Siyao Meng created HDDS-9048:
--------------------------------

             Summary: [Recon] Use user token to authenticate to the OM in file 
browser instead of Recon token
                 Key: HDDS-9048
                 URL: https://issues.apache.org/jira/browse/HDDS-9048
             Project: Apache Ozone
          Issue Type: Improvement
            Reporter: Siyao Meng
            Assignee: Devesh Kumar Singh


Currently Recon is admin-only. But since we are adding a file browser, we could 
allow regular users to use it as well.

Since Recon can be authenticated with SPNEGO, we should investigate if it is 
possible to use the Kerberos service ticket wrapped inside SPNEGO to 
authenticate to the OM when user is accessing the Recon file browser.

The benefit is that file browser access control will be correctly enforced with 
the existing mechanisms.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to