co.cask.cdap.security.spi.authorization

Interface PrivilegesManager

All Known Subinterfaces:

Authorizer

All Known Implementing Classes:

AbstractAuthorizer, NoOpAuthorizer

public interface PrivilegesManager

Interface for managing privileges on entities.

Method Summary

Methods

Modifier and Type	Method and Description
void	grant(EntityId entity, Principal principal, Set<Action> actions) Grants a Principal authorization to perform a set of actions on an EntityId.
void	revoke(EntityId entity) Revokes all principals' authorization to perform any Action on the given EntityId.
void	revoke(EntityId entity, Principal principal, Set<Action> actions) Revokes a principal's authorization to perform a set of actions on an EntityId.

Method Detail

grant

void grant(EntityId entity,
         Principal principal,
         Set<Action> actions)
           throws Exception

Grants a Principal authorization to perform a set of actions on an EntityId.

Parameters:

entity - the EntityId to whom actions are to be granted

principal - the Principal that performs the actions. This could be a user, or role

actions - the set of actions to grant.

Throws:

Exception

revoke

void revoke(EntityId entity,
          Principal principal,
          Set<Action> actions)
            throws Exception

Revokes a principal's authorization to perform a set of actions on an EntityId.

Parameters:

entity - the EntityId whose actions are to be revoked

principal - the Principal that performs the actions. This could be a user, group or role

actions - the set of actions to revoke

Throws:

Exception

revoke

void revoke(EntityId entity)
            throws Exception

Revokes all principals' authorization to perform any Action on the given EntityId.

Parameters:

entity - the EntityId on which all actions are to be revoked

Throws:

Exception