org.apache.accumulo.server.security

Class AuditedSecurityOperation

java.lang.Object

org.apache.accumulo.server.security.SecurityOperation

org.apache.accumulo.server.security.AuditedSecurityOperation

public class AuditedSecurityOperation
extends SecurityOperation

Field Summary

Fields

Modifier and Type	Field and Description
static org.apache.log4j.Logger	audit
static String	AUDITLOG
static String	AUTHENICATE_AUDIT_TEMPLATE
static String	CAN_BULK_IMPORT_AUDIT_TEMPLATE
static String	CAN_CLONE_TABLE_AUDIT_TEMPLATE
static String	CAN_CREATE_TABLE_AUDIT_TEMPLATE
static String	CAN_DELETE_RANGE_AUDIT_TEMPLATE
static String	CAN_DELETE_TABLE_AUDIT_TEMPLATE
static String	CAN_EXPORT_AUDIT_TEMPLATE
static String	CAN_IMPORT_AUDIT_TEMPLATE
static String	CAN_ONLINE_OFFLINE_TABLE_AUDIT_TEMPLATE
static String	CAN_RENAME_TABLE_AUDIT_TEMPLATE
static String	CAN_SCAN_AUDIT_TEMPLATE
static String	CAN_SCAN_BATCH_AUDIT_TEMPLATE
static String	CHANGE_AUTHORIZATIONS_AUDIT_TEMPLATE
static String	CHANGE_PASSWORD_AUDIT_TEMPLATE
static String	CREATE_USER_AUDIT_TEMPLATE
static String	DELEGATION_TOKEN_AUDIT_TEMPLATE
static String	DROP_USER_AUDIT_TEMPLATE
static String	GRANT_SYSTEM_PERMISSION_AUDIT_TEMPLATE
static String	GRANT_TABLE_PERMISSION_AUDIT_TEMPLATE
static String	REVOKE_SYSTEM_PERMISSION_AUDIT_TEMPLATE
static String	REVOKE_TABLE_PERMISSION_AUDIT_TEMPLATE

Fields inherited from class org.apache.accumulo.server.security.SecurityOperation

authenticator, authorizor, context, isKerberos, permHandle

Constructor Summary

Constructors

Constructor and Description
AuditedSecurityOperation(AccumuloServerContext context, Authorizor author, Authenticator authent, PermissionHandler pm)

Method Summary

Methods

Modifier and Type	Method and Description
protected void	authenticate(TCredentials credentials)
boolean	canBulkImport(TCredentials c, String tableId, String tableName, String dir, String failDir, String namespaceId)
boolean	canCloneTable(TCredentials c, String tableId, String tableName, String destinationNamespaceId, String sourceNamespaceId)
boolean	canCreateTable(TCredentials c, String tableName, String namespaceId)
boolean	canDeleteRange(TCredentials c, String tableId, String tableName, org.apache.hadoop.io.Text startRow, org.apache.hadoop.io.Text endRow, String namespaceId)
boolean	canDeleteTable(TCredentials c, String tableId, String namespaceId)
boolean	canExport(TCredentials credentials, String tableId, String tableName, String exportDir, String namespaceId)
boolean	canImport(TCredentials credentials, String tableName, String importDir, String namespaceId)
boolean	canObtainDelegationToken(TCredentials credentials)
boolean	canOnlineOfflineTable(TCredentials credentials, String tableId, FateOperation op, String namespaceId)
boolean	canRenameTable(TCredentials c, String tableId, String oldTableName, String newTableName, String namespaceId)
boolean	canScan(TCredentials credentials, String tableId, String namespaceId, Map<TKeyExtent,List<TRange>> tbatch, List<TColumn> tcolumns, List<IterInfo> ssiList, Map<String,Map<String,String>> ssio, List<ByteBuffer> authorizations)
boolean	canScan(TCredentials credentials, String tableId, String namespaceId, TRange range, List<TColumn> columns, List<IterInfo> ssiList, Map<String,Map<String,String>> ssio, List<ByteBuffer> authorizations)
void	changeAuthorizations(TCredentials credentials, String user, Authorizations authorizations)
void	changePassword(TCredentials credentials, Credentials newInfo)
void	createUser(TCredentials credentials, Credentials newUser, Authorizations authorizations)
void	dropUser(TCredentials credentials, String user)
static StringBuilder	getAuthString(List<ByteBuffer> authorizations)
static SecurityOperation	getInstance(AccumuloServerContext context)
static SecurityOperation	getInstance(AccumuloServerContext context, boolean initialize)
void	grantSystemPermission(TCredentials credentials, String user, SystemPermission permission)
void	grantTablePermission(TCredentials credentials, String user, String tableId, TablePermission permission, String namespaceId)
void	revokeSystemPermission(TCredentials credentials, String user, SystemPermission permission)
void	revokeTablePermission(TCredentials credentials, String user, String tableId, TablePermission permission, String namespaceId)

