org.apache.storm.security.auth.authorizer

Class SimpleACLAuthorizer

java.lang.Object

org.apache.storm.security.auth.authorizer.SimpleACLAuthorizer

All Implemented Interfaces:

IAuthorizer

public class SimpleACLAuthorizer
extends Object
implements IAuthorizer

An authorization implementation that simply checks if a user is allowed to perform specific operations.

Field Summary

Fields

Modifier and Type	Field and Description
protected Set<String>	_admins
protected IGroupMappingServiceProvider	_groupMappingProvider
protected Set<String>	_nimbusGroups
protected Set<String>	_nimbusUsers
protected IPrincipalToLocal	_ptol
protected Set<String>	_supervisorCommands
protected Set<String>	_supervisors
protected Set<String>	_topoCommands
protected Set<String>	_userCommands

Constructor Summary

Constructors

Constructor and Description
SimpleACLAuthorizer()

Method Summary

Modifier and Type	Method and Description
boolean	permit(ReqContext context, String operation, Map topology_conf) permit() method is invoked for each incoming Thrift request
void	prepare(Map conf) Invoked once immediately after construction

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

_userCommands

protected Set<String> _userCommands

_supervisorCommands

protected Set<String> _supervisorCommands

_topoCommands

protected Set<String> _topoCommands

_admins

protected Set<String> _admins

_supervisors

protected Set<String> _supervisors

_nimbusUsers

protected Set<String> _nimbusUsers

_nimbusGroups

protected Set<String> _nimbusGroups

_ptol

protected IPrincipalToLocal _ptol

_groupMappingProvider

protected IGroupMappingServiceProvider _groupMappingProvider

Constructor Detail

SimpleACLAuthorizer

public SimpleACLAuthorizer()

Method Detail

prepare

public void prepare(Map conf)

Invoked once immediately after construction

Specified by:

prepare in interface IAuthorizer

Parameters:

conf - Storm configuration

permit

public boolean permit(ReqContext context,
                      String operation,
                      Map topology_conf)

permit() method is invoked for each incoming Thrift request

Specified by:

permit in interface IAuthorizer

Parameters:

context - request context includes info about

operation - operation name

topology_conf - configuration of targeted topology

Returns:

true if the request is authorized, false if reject