You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@drill.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/03/06 15:33:00 UTC
[jira] [Commented] (DRILL-8155) Add Impersonation Support for Non-Hadoop Based Storage Plugins
[ https://issues.apache.org/jira/browse/DRILL-8155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17501976#comment-17501976 ]
ASF GitHub Bot commented on DRILL-8155:
---------------------------------------
lgtm-com[bot] commented on pull request #2481:
URL: https://github.com/apache/drill/pull/2481#issuecomment-1059984094
This pull request **introduces 1 alert** when merging 3812adffcd1961759f75c25abeda947894b2c558 into 0682d8b49c6723adc634fa6f21a50a0b1d9e6cf3 - [view on LGTM.com](https://lgtm.com/projects/g/apache/drill/rev/pr-c7554a9886a37758c73195451472455cf145f3bf)
**new alerts:**
* 1 for Use of externally\-controlled format string
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
> Add Impersonation Support for Non-Hadoop Based Storage Plugins
> --------------------------------------------------------------
>
> Key: DRILL-8155
> URL: https://issues.apache.org/jira/browse/DRILL-8155
> Project: Apache Drill
> Issue Type: Improvement
> Components: Security
> Affects Versions: 1.20.0
> Reporter: Charles Givre
> Assignee: Charles Givre
> Priority: Major
> Fix For: Future
>
>
> Drill's current implementation of user impersonation does not allow non-Hadoop based plugins to impersonate the user. This creates security issues as it requires an organization to create service accounts for users to access storage such as a relational database or Splunk, ES and the like from Drill.
> This PR proposes to add the framework to support individual credentials for non-Hadoop based plugins.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)