[HDDS-9048] Recon: Use user token to authenticate to the OM in file browser instead of Recon token

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Ozone Recon
• Assignee: Devesh Kumar Singh
• Reporter: Siyao Meng
• Created: 20/Jul/23 04:24
• Updated: 15/Dec/23 06:22

Description

Currently Recon is admin-only. But since we are adding a file browser, we could allow regular users to use it as well.

Since Recon can be authenticated with SPNEGO, we should investigate if it is possible to use the Kerberos service ticket wrapped inside SPNEGO to authenticate to the OM when user is accessing the Recon file browser.

The benefit is that file browser access control will be correctly enforced with the existing mechanisms.

Issue Links

• requires: HDDS-7169 Recon: Add a file browser