co.cask.cdap.security.authorization

Class RemotePrivilegesManager

java.lang.Object

co.cask.cdap.common.internal.remote.RemoteOpsClient

co.cask.cdap.security.authorization.RemotePrivilegesManager

All Implemented Interfaces:

PrivilegesManager

public class RemotePrivilegesManager
extends RemoteOpsClient
implements PrivilegesManager

Class that modifies privileges on entities by making HTTP Requests to the Master. This is required because some authorization backends (e.g. Apache Sentry) do not support proxy authentication. Hence system containers like stream and explore service cannot interact with them directly.

Method Summary

Methods

Modifier and Type	Method and Description
void	grant(EntityId entity, Principal principal, Set<Action> actions)
void	revoke(EntityId entity)
void	revoke(EntityId entity, Principal principal, Set<Action> actions)

Methods inherited from class co.cask.cdap.common.internal.remote.RemoteOpsClient

executeRequest, executeRequest

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

grant

public void grant(EntityId entity,
         Principal principal,
         Set<Action> actions)
           throws Exception

Specified by:

grant in interface PrivilegesManager

Throws:

Exception

revoke

public void revoke(EntityId entity,
          Principal principal,
          Set<Action> actions)
            throws Exception

Specified by:

revoke in interface PrivilegesManager

Throws:

Exception

revoke

public void revoke(EntityId entity)
            throws Exception

Specified by:

revoke in interface PrivilegesManager

Throws:

Exception