org.apache.storm.security.auth.authorizer

Class ImpersonationAuthorizer

java.lang.Object

org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer

All Implemented Interfaces:

IAuthorizer

public class ImpersonationAuthorizer
extends Object
implements IAuthorizer

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	ImpersonationAuthorizer.ImpersonationACL

Field Summary

Fields

Modifier and Type	Field and Description
protected IGroupMappingServiceProvider	groupMappingProvider
protected IPrincipalToLocal	ptol
protected Map<String,ImpersonationAuthorizer.ImpersonationACL>	userImpersonationACL
protected static String	WILD_CARD

Constructor Summary

Constructors

Constructor and Description
ImpersonationAuthorizer()

Method Summary

Modifier and Type	Method and Description
boolean	permit(ReqContext context, String operation, Map<String,Object> topoConf) permit() method is invoked for each incoming Thrift request.
void	prepare(Map<String,Object> conf) Invoked once immediately after construction.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

WILD_CARD

protected static final String WILD_CARD

See Also:

Constant Field Values

userImpersonationACL

protected Map<String,ImpersonationAuthorizer.ImpersonationACL> userImpersonationACL

ptol

protected IPrincipalToLocal ptol

groupMappingProvider

protected IGroupMappingServiceProvider groupMappingProvider

Constructor Detail

ImpersonationAuthorizer

public ImpersonationAuthorizer()

Method Detail

prepare

public void prepare(Map<String,Object> conf)

Description copied from interface: IAuthorizer

Invoked once immediately after construction.

Specified by:

prepare in interface IAuthorizer

Parameters:

conf - Storm cluster configuration

permit

public boolean permit(ReqContext context,
                      String operation,
                      Map<String,Object> topoConf)

Description copied from interface: IAuthorizer

permit() method is invoked for each incoming Thrift request.

Specified by:

permit in interface IAuthorizer

Parameters:

context - request context includes info about

operation - operation name

topoConf - configuration of targeted topology

Returns:

true if the request is authorized, false if reject