DTStack / DTStack/Taier

[Feature][taier-data-develop] hiveserver&sparkThriftserver链接方式增加权限隔离

Open
#1,146 1 comment 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
1.3k
Forks
350
PR merge metrics
No merged PRs in 30d

Description

### Search before asking

- [X] I had searched in the [issues](https://github.com/DTStack/Taier/issues) and found no similar feature requirement.

### Description

目前的hive/spark-thriftserver数据源非krb方式,通过配置的数据源进行任务提交存在权限问题:
1.配置用户时,数据源被不同用户使用时候变成同一用户(配置用户),
2.如果不配置用户,会变成匿名用户,没有权限
建议通过配置用户进行链接测试,提交任务时通过hive代理用户来进行权限隔离;hive.server2.proxy.user对于hiveServer2与sparkThriftserver2都适用

### Use case

client的数据源url配置中增加hive.server2.proxy.use为当前登录用户

### Related issues

_No response_

### Are you willing to submit a PR?

- [X] Yes I am willing to submit a PR!

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.