Elements of Globus Security Policy II
A process trusts the process manager that created it. A process manager is a resource proxy that is responsible for process creation.
A process manager and the processes it creates are assumed to execute within a single trust domain.
There is a mutual trust relationship between all processes created by the same user proxy/resource proxy pair.
Access control for a resource is specified by local policy and implemented via local mechanisms.
Any Globus specific subject can be mapped into resource specific subjects (e.g. user ids) for local access control mechanisms.