{"action":"created","issue":{"url":"https://api.github.com/repos/apache/zeppelin/issues/1322","repository_url":"https://api.github.com/repos/apache/zeppelin","labels_url":"https://api.github.com/repos/apache/zeppelin/issues/1322/labels{/name}","comments_url":"https://api.github.com/repos/apache/zeppelin/issues/1322/comments","events_url":"https://api.github.com/repos/apache/zeppelin/issues/1322/events","html_url":"https://github.com/apache/zeppelin/pull/1322","id":170671499,"number":1322,"title":"[ZEPPELIN-1320] Run zeppelin interpreter process as web front end user","user":{"login":"prabhjyotsingh","id":674497,"avatar_url":"https://avatars.githubusercontent.com/u/674497?v=3","gravatar_id":"","url":"https://api.github.com/users/prabhjyotsingh","html_url":"https://github.com/prabhjyotsingh","followers_url":"https://api.github.com/users/prabhjyotsingh/followers","following_url":"https://api.github.com/users/prabhjyotsingh/following{/other_user}","gists_url":"https://api.github.com/users/prabhjyotsingh/gists{/gist_id}","starred_url":"https://api.github.com/users/prabhjyotsingh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/prabhjyotsingh/subscriptions","organizations_url":"https://api.github.com/users/prabhjyotsingh/orgs","repos_url":"https://api.github.com/users/prabhjyotsingh/repos","events_url":"https://api.github.com/users/prabhjyotsingh/events{/privacy}","received_events_url":"https://api.github.com/users/prabhjyotsingh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":19,"created_at":"2016-08-11T15:16:40Z","updated_at":"2016-08-24T13:28:58Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/apache/zeppelin/pulls/1322","html_url":"https://github.com/apache/zeppelin/pull/1322","diff_url":"https://github.com/apache/zeppelin/pull/1322.diff","patch_url":"https://github.com/apache/zeppelin/pull/1322.patch"},"body":"### What is this PR for?\r\nWhile running a Notebook using shell, spark, python uses same user as which zeppelin server is running. Which means these interprets have same permission on file system as zeppelin server.\r\nIMO users should be able to impersonate themselves as a complete security system.\r\n\r\n### What type of PR is it?\r\n[Improvement]\r\n\r\n### Todos\r\n* [ ] - Update doc\r\n* [x] - FIX NPEs\r\n* [x] - FIX CI\r\n\r\n### What is the Jira issue?\r\n* [ZEPPELIN-1320](https://issues.apache.org/jira/browse/ZEPPELIN-1320)\r\n\r\n### How should this be tested?\r\n - Enable shiro auth in shiro.ini\r\n - Add ssh key for the same user you want to try and impersonate (say user1).\r\n```\r\nadduser user1\r\nssh-keygen\r\nssh user1@localhost mkdir -p .ssh\r\ncat ~/.ssh/id_rsa.pub | ssh user1@localhost 'cat >> .ssh/authorized_keys'\r\n```\r\n - Start zeppelin server, try and run following in paragraph in a notebook\r\n - Go to interpreter setting page, and enable \"User Impersonate\" in any of the interpreter (in my example its shell interpreter)\r\n\r\n```\r\n%sh\r\nwhoami\r\n```\r\n\r\nCheck that it should run as new user, i.e. \"user1\"\r\n\r\n### Screenshots (if appropriate)\r\n\r\n![user impersonate](https://cloud.githubusercontent.com/assets/674497/17700306/d9294e80-63e2-11e6-8be8-1c4b84ef5aee.gif)\r\n\r\n\r\n\r\n### Questions:\r\n* Does the licenses files need update? no\r\n* Is there breaking changes for older versions? no\r\n* Does this needs documentation? yes\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/apache/zeppelin/issues/comments/242063397","html_url":"https://github.com/apache/zeppelin/pull/1322#issuecomment-242063397","issue_url":"https://api.github.com/repos/apache/zeppelin/issues/1322","id":242063397,"user":{"login":"prabhjyotsingh","id":674497,"avatar_url":"https://avatars.githubusercontent.com/u/674497?v=3","gravatar_id":"","url":"https://api.github.com/users/prabhjyotsingh","html_url":"https://github.com/prabhjyotsingh","followers_url":"https://api.github.com/users/prabhjyotsingh/followers","following_url":"https://api.github.com/users/prabhjyotsingh/following{/other_user}","gists_url":"https://api.github.com/users/prabhjyotsingh/gists{/gist_id}","starred_url":"https://api.github.com/users/prabhjyotsingh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/prabhjyotsingh/subscriptions","organizations_url":"https://api.github.com/users/prabhjyotsingh/orgs","repos_url":"https://api.github.com/users/prabhjyotsingh/repos","events_url":"https://api.github.com/users/prabhjyotsingh/events{/privacy}","received_events_url":"https://api.github.com/users/prabhjyotsingh/received_events","type":"User","site_admin":false},"created_at":"2016-08-24T13:28:58Z","updated_at":"2016-08-24T13:28:58Z","body":"@Leemoonsoo yes thats a good suggestion. Let me try and do it."}}
{"actor":{"display_login":"prabhjyotsingh"}}