1. User collaboration is an important but overlooked aspect of science gateways. 2. The document describes the design and implementation of a sharing service for enabling user collaboration in science gateways. 3. The sharing service integrates with the Apache Airavata framework and provides a generic tool for granting and revoking access permissions on experiments and other resources.

1. Apache Airavata Sharing Service:
A Tool for Enabling User Collaboration
in Science Gateways
Supun Nakandala
Indiana University

3. Science centric user environments
that enable broader and more
effective use of scientific computing
resources, applications, and data.
Science Gateways ?

5. How can we make Science
Gateways like Google Drive?
(Box, DropBox, etc…)

10. Gateway
Do Science
Collaborate

12. User1: Grant READ access to Group1 on
Experiment1 and its children

13. User1: Grant READ access to Group1 on
Experiment1 and its children
User1: Grant PERMISSION_GRANT access
to User3 on Project1 and its children

14. Owner: User1
Group1

15. Owner: User1
Group1
User1: Grant Access to
Group1 on Resource
User1: Grant Access to
Group1 on Application

16. IU Group
SEAGrid Admin: Grant Access to IU_Group
on BigRed11

17. Requirement 1
Grant and revoke
permissions
Requirement 2
Check permission for a given
entity
Requirement 3
Browse and search within all
accessible entities
Requirement 4
Efficient and generic
implementation
System Requirements

19. Collaboration Aspects

20. Sharing Service
Generic first-class component to handle
diverse user collaboration aspects

21. Sharing Service
Generic first-class component to handle
diverse user collaboration aspects
Group Management, Registering Entities, Definition and Enforcement
of Sharing Rules

23. Grant and revoke permissions

24. Grant and revoke permissions
Grant User1 READ access
on Project1
Project1
Experiment1
File1
User1:READ

25. Grant and revoke permissions
Grant User1 READ access
on Project1
Project1
Experiment1
File1
User1:READ
Grant User1 READ access
on Project1 and it’s children
Project1
Experiment1
File1
User1:READ
User1:READ inherited
from Project1
User1:READ inherited
from Experiment1

26. Check permission for a given
entity
Check User1 has READ access on Experiment1

27. Check permission for a given
entity
Check User1 has READ access on Experiment1
Project1
Experiment1
User1:READ

28. Check permission for a given
entity
Check User1 has READ access on Experiment1
Project1
Experiment1
User1:READ
Project1
Experiment1
Group1:READ

29. Check permission for a given
entity
Check User1 has READ access on Experiment1
Project1
Experiment1
User1:READ
Project1
Experiment1
Group1:READ
Project1
Experiment1
User1: READ
User1:READ inherited
from Project1

30. Check permission for a given
entity
Check User1 has READ access on Experiment1
Project1
Experiment1
User1:READ
Project1
Experiment1
Group1:READ
Project1
Experiment1
User1: READ
User1:READ inherited
from Project1
Project1
Experiment1
User1:READ_WRITE

31. Check permission for a given
entity
Check User1 has READ access on Experiment1
Project1
Experiment1
User1:READ
Project1
Experiment1
Group1:READ
Project1
Experiment1
User1: READ
User1:READ inherited
from Project1
Project1
Experiment1
User1:READ_WRITE
And other possible combinations…

32. Browse/search entities for a
user
Get entities of type Experiment where User1 has READ access
and Experiment.name Like ‘Gaussian’
Experiment
Name
Owner Application
Compute
Resource
Gaussian_Nonb
ornane
User1 Gaussian16
bigred2.uits.iu.ed
u
test_Gaussian User2 Gaussian09 comet.sdsc.edu
Gaussian_benze
ne
User1 Gaussian16 comet.sdsc.edu
Search Experiments:

33. Browse/search entities for a
user
Get entities of type Experiment where User1 has READ access
and Experiment.name Like ‘Gaussian’
Experiment
Name
Owner Application
Compute
Resource
Gaussian_Nonb
ornane
User1 Gaussian16
bigred2.uits.iu.ed
u
test_Gaussian User2 Gaussian09 comet.sdsc.edu
Gaussian_benze
ne
User1 Gaussian16 comet.sdsc.edu
Search Experiments:

