Changes between Version 32 and Version 33 of SPIDocs

Timestamp:

Oct 13, 2014 5:13:28 PM (10 years ago)

Author:

faber

Comment:

--

SPIDocs

@@ -34 +34 @@
   A realization is the binding of resources to an experiment.  Users can inspect and modify such bindings in carrying out their experiments.
 
-We describe each of these in more detail below.  They are interrelated and the descriptions link to one another in this document.  We intend for readers to jump between sections to help intuition.
+
+Projects and circles are related in that they control access to testbed resources.  
+
+Membership in an approved project means a user can access testbed
+resources in general.  They've been trusted directly or by transitivity
+by the testbed administration to have "an account" to which usage can be
+charged and responsibility delegated.  Projects must be approved by
+administrators to confer rights. 
+
+Membership in a circle allows users to specify fine grained access
+between one another.  None of the circle memberships are effective
+unless the user is also in an approved project.  Circles do not need to
+be vetted by admins because their powers are gated by projects.
+
+Being in a project means a user can use DETERLab.  Being in the circle of
+users that can read an experiment means a user can use that particular
+experiment in that particular way (assuming that the user is in an approved
+project). 
+
+We describe each of these abstractions in more detail below.  They are interrelated and the descriptions link to one another in this document.  We intend for readers to jump between sections to help intuition.
 
 === The Implementation ===