Package org.apache.hadoop.security.authorize

Class UsersACLsManager

java.lang.Object

org.apache.hadoop.security.authorize.UsersACLsManager

public class UsersACLsManager
extends java.lang.Object

Class for handling case when some user should have access to application information of other users. This possibility can be configured with users mapping cur_user1=user1,user2;cur_user2=user3,user2

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	UsersACLsManager.ACE

Constructor Summary

Constructors

Constructor	Description
UsersACLsManager(Configuration conf)

Method Summary

Modifier and Type	Method	Description
java.lang.String	buildACEStrForUser(java.lang.String owner)	Build string with ACE to allow other users access to owner logs
boolean	checkUserAccess(java.lang.String reqUser, java.lang.String owner)
boolean	checkUserAccess(UserGroupInformation reqUser, java.lang.String owner)
boolean	isUsersACLEnable()	Check if users ACLs mapping manager can be used

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UsersACLsManager

public UsersACLsManager(Configuration conf)

Method Detail

isUsersACLEnable

public boolean isUsersACLEnable()

Check if users ACLs mapping manager can be used

Returns:

if any users was added to usersACLsMapping

checkUserAccess

public boolean checkUserAccess(java.lang.String reqUser,
                               java.lang.String owner)

Parameters:

reqUser - current user

owner - application owner

Returns:

if current user can have access to application owner files

checkUserAccess

public boolean checkUserAccess(UserGroupInformation reqUser,
                               java.lang.String owner)

Parameters:

reqUser - current user

owner - application owner

Returns:

if current user can have access to application owner files

buildACEStrForUser

public java.lang.String buildACEStrForUser(java.lang.String owner)

Build string with ACE to allow other users access to owner logs

Parameters:

owner - - username of application owner

Returns:

ACE in string format