feat: When submitting a task, check whether the account is in the par…

…tition's AllowAccounts.

src/CraneCtld/CranedMetaContainer.cpp

@@ -600,6 +600,18 @@ CraneErrCodeExpected<void> CranedMetaContainer::ModifyPartitionAllowAccounts(
   return result;
 }
 
+bool CranedMetaContainer::CheckIfAccountIsAllowedInPartition(
+    const std::string& partition_name, const std::string& account_name) {
+  if (!partition_metas_map_.Contains(partition_name)) return false;
+
+  auto part_meta = partition_metas_map_.GetValueExclusivePtr(partition_name);
+
+  if (!part_meta->partition_global_meta.allow_accounts.contains(account_name))
+    return false;
+
+  return true;
+}
+
 void CranedMetaContainer::AddDedicatedResource(
     const CranedId& node_id, const DedicatedResourceInNode& resource) {
   if (!craned_meta_map_.Contains(node_id)) {

src/CraneCtld/CranedMetaContainer.h

@@ -94,6 +94,9 @@ class CranedMetaContainer final {
       const std::string& partition_name,
       const std::unordered_set<std::string>& allow_accounts);
 
+  bool CheckIfAccountIsAllowedInPartition(const std::string& partition_name,
+                                          const std::string& account_name);
+
   void CranedUp(const CranedId& craned_id);
 
   void CranedDown(const CranedId& craned_id);

src/CraneCtld/CtldGrpcServer.cpp

@@ -1013,6 +1013,13 @@ CtldServer::SubmitTaskToScheduler(std::unique_ptr<TaskInCtld> task) {
     return std::unexpected(enable_res.error());
   }
 
+  if (!g_meta_container->CheckIfAccountIsAllowedInPartition(task->partition_id,
+                                                            task->account))
+    return std::unexpected(
+        "The account is not in the AllowAccounts of the partition "
+        "specified "
+        "for the task, submission of the task is prohibited.");
+
   err = g_task_scheduler->AcquireTaskAttributes(task.get());
 
   if (err == CraneErr::kOk)