Intent-based Authorization

This post details the introduction of on-behalf-of-user authorization for Databricks Apps, enabling them to act with the permissions of the user invoking them. This builds upon the concept of intent-based authorization by providing a concrete mechanism for delegating user identity and permissions to applications, allowing for more secure and granular access control in multi-user environments. The implementation focuses on passing user identity to the SQL connector and separating app-owned from user-owned operations.