Details
Major Description
In order to implement "isolated" UDRs, we need to have a user id for the tdm_udrserv process that executes UDRs. Right now this process runs under the same user id as the Trafodion engine, which means that the system administrator has to trust the UDR writer to a great degree. Running UDRs with a user id that has no access to HBase and HDFS and to the internal resources of the Trafodion engine would reduce the required trust by a great deal.