co.cask.cdap.security.authorization

Class InMemoryAuthorizationPlugin

java.lang.Object

co.cask.cdap.security.authorization.InMemoryAuthorizationPlugin

All Implemented Interfaces:

AuthorizationPlugin

@NotThreadSafe
public class InMemoryAuthorizationPlugin
extends Object
implements AuthorizationPlugin

In-memory implementation of AuthorizationPlugin.

Constructor Summary

Constructors

Constructor and Description
InMemoryAuthorizationPlugin()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	authorized(EntityId entity, String user, Set<Action> actions) Checks if a user is allowed to perform a set of actions on an entity.
void	grant(EntityId entity, String user) Grants a user permission to perform all actions on an entity.
void	grant(EntityId entity, String user, Set<Action> actions) Grants a user permission to perform a set of actions on an entity.
void	revoke(EntityId entity) Revokes all user's permissions on an entity.
void	revoke(EntityId entity, String user) Revokes a user's permission on an entity.
void	revoke(EntityId entity, String user, Set<Action> actions) Revokes a user's permission to perform a set of actions on an entity.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

InMemoryAuthorizationPlugin

public InMemoryAuthorizationPlugin()

Method Detail

authorized

public boolean authorized(EntityId entity,
                 String user,
                 Set<Action> actions)

Description copied from interface: AuthorizationPlugin

Checks if a user is allowed to perform a set of actions on an entity.

Specified by:

authorized in interface AuthorizationPlugin

Parameters:

entity - the entity

user - the user

actions - the actions

Returns:

true if the user is allowed to perform all of the actions on the entity

grant

public void grant(EntityId entity,
         String user,
         Set<Action> actions)

Description copied from interface: AuthorizationPlugin

Grants a user permission to perform a set of actions on an entity.

Specified by:

grant in interface AuthorizationPlugin

Parameters:

entity - the entity

user - the user

actions - the actions

grant

public void grant(EntityId entity,
         String user)

Description copied from interface: AuthorizationPlugin

Grants a user permission to perform all actions on an entity.

Specified by:

grant in interface AuthorizationPlugin

Parameters:

entity - the entity

user - the user

revoke

public void revoke(EntityId entity,
          String user,
          Set<Action> actions)

Description copied from interface: AuthorizationPlugin

Revokes a user's permission to perform a set of actions on an entity.

Specified by:

revoke in interface AuthorizationPlugin

Parameters:

entity - the entity

user - the user

actions - the actions

revoke

public void revoke(EntityId entity,
          String user)

Description copied from interface: AuthorizationPlugin

Revokes a user's permission on an entity.

Specified by:

revoke in interface AuthorizationPlugin

Parameters:

entity - the entity

user - the user

revoke

public void revoke(EntityId entity)

Description copied from interface: AuthorizationPlugin

Revokes all user's permissions on an entity.

Specified by:

revoke in interface AuthorizationPlugin

Parameters:

entity - the entity