Etienne Urbah on 2010-03-17

• Propose this requirement with title  'Software components (Services and Clients) MUST ease traceability of the original author of a request'

Etienne Urbah's position on 2010-04-01

• Grid resources are very valuable for criminal organizations, and are constantly under attack
• Operational security requires that for any suspicious action, it should not be too difficult to discover the originator, even hidden behind intermediate agents
• Therefore each client or service should systematically log each local action, and global consequences if known, in a (hopefully) standard format (with timestamp, local identity, grid identity, action type, ...)
• This applies in particular for critical actions such as identity switching performed by glexec
• Traceability of the original author of a request is also very useful for accounting
• So I vote FOR this requirement

Morris, Balazs and Etienne on 2010-04-27

• Source = General
• Spreadsheet ID = 146

Amsterdam meeting on 2010-04-29

• Open  (still unclear)

PGI Telcon 2010-05-10

• Change title to 'Software components (Services and Clients) MUST ensure traceability of the original author of a request'
• Agreed YES