apache / kyuubi

Apache Kyuubi is a distributed and multi-tenant gateway to provide serverless SQL on data warehouses and lakehouses.
https://kyuubi.apache.org/
Apache License 2.0
2.08k stars 906 forks source link

[Umbrella] Make authz check plugin can be configurable #5401

Open AngersZhuuuu opened 11 months ago

AngersZhuuuu commented 11 months ago

Code of Conduct

Search before asking

Describe the proposal

Currently, Kyuubi Authz only support the ranger plugin, but many users may have its own auth check platform, we can make the privilege plugin customized, then such user doesn't need to change the source code of Kyuubi, only need to write some extension plugin.

Task list

Are you willing to submit PR?

yaooqinn commented 11 months ago

Looks cool

lifeSo commented 11 months ago

How to make the privilege plugin customized ? by configuration and reflection ?

AngersZhuuuu commented 11 months ago

How to make the privilege plugin customized ? by configuration and reflection ?

Yea, extract some plugin interface and support reflection by configuration