Package com.mapr.baseutils.utils

Class PolicyServerPermissionsManager

java.lang.Object

com.mapr.baseutils.utils.PolicyServerPermissionsManager

public class PolicyServerPermissionsManager
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
class	PolicyServerPermissionsManager.PoilicyActionPermission	Utility inner class to render permission for certain action

Method Summary

Modifier and Type	Method	Description
boolean	canPerformActionAtClusterLevel(com.mapr.fs.proto.Security.CredentialsMsg creds, int actionMask, StringBuilder errorMsg)
boolean	canPerformActionOnSecurityPolicy(com.mapr.fs.proto.Common.SecurityPolicyProperties spProps, com.mapr.fs.proto.Security.CredentialsMsg creds, int actionMask, StringBuilder errorMsg)
boolean	canPerformSecurityPolicyAction(com.mapr.fs.cldb.proto.CLDBProto.UserActions action, com.mapr.fs.proto.Security.CredentialsMsg creds, com.mapr.fs.proto.Common.SecurityPolicyProperties spProps)
ACL	getClusterAcl()
static PolicyServerPermissionsManager	getInstance(com.mapr.fs.proto.Security.AccessControlList clusterAclList, com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterAces, com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterIamAces, int clusterOwnerUid, boolean rejectRoot, boolean squashRoot)
List<PolicyServerPermissionsManager.PoilicyActionPermission>	getUserPermissions(com.mapr.fs.proto.Security.CredentialsMsg userCreds, com.mapr.fs.proto.Common.SecurityPolicyProperties secPolProp)
boolean	hasAdminCredentials(com.mapr.fs.proto.Security.CredentialsMsg creds)
void	updateConfParams(com.mapr.fs.proto.Security.AccessControlList clusterAclList, com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterAces, com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterIamAces, boolean rejectRoot, boolean squashRoot)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

getInstance

public static PolicyServerPermissionsManager getInstance(com.mapr.fs.proto.Security.AccessControlList clusterAclList,
 com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterAces,
 com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterIamAces,
 int clusterOwnerUid,
 boolean rejectRoot,
 boolean squashRoot)

updateConfParams

public void updateConfParams(com.mapr.fs.proto.Security.AccessControlList clusterAclList,
 com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterAces,
 com.mapr.fs.cldb.proto.CLDBProto.ClusterAces clusterIamAces,
 boolean rejectRoot,
 boolean squashRoot)

getClusterAcl

public ACL getClusterAcl()

canPerformActionOnSecurityPolicy

public boolean canPerformActionOnSecurityPolicy(com.mapr.fs.proto.Common.SecurityPolicyProperties spProps,
 com.mapr.fs.proto.Security.CredentialsMsg creds,
 int actionMask,
 StringBuilder errorMsg)

canPerformActionAtClusterLevel

public boolean canPerformActionAtClusterLevel(com.mapr.fs.proto.Security.CredentialsMsg creds,
 int actionMask,
 StringBuilder errorMsg)

canPerformSecurityPolicyAction

public boolean canPerformSecurityPolicyAction(com.mapr.fs.cldb.proto.CLDBProto.UserActions action,
 com.mapr.fs.proto.Security.CredentialsMsg creds,
 com.mapr.fs.proto.Common.SecurityPolicyProperties spProps)

hasAdminCredentials

public boolean hasAdminCredentials(com.mapr.fs.proto.Security.CredentialsMsg creds)

getUserPermissions

public List<PolicyServerPermissionsManager.PoilicyActionPermission> getUserPermissions(com.mapr.fs.proto.Security.CredentialsMsg userCreds,
 com.mapr.fs.proto.Common.SecurityPolicyProperties secPolProp)