Package org.apache.hadoop.security.authorize

Class ServiceAuthorizationManager

java.lang.Object

org.apache.hadoop.security.authorize.ServiceAuthorizationManager

@LimitedPrivate({"HDFS","MapReduce"})
@Evolving
public class ServiceAuthorizationManager
extends java.lang.Object

An authorization manager which handles service-level authorization for incoming service requests.

Field Summary

Fields

Modifier and Type	Field	Description
static org.slf4j.Logger	AUDITLOG
static java.lang.String	SERVICE_AUTHORIZATION_CONFIG	Deprecated. Use CommonConfigurationKeysPublic.HADOOP_SECURITY_AUTHORIZATION instead.

Constructor Summary

Constructors

Constructor	Description
ServiceAuthorizationManager()

Method Summary

Modifier and Type	Method	Description
void	authorize(UserGroupInformation user, java.lang.Class<?> protocol, Configuration conf, java.net.InetAddress addr)	Authorize the user to access the protocol being used.
AccessControlList	getProtocolsAcls(java.lang.Class<?> className)
AccessControlList	getProtocolsBlockedAcls(java.lang.Class<?> className)
MachineList	getProtocolsBlockedMachineList(java.lang.Class<?> className)
MachineList	getProtocolsMachineList(java.lang.Class<?> className)
java.util.Set<java.lang.Class<?>>	getProtocolsWithAcls()
java.util.Set<java.lang.Class<?>>	getProtocolsWithMachineLists()
void	refresh(Configuration conf, PolicyProvider provider)
void	refreshWithLoadedConfiguration(Configuration conf, PolicyProvider provider)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SERVICE_AUTHORIZATION_CONFIG

@Deprecated
public static final java.lang.String SERVICE_AUTHORIZATION_CONFIG

Deprecated.

Use CommonConfigurationKeysPublic.HADOOP_SECURITY_AUTHORIZATION instead.

Configuration key for controlling service-level authorization for Hadoop.

See Also:

Constant Field Values

AUDITLOG

public static final org.slf4j.Logger AUDITLOG

Constructor Detail

ServiceAuthorizationManager

public ServiceAuthorizationManager()

Method Detail

authorize

public void authorize(UserGroupInformation user,
                      java.lang.Class<?> protocol,
                      Configuration conf,
                      java.net.InetAddress addr)
               throws AuthorizationException

Authorize the user to access the protocol being used.

Parameters:

user - user accessing the service

protocol - service being accessed

conf - configuration to use

addr - InetAddress of the client

Throws:

AuthorizationException - on authorization failure

refresh

public void refresh(Configuration conf,
                    PolicyProvider provider)

refreshWithLoadedConfiguration

@Private
public void refreshWithLoadedConfiguration(Configuration conf,
                                           PolicyProvider provider)

getProtocolsWithAcls

@VisibleForTesting
public java.util.Set<java.lang.Class<?>> getProtocolsWithAcls()

getProtocolsAcls

@VisibleForTesting
public AccessControlList getProtocolsAcls(java.lang.Class<?> className)

getProtocolsBlockedAcls

@VisibleForTesting
public AccessControlList getProtocolsBlockedAcls(java.lang.Class<?> className)

getProtocolsWithMachineLists

@VisibleForTesting
public java.util.Set<java.lang.Class<?>> getProtocolsWithMachineLists()

getProtocolsMachineList

@VisibleForTesting
public MachineList getProtocolsMachineList(java.lang.Class<?> className)

getProtocolsBlockedMachineList

@VisibleForTesting
public MachineList getProtocolsBlockedMachineList(java.lang.Class<?> className)