Package co.cask.cdap.security.spi.authorization

Interface Summary

Interface	Description
AuthorizationContext	A context for Authorizer extensions to interact with CDAP.
AuthorizationEnforcer	Enforces authorization for a Principal to perform an Action on an EntityId.
Authorizer	Interface for managing principals' authorization for actions on CDAP entities.
PrivilegesFetcher	Fetches privileges of the specified Principal.
PrivilegesManager	Interface for managing privileges on entities.

Class Summary

Class	Description
AbstractAuthorizer	Abstract class that implements Authorizer and provides default no-op implementations of Authorizer.initialize(AuthorizationContext) and Authorizer.destroy() so classes extending it do not have to implement these methods unless necessary.
NoOpAuthorizer	A no-op authorizer to use when authorization is disabled.

Exception Summary

Exception	Description
RoleAlreadyExistsException	Exception thrown when an Role already exists
RoleNotFoundException	Exception thrown when a Role is not found
UnauthorizedException	Exception thrown when Authentication is successful, but a Principal is not authorized to perform an Action on an EntityId.