You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Marcelo Vanzin (JIRA)" <ji...@apache.org> on 2019/05/10 22:08:00 UTC

[jira] [Created] (SPARK-27678) Support Knox user impersonation in UI

Marcelo Vanzin created SPARK-27678:
--------------------------------------

             Summary: Support Knox user impersonation in UI
                 Key: SPARK-27678
                 URL: https://issues.apache.org/jira/browse/SPARK-27678
             Project: Spark
          Issue Type: New Feature
          Components: Web UI
    Affects Versions: 3.0.0
            Reporter: Marcelo Vanzin


When Spark is running behind a Knox proxy server, it would be useful to support impersonation, so that Knox can properly identify the user who's actually making the request.

This way, Knox authenticates to Spark, but Spark makes access control checks against the user that Knox identifies as the actual requesting user, so that proper access checks are performed, instead of performing the checks against the more privileged Knox user.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org