org.apache.accumulo.test.randomwalk.security
public class WalkingSecurity extends SecurityOperation implements Authorizor, Authenticator, PermissionHandler
Modifier and Type | Field and Description |
---|---|
protected static org.apache.log4j.Logger |
log |
authenticator, authorizor, permHandle
Constructor and Description |
---|
WalkingSecurity(Authorizor author,
Authenticator authent,
PermissionHandler pm,
String instanceId) |
WalkingSecurity(State state2) |
Modifier and Type | Method and Description |
---|---|
boolean |
ambiguousAuthorizations(String userName) |
boolean |
authenticateUser(String principal,
AuthenticationToken token) |
boolean |
canAskAboutUser(TCredentials credentials,
String user) |
void |
changeAuthorizations(String user,
Authorizations authorizations)
Used to change the authorizations for the user
|
void |
changePassword(String principal,
AuthenticationToken token) |
void |
cleanTablePermissions(String table)
Cleans up the permissions for a table.
|
void |
cleanUser(String user)
Deletes a user
|
static void |
clearInstance() |
void |
createUser(String principal,
AuthenticationToken token) |
void |
dropUser(String user)
Deletes a user
|
static WalkingSecurity |
get(State state) |
String[] |
getAuthsArray() |
Map<String,Integer> |
getAuthsMap() |
Authorizations |
getCachedUserAuthorizations(String user)
Used to get the authorizations for the user
|
org.apache.hadoop.fs.FileSystem |
getFs() |
String |
getLastKey() |
Set<Class<? extends AuthenticationToken>> |
getSupportedTokenTypes() |
TCredentials |
getSysCredentials() |
byte[] |
getSysPassword() |
AuthenticationToken |
getSysToken() |
String |
getSysUserName() |
TCredentials |
getTabCredentials() |
boolean |
getTableExists() |
String |
getTableName() |
byte[] |
getTabPassword() |
AuthenticationToken |
getTabToken() |
String |
getTabUserName() |
byte[] |
getUserPassword(String user) |
void |
grantSystemPermission(String user,
SystemPermission permission)
Gives the user the given system permission
|
void |
grantTablePermission(String user,
String table,
TablePermission permission)
Gives the user the given table permission
|
boolean |
hasCachedSystemPermission(String user,
SystemPermission permission)
Used to get the system permission for the user, with caching due to high frequency operation.
|
boolean |
hasCachedTablePermission(String user,
String table,
TablePermission permission)
Used to get the table permission of a user for a table, with caching.
|
boolean |
hasSystemPermission(String user,
SystemPermission permission)
Used to get the system permission for the user
|
boolean |
hasTablePermission(String user,
String table,
TablePermission permission)
Used to get the table permission of a user for a table
|
boolean |
inAmbiguousZone(String userName,
TablePermission tp) |
void |
increaseAuthMap(String s,
int increment) |
void |
initialize(String instanceId,
boolean initialize)
Sets up the authorizor for a new instance of Accumulo
|
void |
initializeSecurity(TCredentials rootuser,
String token)
Used to initialize security for the root user
|
void |
initTable(String table)
Initializes a new user
|
void |
initUser(String user)
Initializes a new user
|
Set<String> |
listUsers() |
void |
revokeSystemPermission(String user,
SystemPermission permission)
Denies the user the given system permission
|
void |
revokeTablePermission(String user,
String table,
TablePermission permission)
Denies the user the given table permission.
|
void |
setSysUserName(String name) |
void |
setTableName(String tName) |
void |
setTabUserName(String name) |
boolean |
userExists(String user) |
boolean |
userPassTransient(String user) |
boolean |
validSecurityHandlers(Authenticator one,
Authorizor two)
Used to validate that the Authorizor, Authenticator, and permission handler can coexist
|
boolean |
validSecurityHandlers(Authenticator one,
PermissionHandler two)
Used to validate that the Authorizor, Authenticator, and permission handler can coexist
|
boolean |
validSecurityHandlers(Authorizor one,
PermissionHandler two) |
boolean |
validTokenClass(String tokenClass)
Returns true if the given token is appropriate for this Authenticator
|
authenticateUser, canAlterTable, canBulkImport, canChangeAuthorizations, canChangePassword, canCloneTable, canCompact, canCreateTable, canCreateUser, canDeleteRange, canDeleteTable, canDropUser, canExport, canFlush, canGrantSystem, canGrantTable, canImport, canMerge, canOnlineOfflineTable, canPerformSystemActions, canRenameTable, canRevokeSystem, canRevokeTable, canScan, canSplitTablet, canWrite, changeAuthorizations, changePassword, createUser, deleteTable, dropUser, getAuthenticator, getAuthorizor, getInstance, getInstance, getPermHandler, getRootUsername, getUserAuthorizations, getUserAuthorizations, grantSystemPermission, grantTablePermission, hasSystemPermission, hasTablePermission, initializeSecurity, listUsers, revokeSystemPermission, revokeTablePermission
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
initializeSecurity
public WalkingSecurity(Authorizor author, Authenticator authent, PermissionHandler pm, String instanceId)
public WalkingSecurity(State state2)
public static WalkingSecurity get(State state)
public void initialize(String instanceId, boolean initialize)
Authorizor
initialize
in interface Authenticator
initialize
in interface Authorizor
initialize
in interface PermissionHandler
public boolean validSecurityHandlers(Authenticator one, PermissionHandler two)
Authorizor
validSecurityHandlers
in interface Authorizor
public boolean validSecurityHandlers(Authenticator one, Authorizor two)
