Package org.apache.hadoop.ozone.security.acl

Class OzoneNativeAuthorizer

java.lang.Object

org.apache.hadoop.ozone.security.acl.OzoneNativeAuthorizer

All Implemented Interfaces:

org.apache.hadoop.ozone.security.acl.IAccessAuthorizer, OzoneManagerAuthorizer

@LimitedPrivate({"HDFS","Yarn","Ranger","Hive","HBase"})
@Evolving
public class OzoneNativeAuthorizer
extends Object
implements OzoneManagerAuthorizer

Native (internal) implementation of IAccessAuthorizer.

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.hadoop.ozone.security.acl.IAccessAuthorizer

org.apache.hadoop.ozone.security.acl.IAccessAuthorizer.ACLIdentityType, org.apache.hadoop.ozone.security.acl.IAccessAuthorizer.ACLType

Constructor Summary

Constructors

Constructor	Description
OzoneNativeAuthorizer()

Method Summary

Modifier and Type	Method	Description
boolean	checkAccess(org.apache.hadoop.ozone.security.acl.IOzoneObj ozObject, org.apache.hadoop.ozone.security.acl.RequestContext context)	Check access for given ozoneObject.
OzoneNativeAuthorizer	configure(OzoneManager om, KeyManager km, PrefixManager pm)	Configure this authorizer.
boolean	getAllowListAllVolumes()
boolean	isNative()
void	setAdminCheck(Predicate<org.apache.hadoop.security.UserGroupInformation> check)
void	setReadOnlyAdminCheck(Predicate<org.apache.hadoop.security.UserGroupInformation> check)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.hadoop.ozone.security.acl.IAccessAuthorizer

generateAssumeRoleSessionPolicy

Constructor Details

OzoneNativeAuthorizer

public OzoneNativeAuthorizer()

Method Details

isNative

public boolean isNative()

Specified by:

isNative in interface org.apache.hadoop.ozone.security.acl.IAccessAuthorizer

checkAccess

public boolean checkAccess(org.apache.hadoop.ozone.security.acl.IOzoneObj ozObject,
 org.apache.hadoop.ozone.security.acl.RequestContext context)
                    throws org.apache.hadoop.ozone.om.exceptions.OMException

Check access for given ozoneObject.

Specified by:

checkAccess in interface org.apache.hadoop.ozone.security.acl.IAccessAuthorizer

Parameters:

ozObject - object for which access needs to be checked.

context - Context object encapsulating all user related information.

Returns:

true if user has access else false.

Throws:

org.apache.hadoop.ozone.om.exceptions.OMException

configure

public OzoneNativeAuthorizer configure(OzoneManager om,
 KeyManager km,
 PrefixManager pm)

Description copied from interface: OzoneManagerAuthorizer

Configure this authorizer.

Specified by:

configure in interface OzoneManagerAuthorizer

setAdminCheck

public void setAdminCheck(Predicate<org.apache.hadoop.security.UserGroupInformation> check)

setReadOnlyAdminCheck

public void setReadOnlyAdminCheck(Predicate<org.apache.hadoop.security.UserGroupInformation> check)

getAllowListAllVolumes

public boolean getAllowListAllVolumes()