vanzin opened a new pull request #24582: [SPARK-27678][UI] Allow user impersonation in the UI. URL: https://github.com/apache/spark/pull/24582 This feature allows proxy servers to identify the actual request user using a request parameter, and performs access control checks against that user instead of the authenticated used. Impersonation is only allowed if the authenticated user is configured as an admin. The request parameter used ("doAs") matches the one currently used by Knox, but it should be easy to change / customize if different proxy servers use a different way of identifying the original user. Tested with updated unit tests and also with a live server behind Knox.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
