Uploaded image for project: 'Zeppelin'
  1. Zeppelin
  2. ZEPPELIN-5258

Add Knox realm support to ShiroAuthenticationService.getAssociatedRoles

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.9.0
    • Fix Version/s: 0.9.1, 0.10.0
    • Component/s: zeppelin-server
    • Labels:
      None

      Description

      The KnoxJwtRealm was added as another form of shiro authentication, and works for the native shiro URL authorization. We need to add special handling to ShiroAuthenticationService.getAssociatedRoles so that we can obtain groups for Knox realm users and use them for notebook authorization.

      A better long term approach would probably be to eliminate the need for getAssociatedRoles all together and better natively use the shiro API, but for now this would at least add better Knox support.

        Attachments

          Activity

            People

            • Assignee:
              Kimahriman Adam Binford
              Reporter:
              Kimahriman Adam Binford
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 2h 20m
                2h 20m