Class SupervisorSimpleACLAuthorizer
- java.lang.Object
-
- org.apache.storm.security.auth.authorizer.SupervisorSimpleACLAuthorizer
-
- All Implemented Interfaces:
IAuthorizer
public class SupervisorSimpleACLAuthorizer extends Object implements IAuthorizer
An authorization implementation that simply checks if a user is allowed to perform specific operations.
-
-
Field Summary
Fields Modifier and Type Field Description protected Set<String>
admins
protected Set<String>
adminsGroups
protected IGroupMappingServiceProvider
groupMappingServiceProvider
protected Set<String>
nimbus
protected Set<String>
nimbusCommands
protected IPrincipalToLocal
ptol
protected Set<String>
topoCommands
-
Constructor Summary
Constructors Constructor Description SupervisorSimpleACLAuthorizer()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description boolean
permit(ReqContext context, String operation, Map<String,Object> topoConf)
permit() method is invoked for each incoming Thrift request.void
prepare(Map<String,Object> conf)
Invoked once immediately after construction.
-
-
-
Field Detail
-
ptol
protected IPrincipalToLocal ptol
-
groupMappingServiceProvider
protected IGroupMappingServiceProvider groupMappingServiceProvider
-
-
Method Detail
-
prepare
public void prepare(Map<String,Object> conf)
Invoked once immediately after construction.- Specified by:
prepare
in interfaceIAuthorizer
- Parameters:
conf
- Storm configuration
-
permit
public boolean permit(ReqContext context, String operation, Map<String,Object> topoConf)
permit() method is invoked for each incoming Thrift request.- Specified by:
permit
in interfaceIAuthorizer
- Parameters:
context
- request context includes info aboutoperation
- operation nametopoConf
- configuration of targeted topology- Returns:
- true if the request is authorized, false if reject
-
-