[GitHub] [spark] vanzin opened a new pull request #24582: [SPARK-27678][UI] Allow user impersonation in the UI.

[GitBox <gi...@apache.org>]

vanzin opened a new pull request #24582: [SPARK-27678][UI] Allow user impersonation in the UI.
URL: https://github.com/apache/spark/pull/24582
 
 
   This feature allows proxy servers to identify the actual request user
   using a request parameter, and performs access control checks against
   that user instead of the authenticated used. Impersonation is only
   allowed if the authenticated user is configured as an admin.
   
   The request parameter used ("doAs") matches the one currently used by
   Knox, but it should be easy to change / customize if different proxy
   servers use a different way of identifying the original user.
   
   Tested with updated unit tests and also with a live server behind Knox.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org