Synopsis
supervisor_default_security = comma-separated list of permission names or an integer mask
...
If you wish to use the integer value instead of the comma-separated list, add up the base-10 integer values to determine a composite permission setting, or perform a logical OR operation on the hexadecimal values (bet no one's ever done that...) and then convert them to decimal. In the case of high security systems, one you will probably not want to allow any permissions to all general users unless specified.
Values
Submission Permissions
| name | integer value (base 10) | hex (base16) | description |
|---|---|---|---|
| submit_job | 1 | 0x1 | submit new jobs |
| submit_callback | 2 | 0x2 | submit jobs with callbacks |
| submit_global_callback | 4 | 0x4 | submit jobs with global callbacks |
...
| name | integer value (base 10) | hex (base16) | description |
|---|---|---|---|
| lock_host | 134217728 | 0x8000000 | lock/unlock a Worker machine |
| sudo_admin | 268435456 | 0x10000000 | set user as Sudo Administrator |
| impersonate | 536870912 | 0x20000000 | allows users to submit jobs as other users |
| admin | 1073741824 | 0x40000000 | allow user to manage others jobs |
Example
supervisor_default_security = 1048564
supervisor_default_security = kill,bump
...
supervisor_default_security = submit_job,submit_callback,kill,remove,modify,preempt,block,unblock,interrupt,
complete,suspend,resume,retry,requeue,migrate,shove,fail,retire,reset,lock_host
supervisor_default_security = 136314867
...