Package org.apache.hadoop.hbase.security

Class Superusers

java.lang.Object

org.apache.hadoop.hbase.security.Superusers

@Private
public final class Superusers
extends Object

Keeps lists of superusers and super groups loaded from HBase configuration, checks if certain user is regarded as superuser.

Field Summary

Fields

Modifier and Type	Field	Description
private static final org.slf4j.Logger	LOG
private static org.apache.hbase.thirdparty.com.google.common.collect.ImmutableSet<String>	superGroups
static final String	SUPERUSER_CONF_KEY	Configuration key for superusers
private static org.apache.hbase.thirdparty.com.google.common.collect.ImmutableSet<String>	superUsers
private static User	systemUser

Constructor Summary

Constructors

Modifier	Constructor	Description
private	Superusers()

Method Summary

Modifier and Type	Method	Description
static Collection<String>	getSuperGroups()
static Collection<String>	getSuperUsers()
static User	getSystemUser()
static void	initialize(org.apache.hadoop.conf.Configuration conf)	Should be called only once to pre-load list of super users and super groups from Configuration.
static boolean	isSuperUser(String user)	Check if the current user is a super user
static boolean	isSuperUser(User user)	Check if the current user is a super user

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOG

private static final org.slf4j.Logger LOG

SUPERUSER_CONF_KEY

public static final String SUPERUSER_CONF_KEY

Configuration key for superusers

See Also:

• Constant Field Values

superUsers

private static org.apache.hbase.thirdparty.com.google.common.collect.ImmutableSet<String> superUsers

superGroups

private static org.apache.hbase.thirdparty.com.google.common.collect.ImmutableSet<String> superGroups

systemUser

private static User systemUser

Constructor Details

Superusers

private Superusers()

Method Details

initialize

public static void initialize(org.apache.hadoop.conf.Configuration conf)
                       throws IOException

Should be called only once to pre-load list of super users and super groups from Configuration. This operation is idempotent.

Parameters:

conf - configuration to load users from

Throws:

IOException - if unable to initialize lists of superusers or super groups

IllegalStateException - if current user is null

isSuperUser

public static boolean isSuperUser(User user)

Check if the current user is a super user

Parameters:

user - to check

Returns:

true if current user is a super user (whether as user running process, declared as individual superuser or member of supergroup), false otherwise.

Throws:

IllegalStateException - if lists of superusers/super groups haven't been initialized properly

isSuperUser

public static boolean isSuperUser(String user)

Check if the current user is a super user

Parameters:

user - to check

Returns:

true if current user is a super user, false otherwise.

getSuperUsers

public static Collection<String> getSuperUsers()

getSuperGroups

public static Collection<String> getSuperGroups()

getSystemUser

public static User getSystemUser()