34. Efficient, and generic
implementation

35. Efficient, and generic
implementation
1. Relational database backed ApacheThrift based Java
Service

36. Efficient, and generic
implementation
1. Relational database backed ApacheThrift based Java
Service
2. Optimized relational queries

37. Efficient, and generic
implementation
1. Relational database backed ApacheThrift based Java
Service
2. Optimized relational queries
3. Customizable types, hierarchies

38. Efficient, and generic
implementation
4. Enforcement of the semantics of the permissions are
left to the client application
1. Relational database backed ApacheThrift based Java
Service
2. Optimized relational queries
3. Customizable types, hierarchies

39. SEAGrid enables sharing of Projects and Experiments with Read and
Write permissions with other gateway users

40. User interface listing sharing summary

41. Related Work
1. Internet2 Grouper

42. Related Work
1. Internet2 Grouper
2. Globus Data Sharing

43. Related Work
1. Internet2 Grouper
2. Globus Data Sharing
3. SeedMe and HubZero

44. Why from Scratch?

45. Why from Scratch?
1. Internet2 Grouper was our closest alternative

46. Why from Scratch?
1. Internet2 Grouper was our closest alternative
2. Can support most of our requirements efficiently but not all
Search Experiments:

47. Why from Scratch?
1. Internet2 Grouper was our closest alternative
2. Can support most of our requirements efficiently but not all
Search Experiments:
3. Light-weight solution which is easily
integratabtle and deplorable with
Airavata and cater Gateway
requirements

48. Summary
1. User collaboration is a largely overlooked yet important aspect in
Science Gateways.

49. Summary
1. User collaboration is a largely overlooked yet important aspect in
Science Gateways.
2.Wide variety of gateway collaboration requirements in Gateways
can be supported using a general purpose tool

50. Summary
1. User collaboration is a largely overlooked yet important aspect in
Science Gateways.
2.Wide variety of gateway collaboration requirements in Gateways
can be supported using a general purpose tool
3. Design and implementation of the system.

51. Summary
1. User collaboration is a largely overlooked yet important aspect in
Science Gateways.
2.Wide variety of gateway collaboration requirements in Gateways
can be supported using a general purpose tool
3. Design and implementation of the system.
4. Integrated with Apache Airavata
framework and provide as a hosted service.

52. Summary
1. User collaboration is a largely overlooked yet important aspect in
Science Gateways.
2.Wide variety of gateway collaboration requirements in Gateways
can be supported using a general purpose tool
3. Design and implementation of the system.
4. Integrated with Apache Airavata
framework and provide as a hosted service.
Thank You !!!
snakanda@iu.edu

53. • https://www.mnnonline.org/wp-content/uploads/2014/09/VictoriaEstrella.com_collaboration-10-01-14.jpg
• http://science.sciencemag.org/content/328/5977/463/F2.large.jpg
• http://www.cleaner.com/images/uploads/IMG_4934.jpg
• https://fthmb.tqn.com/BL5a1no5jOT3k9kKLznnK1C4pEg=/768x0/filters:no_upscale()/about/
FacebookWall-SS-56a9fcfe5f9b58b7d0005fdd.jpg
• https://cdn2.iconfinder.com/data/icons/occupations-2/500/occupation-29-512.png
• http://scientec.com.mx/wp-content/uploads/2016/10/Gaussian-16.png
• https://i1.wp.com/www.tech-coffee.net/wp-content/uploads/2015/11/room-full-of-computer-servers.jpg?
zoom=2&resize=620%2C330&ssl=1
• https://www.globus.org/sites/default/files/how_it_works-sharing@2x.png
• https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSMBMjHlQzpRztuXSb8jqsui-
ZZSwf5lU4MiZUd7ZVZO2OADnsVC9Iv-LU
Image Credits

54. Summary
1. User collaboration is a largely overlooked yet important aspect in
building Science Gateways.
2.Wide variety of gateway collaboration requirements in Gateways
can be supported using a general purpose tool
3. Design and implementation of the system.
4. Integrated with Apache Airavata
framework and provide as a hosted service.
Thank You !!!
snakanda@iu.edu