co.cask.cdap.security.authorization

Interface AuthorizationEnforcementService

All Superinterfaces:

AuthorizationEnforcer, com.google.common.util.concurrent.Service

All Known Implementing Classes:

DefaultAuthorizationEnforcementService

public interface AuthorizationEnforcementService
extends com.google.common.util.concurrent.Service, AuthorizationEnforcer

An AuthorizationEnforcer used to enforce authorization policies in programs. If caching is enabled using Constants.Security.Authorization#CACHE_ENABLED, authorization policies are cached locally. A thread refreshes the cached policies periodically.

Nested Class Summary

Nested classes/interfaces inherited from interface com.google.common.util.concurrent.Service

com.google.common.util.concurrent.Service.Listener, com.google.common.util.concurrent.Service.State

Method Summary

Methods

Modifier and Type	Method and Description
void	invalidate(com.google.common.base.Predicate<Principal> predicate) Invalidates cached privileges of all principals that satisfy the specified Predicate.

Methods inherited from interface com.google.common.util.concurrent.Service

addListener, isRunning, start, startAndWait, state, stop, stopAndWait

Methods inherited from interface co.cask.cdap.security.spi.authorization.AuthorizationEnforcer

createFilter, enforce, enforce

Method Detail

invalidate

void invalidate(com.google.common.base.Predicate<Principal> predicate)

Invalidates cached privileges of all principals that satisfy the specified Predicate.