[ 
https://issues.apache.org/jira/browse/GEODE-8782?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17249868#comment-17249868
 ] 

ASF GitHub Bot commented on GEODE-8782:
---------------------------------------

jinmeiliao commented on pull request #5840:
URL: https://github.com/apache/geode/pull/5840#issuecomment-745491031


   After you are done with this, can you file another jira ticket to redo the 
`QueryCommand`? Currently we are sending the principal using 
`DataCommandRequest`, now that the principal is in the function context, we 
don't need to do that anymore. Or if you can lump it into this PR, that would 
be great too!


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Add getPrincipal method to FunctionContext interface
> ----------------------------------------------------
>
>                 Key: GEODE-8782
>                 URL: https://issues.apache.org/jira/browse/GEODE-8782
>             Project: Geode
>          Issue Type: New Feature
>          Components: core
>            Reporter: Jens Deppe
>            Priority: Major
>              Labels: pull-request-available
>
> In some cases it would be very helpful to have access to the {{Principal}} 
> when executing a function.
> It may seem obvious that if one has a reference to the {{cache}} that you 
> could get to the {{SecurityManager}} and extract the {{Subject}} and thus the 
> {{Principal}} from there. However, in some cases, Geode will seamlessly proxy 
> a function call from one server to the other. This will typically happen with 
> {{onRegion}} calls and partitioned regions. In such cases, the security 
> context is lost and thus the principal is not accessible.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to