[ https://issues.apache.org/jira/browse/KNOX-3048?focusedWorklogId=970403&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-970403 ]
ASF GitHub Bot logged work on KNOX-3048: ---------------------------------------- Author: ASF GitHub Bot Created on: 22/May/25 22:50 Start Date: 22/May/25 22:50 Worklog Time Spent: 10m Work Description: moresandeep commented on PR #1043: URL: https://github.com/apache/knox/pull/1043#issuecomment-2902789180 @zeroflag @smolnar82 This is a giant PR, if you can review that would be great! Most of the changes are in the new files, I tried to refactor them as much as i could. Issue Time Tracking ------------------- Worklog Id: (was: 970403) Time Spent: 2h 20m (was: 2h 10m) > Surrogate proxy user configuration for user groups > -------------------------------------------------- > > Key: KNOX-3048 > URL: https://issues.apache.org/jira/browse/KNOX-3048 > Project: Apache Knox > Issue Type: Improvement > Components: Server > Affects Versions: 2.0.0 > Reporter: Philip Zampino > Assignee: Sandeep More > Priority: Major > Fix For: 2.1.0 > > Time Spent: 2h 20m > Remaining Estimate: 0h > > *Problem Statement:* > Currently Knox has the ability for specific users (say for e.g. {{sp_user}}) > to impersonate other users (say for e.g.{{ot_user}}). This is driven by > configs defined in a topology. Currently these configs are needed for each > user that impersonates other users (i.e. {{sp_user}}), this can get out of > hand quickly and can be difficult to maintain. > To solve this problem the proposed solution uses a group level impersonation > configuration. This configuration will be based on the virtual groups feature > that is already available in Knox. With this new configuration we can have > specific users who belong to a virtual group/s (based on conditions such as > {{(match groups 'analyst|scientist') }}) impersonate other users. This will > significantly cut down on the config properties and keep them readable and > maintainable. -- This message was sent by Atlassian Jira (v8.20.10#820010)