pan3793 opened a new issue, #5369: URL: https://github.com/apache/kyuubi/issues/5369
### Code of Conduct - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) ### Search before creating - [X] I have searched in the [task list](https://github.com/orgs/apache/projects/296) and found no similar tasks. ### Mentor - [ ] I have sufficient knowledge and experience of this task, and I volunteer to be the mentor of this task to guide contributors to complete the task. ### Skill requirements - Basic knowledge on Scala Programing Language ### Background and Goals Hive supports SQL operation authorization against the session user, and then runs SQL as Hive Server user. Currently, Kyuubi supports this feature at the SERVER share level. We want to also support this feature in other share levels, which provide fine isolation. ### Implementation steps Currently, `EngineRef#appUser` serves two purposes: - The username used to run the `SparkSQLEngine` - Part of the key used to look up the `SparkSQLEngine` to connect to. To implement this feature, we need to replace `EngineRef#appUser` with two new fields, `EngineRef#appUser` and `EngineRef#engineSpaceUser`. - The new `EngineRef#appUser` is the username used to run the `SparkSQLEngine`. - The `EngineRef#engineSpaceUser` is used to look up the `SparkSQLEngine`. `EngineRef#engineSpaceUser` is set in the same way as the old `EngineRef#appUser`. The new `EngineRef#appUser` is set according to a new config, `kyuubi.engine.user`: - When `kyuubi.engine.user` is not set, set `EngineRef#appUser` to `EngineRef#engineSpaceUser` - When `kyuubi.engine.user` is set, set `EngineRef#appUser` to that value. ### Additional context _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
