Changes between Version 11 and Version 12 of WebValidation

Timestamp:

Jun 7, 2010, 7:12:41 PM (14 years ago)

Author:

Neil Christensen

Comment:

--

WebValidation

@@ -31 +31 @@
     * Users can delete models.  (But only when no condor jobs are running for this model.)
     * Users can delete validations.  (But only when this validation is not being run.)
+    * Security:
+        * All user code is run on condor jobs and no where else.
+        * All mysql operations are run on head node as POST scripts and are not mingled with user code.  This allows all network connections to be closed on condor jobs (except those initiated by condor).
+        * Home dir has been unmounted from condor jobs.  So, user code does not have access to any dir other than in their virtual env.
+        * Users do not control condor.  They can only use web form to start jobs and see the outcome.
   * ''To-do'' (for this summer): 
     * Get FR-SH and FR-WO working.  (Christian Speckner is helping with WO).  This shouldn't be difficult.  The scaffolding is there.
@@ -37 +42 @@
     * Allow upload and comparison with "stock" versions of models.
     * Improve security:
-      * Move all MEG to condor nodes and unlink home dir.
       * Test that nothing can be written outside of condor job dir.
       * Test that condor job cannot do any network connections _except_ certain database updates.
-      * Control time, memory and disk space available to condor jobs.
+      * Control time, memory and disk space available to condor jobs (admin side).
     * Allow user to choose between testing development and stable FR release.
     * Versions of all software used (partly done).