Jeff Zhang created ZEPPELIN-1340: ------------------------------------ Summary: Impersonation for interpreter Key: ZEPPELIN-1340 URL: https://issues.apache.org/jira/browse/ZEPPELIN-1340 Project: Zeppelin Issue Type: Sub-task Reporter: Jeff Zhang
In the kerberized environment, all the interpreter use the same keytab/principal, this is pretty dangerous. E.g. User A can use shell interpreter which run as user B to delete all the files owned by user B. Although some interpreter has implement its kerbosed usage, I just feel we might need to make a general impersonation framework for all the interpreter (If not possible for all interpreter, but at least this framework should cover most of the interpreter). -- This message was sent by Atlassian JIRA (v6.3.4#6332)