Methods inherited from class org.apache.accumulo.server.security.SecurityOperation

_createUser, _hasNamespacePermission, _hasTablePermission, authenticateUser, canAlterNamespace, canAlterTable, canAskAboutUser, canBulkImport, canChangeAuthorizations, canChangePassword, canCompact, canConditionallyUpdate, canCreateNamespace, canCreateUser, canDeleteNamespace, canDropUser, canFlush, canGrantNamespace, canGrantSystem, canGrantTable, canMerge, canPerformSystemActions, canRenameNamespace, canRevokeNamespace, canRevokeSystem, canRevokeTable, canScan, canSplitTablet, canWrite, deleteNamespace, deleteTable, getAuthenticator, getAuthorizor, getPermHandler, getRootUsername, getUserAuthorizations, getUserAuthorizations, grantNamespacePermission, hasNamespacePermission, hasSystemPermission, hasTablePermission, hasTablePermission, initializeSecurity, isSystemUser, listUsers, revokeNamespacePermission, userHasAuthorizations

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUDITLOG

public static final String AUDITLOG

See Also:

Constant Field Values

audit

public static final org.apache.log4j.Logger audit

CAN_SCAN_AUDIT_TEMPLATE

public static final String CAN_SCAN_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_SCAN_BATCH_AUDIT_TEMPLATE

public static final String CAN_SCAN_BATCH_AUDIT_TEMPLATE

See Also:

Constant Field Values

CHANGE_AUTHORIZATIONS_AUDIT_TEMPLATE

public static final String CHANGE_AUTHORIZATIONS_AUDIT_TEMPLATE

See Also:

Constant Field Values

CHANGE_PASSWORD_AUDIT_TEMPLATE

public static final String CHANGE_PASSWORD_AUDIT_TEMPLATE

See Also:

Constant Field Values

CREATE_USER_AUDIT_TEMPLATE

public static final String CREATE_USER_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_CREATE_TABLE_AUDIT_TEMPLATE

public static final String CAN_CREATE_TABLE_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_DELETE_TABLE_AUDIT_TEMPLATE

public static final String CAN_DELETE_TABLE_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_RENAME_TABLE_AUDIT_TEMPLATE

public static final String CAN_RENAME_TABLE_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_CLONE_TABLE_AUDIT_TEMPLATE

public static final String CAN_CLONE_TABLE_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_DELETE_RANGE_AUDIT_TEMPLATE

public static final String CAN_DELETE_RANGE_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_BULK_IMPORT_AUDIT_TEMPLATE

public static final String CAN_BULK_IMPORT_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_IMPORT_AUDIT_TEMPLATE

public static final String CAN_IMPORT_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_EXPORT_AUDIT_TEMPLATE

public static final String CAN_EXPORT_AUDIT_TEMPLATE

See Also:

