co.cask.cdap.security.authorization

Interface AuthorizationPlugin

All Known Implementing Classes:

AllowAllAuthorizationPlugin, InMemoryAuthorizationPlugin

public interface AuthorizationPlugin

Authorization plugin interface.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	authorized(EntityId entity, String user, Set<Action> actions) Checks if a user is allowed to perform a set of actions on an entity.
void	grant(EntityId entity, String user) Grants a user permission to perform all actions on an entity.
void	grant(EntityId entity, String user, Set<Action> actions) Grants a user permission to perform a set of actions on an entity.
void	revoke(EntityId entity) Revokes all user's permissions on an entity.
void	revoke(EntityId entity, String user) Revokes a user's permission on an entity.
void	revoke(EntityId entity, String user, Set<Action> actions) Revokes a user's permission to perform a set of actions on an entity.

Method Detail

authorized

boolean authorized(EntityId entity,
                 String user,
                 Set<Action> actions)

Checks if a user is allowed to perform a set of actions on an entity.

Parameters:

entity - the entity

user - the user

actions - the actions

Returns:

true if the user is allowed to perform all of the actions on the entity

grant

void grant(EntityId entity,
         String user,
         Set<Action> actions)

Grants a user permission to perform a set of actions on an entity.

Parameters:

entity - the entity

user - the user

actions - the actions

grant

void grant(EntityId entity,
         String user)

Grants a user permission to perform all actions on an entity.

Parameters:

entity - the entity

user - the user

revoke

void revoke(EntityId entity,
          String user,
          Set<Action> actions)

Revokes a user's permission to perform a set of actions on an entity.

Parameters:

entity - the entity

user - the user

actions - the actions

revoke

void revoke(EntityId entity,
          String user)

Revokes a user's permission on an entity.

Parameters:

entity - the entity

user - the user

revoke

void revoke(EntityId entity)

Revokes all user's permissions on an entity.

Parameters:

entity - the entity