apache / kyuubi

Apache Kyuubi is a distributed and multi-tenant gateway to provide serverless SQL on data warehouses and lakehouses.
https://kyuubi.apache.org/
Apache License 2.0
2.11k stars 916 forks source link

[Umbrella] Make authz check plugin can be configurable #5401

Open AngersZhuuuu opened 1 year ago

AngersZhuuuu commented 1 year ago

Code of Conduct

Search before asking

Describe the proposal

Currently, Kyuubi Authz only support the ranger plugin, but many users may have its own auth check platform, we can make the privilege plugin customized, then such user doesn't need to change the source code of Kyuubi, only need to write some extension plugin.

Task list

Are you willing to submit PR?

yaooqinn commented 1 year ago

Looks cool

lifeSo commented 1 year ago

How to make the privilege plugin customized ? by configuration and reflection ?

AngersZhuuuu commented 1 year ago

How to make the privilege plugin customized ? by configuration and reflection ?

Yea, extract some plugin interface and support reflection by configuration