Package org.apache.hadoop.hbase.security.access

Class NoopAccessChecker

java.lang.Object

org.apache.hadoop.hbase.security.access.AccessChecker

org.apache.hadoop.hbase.security.access.NoopAccessChecker

@Private
public final class NoopAccessChecker
extends AccessChecker

NoopAccessChecker is returned when hbase.security.authorization is not enabled. Always allow authorization if any user require any permission.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.hbase.security.access.AccessChecker

AccessChecker.InputUser

Constructor Summary

Constructors

Constructor	Description
NoopAccessChecker(org.apache.hadoop.conf.Configuration conf)

Method Summary

Modifier and Type	Method	Description
void	checkLockPermissions(User user, String namespace, TableName tableName, RegionInfo[] regionInfos, String reason)
boolean	hasUserPermission(User user, String request, Permission permission)	Authorizes that if the current user has the given permissions.
void	performOnSuperuser(String request, User caller, String userToBeChecked)	Check if caller is granting or revoking superusers's or supergroups's permissions.
AuthResult	permissionGranted(String request, User user, Permission.Action permRequest, TableName tableName, Map<byte[],? extends Collection<?>> families)	Check the current user for authorization to perform a specific action against the given set of row data.
void	requireAccess(User user, String request, TableName tableName, Permission.Action... permissions)	Authorizes that the current user has any of the given permissions to access the table.
void	requireGlobalPermission(User user, String request, Permission.Action perm, String namespace)	Checks that the user has the given global permission.
void	requireGlobalPermission(User user, String request, Permission.Action perm, TableName tableName, Map<byte[],? extends Collection<byte[]>> familyMap, String filterUser)	Checks that the user has the given global permission.
void	requireNamespacePermission(User user, String request, String namespace, String filterUser, Permission.Action... permissions)	Checks that the user has the given global or namespace permission.
void	requireNamespacePermission(User user, String request, String namespace, TableName tableName, Map<byte[],? extends Collection<byte[]>> familyMap, Permission.Action... permissions)	Checks that the user has the given global or namespace permission.
void	requirePermission(User user, String request, String filterUser, Permission.Action perm)	Authorizes that the current user has global privileges for the given action.
void	requirePermission(User user, String request, TableName tableName, byte[] family, byte[] qualifier, String filterUser, Permission.Action... permissions)	Authorizes that the current user has any of the given permissions for the given table, column family and column qualifier.
void	requireTablePermission(User user, String request, TableName tableName, byte[] family, byte[] qualifier, Permission.Action... permissions)	Authorizes that the current user has any of the given permissions for the given table, column family and column qualifier.

Methods inherited from class org.apache.hadoop.hbase.security.access.AccessChecker

getAuthManager, getUserGroups, isAuthorizationSupported, logResult, validateCallerWithFilterUser

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

NoopAccessChecker

public NoopAccessChecker(org.apache.hadoop.conf.Configuration conf)
                  throws RuntimeException

Throws:

RuntimeException

Method Details

requireAccess

public void requireAccess(User user,
 String request,
 TableName tableName,
 Permission.Action... permissions)

Description copied from class: AccessChecker

Authorizes that the current user has any of the given permissions to access the table.

Overrides:

requireAccess in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type.

tableName - Table requested

permissions - Actions being requested

requirePermission

public void requirePermission(User user,
 String request,
 String filterUser,
 Permission.Action perm)

Description copied from class: AccessChecker

Authorizes that the current user has global privileges for the given action.

Overrides:

requirePermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

filterUser - User name to be filtered from permission as requested

perm - The action being requested

requireGlobalPermission

public void requireGlobalPermission(User user,
 String request,
 Permission.Action perm,
 TableName tableName,
 Map<byte[],? extends Collection<byte[]>> familyMap,
 String filterUser)

Description copied from class: AccessChecker

Checks that the user has the given global permission. The generated audit log message will contain context information for the operation being authorized, based on the given parameters.

Overrides:

requireGlobalPermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

perm - Action being requested

tableName - Affected table name.

familyMap - Affected column families.

filterUser - User name to be filtered from permission as requested

requireGlobalPermission

public void requireGlobalPermission(User user,
 String request,
 Permission.Action perm,
 String namespace)

Description copied from class: AccessChecker

Checks that the user has the given global permission. The generated audit log message will contain context information for the operation being authorized, based on the given parameters.

Overrides:

requireGlobalPermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

perm - Action being requested

namespace - The given namespace

requireNamespacePermission

public void requireNamespacePermission(User user,
 String request,
 String namespace,
 String filterUser,
 Permission.Action... permissions)

Description copied from class: AccessChecker

Checks that the user has the given global or namespace permission.

Overrides:

requireNamespacePermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

namespace - Name space as requested

filterUser - User name to be filtered from permission as requested

permissions - Actions being requested

requireNamespacePermission

public void requireNamespacePermission(User user,
 String request,
 String namespace,
 TableName tableName,
 Map<byte[],? extends Collection<byte[]>> familyMap,
 Permission.Action... permissions)

Description copied from class: AccessChecker

Checks that the user has the given global or namespace permission.

Overrides:

requireNamespacePermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

namespace - The given namespace

tableName - Table requested

familyMap - Column family map requested

permissions - Actions being requested

requirePermission

public void requirePermission(User user,
 String request,
 TableName tableName,
 byte[] family,
 byte[] qualifier,
 String filterUser,
 Permission.Action... permissions)

Description copied from class: AccessChecker

Authorizes that the current user has any of the given permissions for the given table, column family and column qualifier.

Overrides:

requirePermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

tableName - Table requested

family - Column family requested

qualifier - Column qualifier requested

filterUser - User name to be filtered from permission as requested

permissions - Actions being requested

requireTablePermission

public void requireTablePermission(User user,
 String request,
 TableName tableName,
 byte[] family,
 byte[] qualifier,
 Permission.Action... permissions)

Description copied from class: AccessChecker

Authorizes that the current user has any of the given permissions for the given table, column family and column qualifier.

Overrides:

requireTablePermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

tableName - Table requested

family - Column family param

qualifier - Column qualifier param

performOnSuperuser

public void performOnSuperuser(String request,
 User caller,
 String userToBeChecked)

Description copied from class: AccessChecker

Check if caller is granting or revoking superusers's or supergroups's permissions.

Overrides:

performOnSuperuser in class AccessChecker

Parameters:

request - request name

caller - caller

userToBeChecked - target user or group

checkLockPermissions

public void checkLockPermissions(User user,
 String namespace,
 TableName tableName,
 RegionInfo[] regionInfos,
 String reason)

Overrides:

checkLockPermissions in class AccessChecker

hasUserPermission

public boolean hasUserPermission(User user,
 String request,
 Permission permission)

Description copied from class: AccessChecker

Authorizes that if the current user has the given permissions.

Overrides:

hasUserPermission in class AccessChecker

Parameters:

user - Active user to which authorization checks should be applied

request - Request type

permission - Actions being requested

Returns:

True if the user has the specific permission

permissionGranted

public AuthResult permissionGranted(String request,
 User user,
 Permission.Action permRequest,
 TableName tableName,
 Map<byte[],? extends Collection<?>> families)

Description copied from class: AccessChecker

Check the current user for authorization to perform a specific action against the given set of row data.

Note: Ordering of the authorization checks has been carefully optimized to short-circuit the most common requests and minimize the amount of processing required.

Overrides:

permissionGranted in class AccessChecker

Parameters:

request - User request

user - User name

permRequest - the action being requested

tableName - Table name

families - the map of column families to qualifiers present in the request

Returns:

an authorization result