org.apache.hadoop.yarn.security

Class AdminACLsManager

java.lang.Object

org.apache.hadoop.yarn.security.AdminACLsManager

@InterfaceAudience.Private
public class AdminACLsManager
extends Object

Constructor Summary

Constructors

Constructor and Description
AdminACLsManager(org.apache.hadoop.conf.Configuration conf) Constructs and initializes this AdminACLsManager

Method Summary

Methods

Modifier and Type	Method and Description
boolean	areACLsEnabled() Returns whether ACLs are enabled
boolean	checkAccess(org.apache.hadoop.security.UserGroupInformation callerUGI) Returns whether the specified user/group has administrator access
org.apache.hadoop.security.authorize.AccessControlList	getAdminAcl() Returns the internal structure used to maintain administrator ACLs
org.apache.hadoop.security.UserGroupInformation	getOwner() Returns the owner
boolean	isAdmin(org.apache.hadoop.security.UserGroupInformation callerUGI) Returns whether the specified user/group is an administrator

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AdminACLsManager

public AdminACLsManager(org.apache.hadoop.conf.Configuration conf)

Constructs and initializes this AdminACLsManager

Parameters:

conf - configuration for this object to use

Method Detail

getOwner

public org.apache.hadoop.security.UserGroupInformation getOwner()

Returns the owner

Returns:

Current user at the time of object creation

areACLsEnabled

public boolean areACLsEnabled()

Returns whether ACLs are enabled

Returns:

true if ACLs are enabled

See Also:

YarnConfiguration.YARN_ACL_ENABLE, YarnConfiguration.DEFAULT_YARN_ACL_ENABLE

getAdminAcl

public org.apache.hadoop.security.authorize.AccessControlList getAdminAcl()

Returns the internal structure used to maintain administrator ACLs

Returns:

Structure used to maintain administrator access

isAdmin

public boolean isAdmin(org.apache.hadoop.security.UserGroupInformation callerUGI)

Returns whether the specified user/group is an administrator

Parameters:

callerUGI - user/group to to check

Returns:

true if the UserGroupInformation specified is a member of the access control list for administrators

checkAccess

public boolean checkAccess(org.apache.hadoop.security.UserGroupInformation callerUGI)

Returns whether the specified user/group has administrator access

Parameters:

callerUGI - user/group to to check

Returns:

true if the UserGroupInformation specified is a member of the access control list for administrators and ACLs are enabled for this cluster

See Also:

getAdminAcl(), areACLsEnabled()