crate / crate/crate

Grant more rights to users with AL privileges (seeing other users jobs / ability to set session to other user)

Open
#11,420 2 comments 2 reactions 0 assignees View on GitHub
complexity: no estimate feature: security feature: user management needs upvotes
Dominant language
Java
Stars
4.4k
Forks
616
Avg merge
14h 49m
Merged PRs (30d)
206

Description

**Use case**:
As a CrateDB user with **admin privileges** on cluster level I want to be able to run certain commands like setting a session to another user with `SET SESSION AUTHORIZATION username`, as I already have the ability to basically drop, recreate and login as this user anyway. Also changing the password of an existing user should be possible, for pretty much the same reason. This might be needed to stop a long running job (e.g. import of large datasets)

**Feature description**:

Allow the following Statements for users with `AL` privileges:
- `SET [ SESSION | LOCAL ] SESSION AUTHORIZATION username`
This should also make it possible to run `KILL ALL` for jobs started by `username` through the logged in user.

Further users with `AL` privileges should be able to see all running jobs within `sys.jobs` (**maybe** except of superuser `crate`), to identify long running jobs and have a general picture - as admin user - what is happening in the cluster.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.