Uploaded image for project: 'CDAP'
  1. CDAP
  2. CDAP-15525

Allow impersonation of individual program runs

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 6.1.0
    • Component/s: App Fabric, Security
    • Labels:
      None
    • Rank:
      1|i00ox3:

      Description

      Currently, impersonation is only possible at the time an application is deployed, and this cannot be changed over the lifetime of the app.

      In some use cases, the same program operates on different data, depending on its runtime arguments. For such cases, it can be necessary to impersonate a different principal for every run. The principal (and keytab?) are thus provided as runtime arguments when the program is started, given that the user who initiates the run is authorized to impersonate that principal. 

       

        Attachments

          Activity

            People

            • Assignee:
              mirajgodha Miraj Godha
              Reporter:
              andreas Andreas Neumann
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: