You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@kyuubi.apache.org by "HaoYang670 (via GitHub)" <gi...@apache.org> on 2023/07/13 06:59:55 UTC
[GitHub] [kyuubi] HaoYang670 opened a new issue, #5050: [Bug] `KyuubiRestFrontendService.getProxyUser` doesn't check the `realUser` is an admin or not.
HaoYang670 opened a new issue, #5050:
URL: https://github.com/apache/kyuubi/issues/5050
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
### Search before asking
- [X] I have searched in the [issues](https://github.com/apache/kyuubi/issues?q=is%3Aissue) and found no similar issues.
### Describe the bug
https://github.com/apache/kyuubi/blob/d1bcb4feb6b8617d772b1a333685655248b667c5/kyuubi-server/src/main/scala/org/apache/kyuubi/server/KyuubiRestFrontendService.scala#L230-L242
We currently don't check if the `realUser` is an admin. This leads to an admin doesn't have privilege to the proxy user when opening a session.
### Affects Version(s)
master
### Kyuubi Server Log Output
_No response_
### Kyuubi Engine Log Output
_No response_
### Kyuubi Server Configurations
```yaml
kyuubi.server.administrators
```
### Kyuubi Engine Configurations
_No response_
### Additional context
_No response_
### Are you willing to submit PR?
- [X] Yes. I would be willing to submit a PR with guidance from the Kyuubi community to fix.
- [ ] No. I cannot submit a PR at this time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org
[GitHub] [kyuubi] turboFei closed issue #5050: [Bug] `KyuubiRestFrontendService.getProxyUser` doesn't check the `realUser` is an admin or not.
Posted by "turboFei (via GitHub)" <gi...@apache.org>.
turboFei closed issue #5050: [Bug] `KyuubiRestFrontendService.getProxyUser` doesn't check the `realUser` is an admin or not.
URL: https://github.com/apache/kyuubi/issues/5050
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org