Constant Field Values

DROP_USER_AUDIT_TEMPLATE

public static final String DROP_USER_AUDIT_TEMPLATE

See Also:

Constant Field Values

GRANT_SYSTEM_PERMISSION_AUDIT_TEMPLATE

public static final String GRANT_SYSTEM_PERMISSION_AUDIT_TEMPLATE

See Also:

Constant Field Values

GRANT_TABLE_PERMISSION_AUDIT_TEMPLATE

public static final String GRANT_TABLE_PERMISSION_AUDIT_TEMPLATE

See Also:

Constant Field Values

REVOKE_SYSTEM_PERMISSION_AUDIT_TEMPLATE

public static final String REVOKE_SYSTEM_PERMISSION_AUDIT_TEMPLATE

See Also:

Constant Field Values

REVOKE_TABLE_PERMISSION_AUDIT_TEMPLATE

public static final String REVOKE_TABLE_PERMISSION_AUDIT_TEMPLATE

See Also:

Constant Field Values

CAN_ONLINE_OFFLINE_TABLE_AUDIT_TEMPLATE

public static final String CAN_ONLINE_OFFLINE_TABLE_AUDIT_TEMPLATE

See Also:

Constant Field Values

AUTHENICATE_AUDIT_TEMPLATE

public static final String AUTHENICATE_AUDIT_TEMPLATE

See Also:

Constant Field Values

DELEGATION_TOKEN_AUDIT_TEMPLATE

public static final String DELEGATION_TOKEN_AUDIT_TEMPLATE

See Also:

Constant Field Values

Constructor Detail

AuditedSecurityOperation

public AuditedSecurityOperation(AccumuloServerContext context,
                        Authorizor author,
                        Authenticator authent,
                        PermissionHandler pm)

Method Detail

getInstance

public static SecurityOperation getInstance(AccumuloServerContext context)

getInstance

public static SecurityOperation getInstance(AccumuloServerContext context,
                            boolean initialize)

getAuthString

public static StringBuilder getAuthString(List<ByteBuffer> authorizations)

canScan

public boolean canScan(TCredentials credentials,
              String tableId,
              String namespaceId,
              TRange range,
              List<TColumn> columns,
              List<IterInfo> ssiList,
              Map<String,Map<String,String>> ssio,
              List<ByteBuffer> authorizations)
                throws ThriftSecurityException

Overrides:

canScan in class SecurityOperation

Throws:

ThriftSecurityException

canScan

public boolean canScan(TCredentials credentials,
              String tableId,
              String namespaceId,
              Map<TKeyExtent,List<TRange>> tbatch,
              List<TColumn> tcolumns,
              List<IterInfo> ssiList,
              Map<String,Map<String,String>> ssio,
              List<ByteBuffer> authorizations)
                throws ThriftSecurityException

Overrides:

canScan in class SecurityOperation

Throws:

ThriftSecurityException

changeAuthorizations

public void changeAuthorizations(TCredentials credentials,
                        String user,
                        Authorizations authorizations)
                          throws ThriftSecurityException

Overrides:

changeAuthorizations in class SecurityOperation

Throws:

ThriftSecurityException

changePassword

public void changePassword(TCredentials credentials,
                  Credentials newInfo)
                    throws ThriftSecurityException

Overrides:

changePassword in class SecurityOperation

Throws:

ThriftSecurityException

createUser

public void createUser(TCredentials credentials,
              Credentials newUser,
              Authorizations authorizations)
                throws ThriftSecurityException

Overrides:

createUser in class SecurityOperation

Throws:

ThriftSecurityException

canCreateTable

public boolean canCreateTable(TCredentials c,
                     String tableName,
                     String namespaceId)
                       throws ThriftSecurityException

Overrides:

canCreateTable in class SecurityOperation

Throws:

ThriftSecurityException

canDeleteTable

public boolean canDeleteTable(TCredentials c,
                     String tableId,
                     String namespaceId)
                       throws ThriftSecurityException

