Grant and revoke permissions Grant User1 READ access on Project1 Project1 Experiment1 File1 User1:READ
- 25. Grant and revoke permissions Grant User1 READ access on Project1 Project1 Experiment1 File1 User1:READ Grant User1 READ access on Project1 and it’s children Project1 Experiment1 File1 User1:READ User1:READ inherited from Project1 User1:READ inherited from Experiment1
- 26. Check permission for a given entity Check User1 has READ access on Experiment1
- 27. Check permission for a given entity Check User1 has READ access on Experiment1 Project1 Experiment1 User1:READ
- 28. Check permission for a given entity Check User1 has READ access on Experiment1 Project1 Experiment1 User1:READ Project1 Experiment1 Group1:READ
- 29. Check permission for a given entity Check User1 has READ access on Experiment1 Project1 Experiment1 User1:READ Project1 Experiment1 Group1:READ Project1 Experiment1 User1: READ User1:READ inherited from Project1
- 30. Check permission for a given entity Check User1 has READ access on Experiment1 Project1 Experiment1 User1:READ Project1 Experiment1 Group1:READ Project1 Experiment1 User1: READ User1:READ inherited from Project1 Project1 Experiment1 User1:READ_WRITE
- 31. Check permission for a given entity Check User1 has READ access on Experiment1 Project1 Experiment1 User1:READ Project1 Experiment1 Group1:READ Project1 Experiment1 User1: READ User1:READ inherited from Project1 Project1 Experiment1 User1:READ_WRITE And other possible combinations…
- 32. Browse/search entities for a user Get entities of type Experiment where User1 has READ access and Experiment.name Like ‘Gaussian’ Experiment Name Owner Application Compute Resource Gaussian_Nonb ornane User1 Gaussian16 bigred2.uits.iu.ed u test_Gaussian User2 Gaussian09 comet.sdsc.edu Gaussian_benze ne User1 Gaussian16 comet.sdsc.edu Search Experiments:
- 33. Browse/search entities for a user Get entities of type Experiment where User1 has READ access and Experiment.name Like ‘Gaussian’ Experiment Name Owner Application Compute Resource Gaussian_Nonb ornane User1 Gaussian16 bigred2.uits.iu.ed u test_Gaussian User2 Gaussian09 comet.sdsc.edu Gaussian_benze ne User1 Gaussian16 comet.sdsc.edu Search Experiments:
- 35. Efficient, and generic implementation 1. Relational database backed ApacheThrift based Java Service
- 36. Efficient, and generic implementation 1. Relational database backed ApacheThrift based Java Service 2. Optimized relational queries
- 37. Efficient, and generic implementation 1. Relational database backed ApacheThrift based Java Service 2. Optimized relational queries 3. Customizable types, hierarchies
- 38. Efficient, and generic implementation 4. Enforcement of the semantics of the permissions are left to the client application 1. Relational database backed ApacheThrift based Java Service 2. Optimized relational queries 3. Customizable types, hierarchies
- 39. SEAGrid enables sharing of Projects and Experiments with Read and Write permissions with other gateway users
- 40. User interface listing sharing summary
- 41. Related Work 1. Internet2 Grouper
- 42. Related Work 1. Internet2 Grouper 2. Globus Data Sharing
- 43. Related Work 1. Internet2 Grouper 2. Globus Data Sharing 3. SeedMe and HubZero
- 45. Why from Scratch? 1. Internet2 Grouper was our closest alternative
- 46. Why from Scratch? 1. Internet2 Grouper was our closest alternative 2. Can support most of our requirements efficiently but not all Search Experiments:
- 47. Why from Scratch? 1. Internet2 Grouper was our closest alternative 2. Can support most of our requirements efficiently but not all Search Experiments: 3. Light-weight solution which is easily integratabtle and deplorable with Airavata and cater Gateway requirements
- 48. Summary 1. User collaboration is a largely overlooked yet important aspect in Science Gateways.
- 49. Summary 1. User collaboration is a largely overlooked yet important aspect in Science Gateways. 2.Wide variety of gateway collaboration requirements in Gateways can be supported using a general purpose tool
- 50. Summary 1. User collaboration is a largely overlooked yet important aspect in Science Gateways. 2.Wide variety of gateway collaboration requirements in Gateways can be supported using a general purpose tool 3. Design and implementation of the system.
- 51. Summary 1. User collaboration is a largely overlooked yet important aspect in Science Gateways. 2.Wide variety of gateway collaboration requirements in Gateways can be supported using a general purpose tool 3. Design and implementation of the system. 4. Integrated with Apache Airavata framework and provide as a hosted service.
- 52. Summary 1. User collaboration is a largely overlooked yet important aspect in Science Gateways. 2.Wide variety of gateway collaboration requirements in Gateways can be supported using a general purpose tool 3. Design and implementation of the system. 4. Integrated with Apache Airavata framework and provide as a hosted service. Thank You !!! snakanda@iu.edu
- 53. • https://www.mnnonline.org/wp-content/uploads/2014/09/VictoriaEstrella.com_collaboration-10-01-14.jpg • http://science.sciencemag.org/content/328/5977/463/F2.large.jpg • http://www.cleaner.com/images/uploads/IMG_4934.jpg • https://fthmb.tqn.com/BL5a1no5jOT3k9kKLznnK1C4pEg=/768x0/filters:no_upscale()/about/ FacebookWall-SS-56a9fcfe5f9b58b7d0005fdd.jpg • https://cdn2.iconfinder.com/data/icons/occupations-2/500/occupation-29-512.png • http://scientec.com.mx/wp-content/uploads/2016/10/Gaussian-16.png • https://i1.wp.com/www.tech-coffee.net/wp-content/uploads/2015/11/room-full-of-computer-servers.jpg? zoom=2&resize=620%2C330&ssl=1 • https://www.globus.org/sites/default/files/how_it_works-sharing@2x.png • https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSMBMjHlQzpRztuXSb8jqsui- ZZSwf5lU4MiZUd7ZVZO2OADnsVC9Iv-LU Image Credits
- 54. Summary 1. User collaboration is a largely overlooked yet important aspect in building Science Gateways. 2.Wide variety of gateway collaboration requirements in Gateways can be supported using a general purpose tool 3. Design and implementation of the system. 4. Integrated with Apache Airavata framework and provide as a hosted service. Thank You !!! snakanda@iu.edu