Context Navigation

ThreatAnalysis

v13	v14
3	3	The primary motivation for using role-based access control with the ORBIT Testbed is to insure that every user has sufficient access to each and every ORBIT resource that he or she needs to perform each phase of an experiment without giving each user root privileges. Each identifiable task of each phase of each type of experiment could be a role, and a user need only have certain privileges when acting in a given role.
4	4
5		A longer term goal is to ~~automate the administration of projects and project members using RBAC's administrative function~~s. Once a project was defined and a Project Leader assigned to it, that Project Leader would be able to add ORBIT users and add project members and assign them roles within the project as he or she sees fit.
	5	A longer term goal is to simplify the administration of ORBIT projects and project members using RBAC's administrative functions by delegating project administration to project leaders. Once a project was defined and a Project Leader assigned to it, that Project Leader would be able to add ORBIT users and add project members and assign them roles within the project as he or she sees fit.
6	6
7	7	Because ORBIT is designed to be operated as a service available to the research community, no one experiment should affect a future one, and each project must be protected from other projects.