Identity acceptable risks and a mitigation designs for protecting index metadata

[jpnavarro]

A single consolidated Globus search index with multiple publishers introduces the possibility that publishers may corrupt or delete metadata they don't own. The risk and possible mitigation designs need to be explored, and a decision made on which designs will be implemented.

[jpnavarro]

The risk of accidental modification or deletion of index entries outside of each projects area was determined to significant enough to mitigate, especially since it can be addressed using the following design:

• projects would only publish to project specific staging indexes
  -changes in staging indexes are propagated by a synchronizer component/service to the global index
• propagate only the changes in each project staging index for that project (i.e. project staging index entries from a different project are ignore and don't affect the global index)
• the synchronize can be configured with a policy to ignore deletions in the staging index and not propagate them (i.e. it doesn't look for global index entries missing in their project staging index or delete them)

See the design.md.