Globus Connect Server Sharing Policy Create

Each sharing policy affects one or more users. The policy is associated with users by including the --user USERNAME command-line option one or more times on the command-line. Each user name is the "local" username as interpreted by the connector (after the Globus account has been mapped). For some connectors, this is a simple user name string, for others a cloud service account name.

Sharing path restrictions control which paths a user may access in guest collections. The policies may provide read, read_write, or deny access to subsets of the virtual filesystem available on a mapped collection. The restrictions are controlled by the --read PATH, --read-write PATH, and --none PATH command-line options.

If using sharing policies, it is important to understand that the policies used by Globus are a union of all rights granted to that user, either explicitly (by including their name in a sharing policy), or implicitly as part of the default sharing policy. When there is an overlap in those paths, the rights are determined as described in the Path Restrictions documentation.