You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Marcelo Vanzin (JIRA)" <ji...@apache.org> on 2019/05/15 16:59:00 UTC

[jira] [Resolved] (SPARK-27678) Support Knox user impersonation in UI

     [ https://issues.apache.org/jira/browse/SPARK-27678?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marcelo Vanzin resolved SPARK-27678.
------------------------------------
       Resolution: Fixed
    Fix Version/s: 3.0.0

Issue resolved by pull request 24582
[https://github.com/apache/spark/pull/24582]

> Support Knox user impersonation in UI
> -------------------------------------
>
>                 Key: SPARK-27678
>                 URL: https://issues.apache.org/jira/browse/SPARK-27678
>             Project: Spark
>          Issue Type: New Feature
>          Components: Web UI
>    Affects Versions: 3.0.0
>            Reporter: Marcelo Vanzin
>            Assignee: Marcelo Vanzin
>            Priority: Minor
>             Fix For: 3.0.0
>
>
> When Spark is running behind a Knox proxy server, it would be useful to support impersonation, so that Knox can properly identify the user who's actually making the request.
> This way, Knox authenticates to Spark, but Spark makes access control checks against the user that Knox identifies as the actual requesting user, so that proper access checks are performed, instead of performing the checks against the more privileged Knox user.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org