Bureaucrats, cc_docs_admin, cc_staff
2,306
edits
(Marked this version for translation) |
(Transferred content about Globus shares from the CC website to the Wiki.) |
||
Line 94: | Line 94: | ||
* [https://docs.globus.org/how-to/globus-connect-personal-linux Globus Connect Personal for Linux] | * [https://docs.globus.org/how-to/globus-connect-personal-linux Globus Connect Personal for Linux] | ||
== | == Globus Sharing == <!--T:18--> | ||
<!--T:19--> | <!--T:19--> | ||
Globus sharing makes collaboration with your colleagues easy. Sharing enables people to access files stored on your account on a Compute Canada system even if the other user does not have an account on that system. Files can be shared with any user, anywhere in the world, who has a Globus account. See [https://docs.globus.org/how-to/share-files/ How To Share Data Using Globus]. | |||
=== Creating a Shared Endpoint === | |||
To share a file or folder on an endpoint first requires that the system hosting the files has sharing enabled. All Compute Canada endpoints either have or will soon have sharing enabled. | |||
Log into globus.computecanada.ca with your Globus credentials. Once you are logged in, you will see a transfer window. In the ‘endpoint’ field, type the endpoint identifier for the endpoint you wish to share from (e.g.computecanada#silo) and activate the endpoint, if asked to. | |||
[[File:Globus SharedEndpoint1-1024x607.png|thumb|Creating a shared endpoint (Click for larger image.)]] | |||
Select an item that you wish to share, then click the three horizontal lines on the right side of the endpoint’s window to access the menu where you can then select share. | |||
[[File:Globus SharedEndpoint2.png|thumbnail|Selecting the share option]] | |||
Selecting share opens a window that shows your current shared endpoints, if you have any, and a button labeled ‘Add Shared Endpoint’. Clicking that button will bring up the ‘Create New Shared Endpoint’ window. By default it will have values filled based on your previous selections. You can modify these as necessary, then click the ‘Create and Manage Access’ button. | |||
[[File:Globus SharedEndpoint3-1024x430.png|thumbnail|Managing a Shared Endpoint]] | |||
===Managing Access=== | |||
Once the endpoint is created, you will be shown the current access list, with only your account on it. Since sharing is of little use without someone to share with, click the ‘Add Permission’ button to add people or groups that you wish to share with. | |||
You will now be prompted to select whether to share with people via email, username, or group. | |||
* E-mail is a good choice if you don’t know a person’s username on Globus. It will also allow you to share with people who do not currently have a Globus account, though they will need to create one to be able to access your share. | |||
* User presents a search box that allows you to search by name or Globus username. This is best if someone already has a Globus account, as it does not require any action on their part to be added to the share. Enter a name or Globus username (if you know it), and select the appropriate match from the list, then click ‘Use Selected’ | |||
* Group allows you to share with a number of people simultaneously. You can search by group name or UUID. Group names may be ambiguous, so be sure to verify you are sharing with the correct one. This can be avoided by using the group’s UUID, which is available on the Groups page (See Groups Section) | |||
[[File:Globus ManagingAccess-1024x745.png|thumbnail|Managing Shared Endpoint Permissions]] | |||
To add or remove write permissions from a user, click the checkbox next to their name under the write column. It is not possible to remove read access. | |||
Deleting users or groups from the list of people you are sharing with is as simple as clicking the ‘x’ at the end of the line containing their information. | |||
===Removing a Shared Endpoint=== | |||
Once you no longer need your shared endpoint, remove it. To do this, go to the top of the page, and select ‘Manage Endpoints’ from the ‘Manage Data’ menu. | |||
You will be shown a list of endpoints that you have created, including Globus Connect Personal or shared endpoints, as well as those you have recently used. Find the shared endpoint you wish to delete in the list, and expand it. Click the ‘delete endpoint’ button, and confirm the removal when prompted. | |||
[[File:Globus RemovingSharedEndpoint-1024x322.png|thumbnail|Removing a Shared Endpoint]] | |||
The endpoint is now deleted. Your files will not be affected by this action, nor will those others may have uploaded. | |||
===Sharing Security=== | |||
Sharing files entails a certain level of risk. By creating a share, you are opening up files that up to now have been in your exclusive control to others. The following list is some things to think about before sharing, though it is far from comprehensive. | |||
*Make sure you have permission to share the files, if you are not the data’s owner | |||
*Make sure you are sharing with only those you intend to. Verify the person you add to the access list is the person you think, there are often people with the same or similar names. Remember that Globus usernames are not linked to Compute Canada usernames. The recommended method of sharing is to use the email address of the person you wish to share with, unless you have the exact account name. | |||
*If you are sharing with a group you do not control, make sure you trust the owner of the group. They may add people who are not authorized to access your files. | |||
*If granting write access, make sure that you have backups of important files that are not on the shared endpoint, as users of the shared endpoint may delete or overwrite files, and do anything that you yourself can do to a file. | |||
*It is highly recommended that sharing be restricted to a subdirectory, rather than your top-level home directory. | |||
<!--T:20--> | <!--T:20--> | ||
== Globus Groups == | |||
Globus groups provide an easy way to manage permissions for sharing with multiple users. When you create a group, you can use it from the sharing interface easily to control access for multiple users. See [https://docs.globus.org/how-to/managing-groups/ How to Manage Globus Groups]. | |||
== Support and More Information == <!--T:21--> | == Support and More Information == <!--T:21--> |