|
A process trusts the process manager that created it. A process manager is a resource proxy that is responsible for process creation.
|
|
A process manager and the processes it creates are assumed to execute within a single trust domain.
|
|
There is a mutual trust relationship between all processes created by the same user proxy/resource proxy pair.
|
|
Access control for a resource is specified by local policy and implemented via local mechanisms.
|
|
Any Globus specific subject can be mapped into resource specific subjects (e.g. user ids) for local access control mechanisms.
|
