[
https://issues.apache.org/jira/browse/DRILL-8155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17516986#comment-17516986
]
ASF GitHub Bot commented on DRILL-8155:
---------------------------------------
lgtm-com[bot] commented on PR #2516:
URL: https://github.com/apache/drill/pull/2516#issuecomment-1087848858
This pull request **introduces 2 alerts** when merging
c0214cd64562039510fd8b5b1098b7fb9ee585fd into
8e1ab3ad4a9e26de86f029a16f56608dab5f1876 - [view on
LGTM.com](https://lgtm.com/projects/g/apache/drill/rev/pr-0a5c79c38e6ec9e3a756e1c4a538d8ddf93b4375)
**new alerts:**
* 1 for Use of externally\-controlled format string
* 1 for Spurious Javadoc @param tags
> Add Impersonation Support for Non-Hadoop Based Storage Plugins
> --------------------------------------------------------------
>
> Key: DRILL-8155
> URL: https://issues.apache.org/jira/browse/DRILL-8155
> Project: Apache Drill
> Issue Type: Improvement
> Components: Security
> Affects Versions: 1.20.0
> Reporter: Charles Givre
> Assignee: Charles Givre
> Priority: Major
> Fix For: Future
>
>
> Drill's current implementation of user impersonation does not allow
> non-Hadoop based plugins to impersonate the user. This creates security
> issues as it requires an organization to create service accounts for users to
> access storage such as a relational database or Splunk, ES and the like from
> Drill.
> This PR proposes to add the framework to support individual credentials for
> non-Hadoop based plugins.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
