[KNOX-920] Make avatica service use default policies

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.11.0
• Fix Version/s: 0.13.0
• Assignee: Shi Wang
• Reporter: Shi Wang
• Created: 06/Apr/17 20:57
• Updated: 28/Mar/19 14:09
• Resolved: 11/Apr/17 22:35

Description

<policies>
<policy role="webappsec"/>
<policy role="authentication"/>
<policy role="rewrite"/>
<policy role="authorization"/>
</policies>
is lacking the identity-assertion role, which will append "doAs" or "user.name" in the end. Either we can remove the policies and use the default ones, which include the identity-assertion filter, or add identity-assertion in the policy.

Issue Links

• relates to: KNOX-817 Gateway service defintion for Avatica