In MRG 1.3, the provided Management Console Installation Guide instructed administrators to explicitly configure "QUEUEALLTRUSTEDUSERS=True" so that the management console (cumin) could facilitate submissions on behalf of a user. This configuration facilitated a trust relationship between cumin and the condor-qmf plugins. However, there was inadequate access control for securing the trusted channel; anyone able to publish to a broker could submit jobs. As well, this meant that a user could submit a job to run as any other user other than root (Condor does not run jobs as root).

In a future update, through enhancements to the QMF Agent, access control on the condor-qmf plugins is adequate to secure the trust relationship.