Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature]: Support User Impersonation for Iceberg REST Catalog #9570

Open
nqvuong1998 opened this issue Sep 19, 2024 · 1 comment
Open

[Feature]: Support User Impersonation for Iceberg REST Catalog #9570

nqvuong1998 opened this issue Sep 19, 2024 · 1 comment

Comments

@nqvuong1998
Copy link

Description

User Impersonation enables the REST catalog to perform actions on behalf of a specified user. This feature allows clients to impersonate users when interacting with the Iceberg catalog, ensuring that actions are executed with the appropriate user permissions. It enhances security by allowing fine-grained access control, enabling the system to enforce authorization policies based on the impersonated user's identity. This is particularly useful in multi-tenant environments where different users or applications may require different levels of access to data stored in Iceberg tables.

Expected Use Cases

Same as Hive Metastore:

  • Spark + REST Catalog: --proxy-user
  • Trino + REST Catalog: impersonation.enabled

Requested Changes in public API

No response

@nqvuong1998
Copy link
Author

nqvuong1998 commented Sep 19, 2024

cc @snazy @ajantha-bhat

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant