Adam Binford created ZEPPELIN-5258:
--------------------------------------
Summary: Add Knox realm support to
ShiroAuthenticationService.getAssociatedRoles
Key: ZEPPELIN-5258
URL: https://issues.apache.org/jira/browse/ZEPPELIN-5258
Project: Zeppelin
Issue Type: Improvement
Components: zeppelin-server
Affects Versions: 0.9.0
Reporter: Adam Binford
The KnoxJwtRealm was added as another form of shiro authentication, and works
for the native shiro URL authorization. We need to add special handling to
ShiroAuthenticationService.getAssociatedRoles so that we can obtain groups for
Knox realm users and use them for notebook authorization.
A better long term approach would probably be to eliminate the need for
getAssociatedRoles all together and better natively use the shiro API, but for
now this would at least add better Knox support.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