PermissionHandler
validSecurityHandlers
in interface PermissionHandler
public boolean validSecurityHandlers(Authorizor one, PermissionHandler two)
validSecurityHandlers
in interface Authenticator
public void initializeSecurity(TCredentials rootuser, String token) throws ThriftSecurityException
Authorizor
initializeSecurity
in interface Authorizor
initializeSecurity
in interface PermissionHandler
ThriftSecurityException
public void changeAuthorizations(String user, Authorizations authorizations) throws AccumuloSecurityException
Authorizor
changeAuthorizations
in interface Authorizor
AccumuloSecurityException
public Authorizations getCachedUserAuthorizations(String user) throws AccumuloSecurityException
Authorizor
getCachedUserAuthorizations
in interface Authorizor
AccumuloSecurityException
public boolean ambiguousAuthorizations(String userName)
public void initUser(String user) throws AccumuloSecurityException
Authorizor
initUser
in interface Authorizor
initUser
in interface PermissionHandler
AccumuloSecurityException
public Set<String> listUsers() throws AccumuloSecurityException
listUsers
in interface Authenticator
AccumuloSecurityException
public boolean authenticateUser(String principal, AuthenticationToken token)
authenticateUser
in interface Authenticator
public void createUser(String principal, AuthenticationToken token) throws AccumuloSecurityException
createUser
in interface Authenticator
AccumuloSecurityException
public void dropUser(String user) throws AccumuloSecurityException
Authorizor
dropUser
in interface Authenticator
dropUser
in interface Authorizor
AccumuloSecurityException
public void changePassword(String principal, AuthenticationToken token) throws AccumuloSecurityException
changePassword
in interface Authenticator
AccumuloSecurityException
public boolean userExists(String user)
userExists
in interface Authenticator
public boolean hasSystemPermission(String user, SystemPermission permission) throws AccumuloSecurityException
PermissionHandler
hasSystemPermission
in interface PermissionHandler
AccumuloSecurityException
public boolean hasCachedSystemPermission(String user, SystemPermission permission) throws AccumuloSecurityException
PermissionHandler
hasCachedSystemPermission
in interface PermissionHandler
AccumuloSecurityException
public boolean hasTablePermission(String user, String table, TablePermission permission) throws AccumuloSecurityException, TableNotFoundException
PermissionHandler
hasTablePermission
in interface PermissionHandler
AccumuloSecurityException
TableNotFoundException
public boolean hasCachedTablePermission(String user, String table, TablePermission permission) throws AccumuloSecurityException, TableNotFoundException
PermissionHandler
hasCachedTablePermission
in interface PermissionHandler
AccumuloSecurityException
TableNotFoundException
public void grantSystemPermission(String user, SystemPermission permission) throws AccumuloSecurityException
PermissionHandler
grantSystemPermission
in interface PermissionHandler
AccumuloSecurityException
public void revokeSystemPermission(String user, SystemPermission permission) throws AccumuloSecurityException
PermissionHandler
revokeSystemPermission
in interface PermissionHandler
AccumuloSecurityException
public void grantTablePermission(String user, String table, TablePermission permission) throws AccumuloSecurityException, TableNotFoundException
PermissionHandler
grantTablePermission
in interface PermissionHandler
AccumuloSecurityException
TableNotFoundException
public void revokeTablePermission(String user, String table, TablePermission permission) throws AccumuloSecurityException, TableNotFoundException
PermissionHandler
revokeTablePermission
in interface PermissionHandler
AccumuloSecurityException
TableNotFoundException
public void cleanTablePermissions(String table) throws AccumuloSecurityException, TableNotFoundException
PermissionHandler
cleanTablePermissions
in interface PermissionHandler
AccumuloSecurityException
TableNotFoundException
public void cleanUser(String user) throws AccumuloSecurityException
PermissionHandler
cleanUser
in interface PermissionHandler
AccumuloSecurityException
public String getTabUserName()
public String getSysUserName()
public void setTabUserName(String name)
public void setSysUserName(String name)
public String getTableName()
public boolean getTableExists()
public TCredentials getSysCredentials()
public TCredentials getTabCredentials()
public AuthenticationToken getSysToken()
public AuthenticationToken getTabToken()
public byte[] getUserPassword(String user)
public byte[] getSysPassword()
public byte[] getTabPassword()
public boolean userPassTransient(String user)
public void setTableName(String tName)
public void initTable(String table) throws AccumuloSecurityException
PermissionHandler
initTable
in interface PermissionHandler
AccumuloSecurityException
public String[] getAuthsArray()
public boolean inAmbiguousZone(String userName, TablePermission tp)
public String getLastKey()
public void increaseAuthMap(String s, int increment)
public org.apache.hadoop.fs.FileSystem getFs()
public boolean canAskAboutUser(TCredentials credentials, String user) throws ThriftSecurityException
canAskAboutUser
in class SecurityOperation
ThriftSecurityException
public boolean validTokenClass(String tokenClass)
Authenticator
validTokenClass
in interface Authenticator
public static void clearInstance()
public Set<Class<? extends AuthenticationToken>> getSupportedTokenTypes()
getSupportedTokenTypes
in interface Authenticator
Copyright © 2015 Apache Accumulo Project. All Rights Reserved.