Overrides:

canDeleteTable in class SecurityOperation

Throws:

ThriftSecurityException

canRenameTable

public boolean canRenameTable(TCredentials c,
                     String tableId,
                     String oldTableName,
                     String newTableName,
                     String namespaceId)
                       throws ThriftSecurityException

Overrides:

canRenameTable in class SecurityOperation

Throws:

ThriftSecurityException

canCloneTable

public boolean canCloneTable(TCredentials c,
                    String tableId,
                    String tableName,
                    String destinationNamespaceId,
                    String sourceNamespaceId)
                      throws ThriftSecurityException

Overrides:

canCloneTable in class SecurityOperation

Throws:

ThriftSecurityException

canDeleteRange

public boolean canDeleteRange(TCredentials c,
                     String tableId,
                     String tableName,
                     org.apache.hadoop.io.Text startRow,
                     org.apache.hadoop.io.Text endRow,
                     String namespaceId)
                       throws ThriftSecurityException

Overrides:

canDeleteRange in class SecurityOperation

Throws:

ThriftSecurityException

canBulkImport

public boolean canBulkImport(TCredentials c,
                    String tableId,
                    String tableName,
                    String dir,
                    String failDir,
                    String namespaceId)
                      throws ThriftSecurityException

Overrides:

canBulkImport in class SecurityOperation

Throws:

ThriftSecurityException

canImport

public boolean canImport(TCredentials credentials,
                String tableName,
                String importDir,
                String namespaceId)
                  throws ThriftSecurityException

Overrides:

canImport in class SecurityOperation

Throws:

ThriftSecurityException

canExport

public boolean canExport(TCredentials credentials,
                String tableId,
                String tableName,
                String exportDir,
                String namespaceId)
                  throws ThriftSecurityException

Overrides:

canExport in class SecurityOperation

Throws:

ThriftSecurityException

dropUser

public void dropUser(TCredentials credentials,
            String user)
              throws ThriftSecurityException

Overrides:

dropUser in class SecurityOperation

Throws:

ThriftSecurityException

grantSystemPermission

public void grantSystemPermission(TCredentials credentials,
                         String user,
                         SystemPermission permission)
                           throws ThriftSecurityException

Overrides:

grantSystemPermission in class SecurityOperation

Throws:

ThriftSecurityException

grantTablePermission

public void grantTablePermission(TCredentials credentials,
                        String user,
                        String tableId,
                        TablePermission permission,
                        String namespaceId)
                          throws ThriftSecurityException

Overrides:

grantTablePermission in class SecurityOperation

Throws:

ThriftSecurityException

revokeSystemPermission

public void revokeSystemPermission(TCredentials credentials,
                          String user,
                          SystemPermission permission)
                            throws ThriftSecurityException

Overrides:

revokeSystemPermission in class SecurityOperation

Throws:

ThriftSecurityException

revokeTablePermission

public void revokeTablePermission(TCredentials credentials,
                         String user,
                         String tableId,
                         TablePermission permission,
                         String namespaceId)
                           throws ThriftSecurityException

Overrides:

revokeTablePermission in class SecurityOperation

Throws:

ThriftSecurityException

canOnlineOfflineTable

public boolean canOnlineOfflineTable(TCredentials credentials,
                            String tableId,
                            FateOperation op,
                            String namespaceId)
                              throws ThriftSecurityException

Overrides:

canOnlineOfflineTable in class SecurityOperation

Throws:

ThriftSecurityException

authenticate

protected void authenticate(TCredentials credentials)
                     throws ThriftSecurityException

Overrides:

authenticate in class SecurityOperation

Throws:

ThriftSecurityException

canObtainDelegationToken

public boolean canObtainDelegationToken(TCredentials credentials)
                                 throws ThriftSecurityException

Overrides:

canObtainDelegationToken in class SecurityOperation

Throws:

ThriftSecurityException