KerberosPermissionHandler (Apache Accumulo Server Base 1.7.3 API)

java.lang.Object
- org.apache.accumulo.server.security.handler.KerberosPermissionHandler

All Implemented Interfaces:

PermissionHandler
```
public class KerberosPermissionHandler
extends Object
implements PermissionHandler
```
Kerberos principals might contains identifiers that are not valid ZNodes ('/'). Base64-encodes the principals before interacting with ZooKeeper.

Constructor Summary

Constructors
Constructor and Description

KerberosPermissionHandler()

Constructors
Constructor and Description
`KerberosPermissionHandler()`

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`void`	`cleanNamespacePermissions(String namespace)` Cleans up the permissions for a namespace.
`void`	`cleanTablePermissions(String table)` Cleans up the permissions for a table.
`void`	`cleanUser(String user)` Deletes a user
`void`	`grantNamespacePermission(String user, String namespace, NamespacePermission permission)` Gives the user the given namespace permission
`void`	`grantSystemPermission(String user, SystemPermission permission)` Gives the user the given system permission
`void`	`grantTablePermission(String user, String table, TablePermission permission)` Gives the user the given table permission
`boolean`	`hasCachedNamespacePermission(String user, String namespace, NamespacePermission permission)` Used to get the namespace permission of a user for a namespace, with caching.
`boolean`	`hasCachedSystemPermission(String user, SystemPermission permission)` Used to get the system permission for the user, with caching due to high frequency operation.
`boolean`	`hasCachedTablePermission(String user, String table, TablePermission permission)` Used to get the table permission of a user for a table, with caching.
`boolean`	`hasNamespacePermission(String user, String namespace, NamespacePermission permission)` Used to get the namespace permission of a user for a namespace
`boolean`	`hasSystemPermission(String user, SystemPermission permission)` Used to get the system permission for the user
`boolean`	`hasTablePermission(String user, String table, TablePermission permission)` Used to get the table permission of a user for a table
`void`	`initialize(String instanceId, boolean initialize)` Sets up the permission handler for a new instance of Accumulo
`void`	`initializeSecurity(TCredentials credentials, String rootuser)` Used to initialize security for the root user
`void`	`initTable(String table)` Initializes a new user
`void`	`initUser(String user)` Initializes a new user
`void`	`revokeNamespacePermission(String user, String namespace, NamespacePermission permission)` Denies the user the given namespace permission.
`void`	`revokeSystemPermission(String user, SystemPermission permission)` Denies the user the given system permission
`void`	`revokeTablePermission(String user, String table, TablePermission permission)` Denies the user the given table permission.
`boolean`	`validSecurityHandlers(Authenticator authent, Authorizor author)` Used to validate that the Authorizor, Authenticator, and permission handler can coexist

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail
- KerberosPermissionHandler
```
public KerberosPermissionHandler()
```

Method Detail

initialize
```
public void initialize(String instanceId,
                       boolean initialize)
```
Description copied from interface: PermissionHandler

Sets up the permission handler for a new instance of Accumulo

Specified by:

initialize in interface PermissionHandler

validSecurityHandlers
```
public boolean validSecurityHandlers(Authenticator authent,
                                     Authorizor author)
```
Description copied from interface: PermissionHandler

Used to validate that the Authorizor, Authenticator, and permission handler can coexist

Specified by:

validSecurityHandlers in interface PermissionHandler