0xBADBAC0N opened a new pull request #10172:
URL: https://github.com/apache/incubator-superset/pull/10172
This will make allow the admin to set up a root connection that can be
impersonated.
### SUMMARY
<!--- Describe the change below, including rationale and design decisions -->
If a root Hive connection is used liked in Hue, we want to simply
impersonate that single connection to allow Apache Sentry/Ranger to manage user
rights regarding databases/tables. If we enforce the auth param, we also are
forced to set credentials on that connection, although we want to use a
dedicated hive-server and connection in combination with Apache Sentry/Range,
similar to Hue.
### BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF
<!--- Skip this if not applicable -->
### TEST PLAN
<!--- What steps should be taken to verify the changes -->
Set up an unprotected Hive server and add that connection.
```
hive://myhive01.example:10000
```
Select impersonation.
Without the auth flags (eG the submitted fix) Superset is able to
impersonate the connection properly.
If the auth setting is set (eG to LDAP or Kerberos) Superset expects
username:password in the connection string, although it is not required.
To verify the correct behavior, set the connection, check impersonation, and
do not modify the `Extra` settings.
An open connection should still be able to impersonate the connection.
### ADDITIONAL INFORMATION
<!--- Check any relevant boxes with "x" -->
<!--- HINT: Include "Fixes #nnn" if you are fixing an existing issue -->
- [x] Has associated issue:
https://github.com/apache/incubator-superset/issues/8406 (unsolved)
- [ ] Changes UI
- [ ] Requires DB Migration.
- [ ] Confirm DB Migration upgrade and downgrade tested.
- [ ] Introduces new feature or API
- [ ] Removes existing feature or API
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
