co.cask.cdap.security.authorization

Class AuthorizationEnforcementModule

java.lang.Object

co.cask.cdap.common.runtime.RuntimeModule

co.cask.cdap.security.authorization.AuthorizationEnforcementModule

public class AuthorizationEnforcementModule
extends RuntimeModule

A module that contains bindings for AuthorizationEnforcementService and PrivilegesFetcher.

Field Summary

Fields

Modifier and Type	Field and Description
static String	PRIVILEGES_FETCHER_PROXY
static String	PRIVILEGES_FETCHER_PROXY_CACHE

Constructor Summary

Constructors

Constructor and Description
AuthorizationEnforcementModule()

Method Summary

Methods

Modifier and Type	Method and Description
com.google.inject.Module	getDistributedModules() Used by program containers and system services (viz explore service, stream service) that need to enforce authorization in distributed mode.
com.google.inject.Module	getInMemoryModules()
com.google.inject.AbstractModule	getMasterModule() Returns an AbstractModule containing bindings for authorization enforcement to be used in the Master.
com.google.inject.Module	getStandaloneModules()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

PRIVILEGES_FETCHER_PROXY_CACHE

public static final String PRIVILEGES_FETCHER_PROXY_CACHE

See Also:

Constant Field Values

PRIVILEGES_FETCHER_PROXY

public static final String PRIVILEGES_FETCHER_PROXY

See Also:

Constant Field Values

Constructor Detail

AuthorizationEnforcementModule

public AuthorizationEnforcementModule()

Method Detail

getInMemoryModules

public com.google.inject.Module getInMemoryModules()

Specified by:

getInMemoryModules in class RuntimeModule

getStandaloneModules

public com.google.inject.Module getStandaloneModules()

Specified by:

getStandaloneModules in class RuntimeModule

getDistributedModules

public com.google.inject.Module getDistributedModules()

Used by program containers and system services (viz explore service, stream service) that need to enforce authorization in distributed mode. For fetching privileges, these components are expected to proxy via a proxy service, which in turn uses the authorization enforcement modules defined by #getProxyModule

Specified by:

getDistributedModules in class RuntimeModule

getMasterModule

public com.google.inject.AbstractModule getMasterModule()

Returns an AbstractModule containing bindings for authorization enforcement to be used in the Master.