[jira] [Updated] (HDDS-9048) Recon: Use user token to authenticate to the OM in file browser instead of Recon token

["Siyao Meng (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HDDS-9048?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Siyao Meng updated HDDS-9048:
-----------------------------
    Summary: Recon: Use user token to authenticate to the OM in file browser instead of Recon token  (was: [Recon] Use user token to authenticate to the OM in file browser instead of Recon token)

> Recon: Use user token to authenticate to the OM in file browser instead of Recon token
> --------------------------------------------------------------------------------------
>
>                 Key: HDDS-9048
>                 URL: https://issues.apache.org/jira/browse/HDDS-9048
>             Project: Apache Ozone
>          Issue Type: Improvement
>          Components: Ozone Recon
>            Reporter: Siyao Meng
>            Assignee: Devesh Kumar Singh
>            Priority: Major
>
> Currently Recon is admin-only. But since we are adding a file browser, we could allow regular users to use it as well.
> Since Recon can be authenticated with SPNEGO, we should investigate if it is possible to use the Kerberos service ticket wrapped inside SPNEGO to authenticate to the OM when user is accessing the Recon file browser.
> The benefit is that file browser access control will be correctly enforced with the existing mechanisms.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org