>> Marcelo Sorry, I missed your response. Yea, thanks for your suggestion.
>> Meisam I assume one application handles requests from different users, and the request in the application runs spark queries as each user authorization. Since SparkContext currently doesn't support impersionation, I think one solution is that the application manages multiples SparkContext for that. For example, spark thrift-server doesn't support impersonation because of the same reason above: e.g., SPARK-5159, SPARK-11248, and SPARK-21918 In that case, I think Livy is useful; the application can pass proxyUser to build LivyClient for each user and run spark queries as each user authorization. On Tue, Jun 26, 2018 at 5:33 AM Meisam Fathi <meisam.fa...@gmail.com> wrote: > What is the use case for passing the proxy user to LivyClientBuilder? > > On Fri, Jun 15, 2018 at 9:02 AM Marcelo Vanzin <van...@cloudera.com.invalid > > > wrote: > > > re: proxy user, you have to be extremely careful with that. > > > > Livy currently supports proxy user, but for the server only. It allows > > the server to impersonate anyone, so that sessions can run as the > > requesting user. > > > > If you let the user decide who the session will be run as, you'll need > > to add configuration, just as those available in HDFS, YARN, etc, to > > tell Livy which users can impersonate which other users. Otherwise > > you're basically making authentication meaningless. > > > > > > On Thu, Jun 14, 2018 at 7:36 PM, Saisai Shao <sai.sai.s...@gmail.com> > > wrote: > > > Sure, I will merge the website code, thanks! > > > > > > For proxyUser thing, I think there's no particular reason not adding > it, > > > maybe we just forgot to add the proxyUser support. > > > > > > It would be better if you could create a JIRA to track this issue. If > > > you're familiar with Livy code, you can also submit a PR about it.😀 > > > > > > Thanks > > > Jerry > > > > > > Takeshi Yamamuro <linguin....@gmail.com> 于2018年6月15日周五 上午7:33写道： > > > > > >> Hi, Livy dev, > > >> > > >> I opened a new pr in incubator-livy-website to add a new link in > > >> third-party-projects.md. It'd be great if you could check this; > > >> https://github.com/apache/incubator-livy-website/pull/23 > > >> > > >> Btw, I have one question; currently, we cannot pass proxyUser > > >> in LivyClientBuilder. Any reason not to add code for that? > > >> I know we can handle this in an application side by adding a bit code > > like > > >> > > >> > > > https://github.com/maropu/spark-sql-server/blob/master/sql/sql-server/src/main/java/org/apache/livyclient/common/CreateClientRequestWithProxyUser.java > > >> But, If Livy itself supported this, it'd be nice to me. > > >> > > >> Best, > > >> takeshi > > >> > > >> -- > > >> --- > > >> Takeshi Yamamuro > > >> > > > > > > > > -- > > Marcelo > > > -- --- Takeshi Yamamuro
