Package org.openmetadata.service.security

Class DefaultAuthorizer

java.lang.Object

org.openmetadata.service.security.DefaultAuthorizer

All Implemented Interfaces:

Authorizer

public class DefaultAuthorizer
extends Object
implements Authorizer

Constructor Summary

Constructors

Constructor	Description
DefaultAuthorizer()

Method Summary

Modifier and Type	Method	Description
void	authorize(javax.ws.rs.core.SecurityContext securityContext, OperationContext operationContext, ResourceContextInterface resourceContext)
void	authorizeAdmin(javax.ws.rs.core.SecurityContext securityContext)
void	authorizeAdminOrBot(javax.ws.rs.core.SecurityContext securityContext)
boolean	authorizePII(javax.ws.rs.core.SecurityContext securityContext, EntityReference owner)	In 1.2, evaluate policies here instead of just checking the subject
ResourcePermission	getPermission(javax.ws.rs.core.SecurityContext securityContext, String user, String resourceType)	Returns a list of operations that the authenticated user (subject) can perform on a given resource type
ResourcePermission	getPermission(javax.ws.rs.core.SecurityContext securityContext, String user, ResourceContextInterface resourceContext)	Returns a list of operations that the authenticated user (subject) can perform on a given resource
static SubjectContext	getSubjectContext(javax.ws.rs.core.SecurityContext securityContext)
void	init(OpenMetadataApplicationConfig config, org.jdbi.v3.core.Jdbi dbi)	Initialize the authorizer
List<ResourcePermission>	listPermissions(javax.ws.rs.core.SecurityContext securityContext, String user)	Returns a list of operations that the authenticated user (subject) can perform
boolean	shouldMaskPasswords(javax.ws.rs.core.SecurityContext securityContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultAuthorizer

public DefaultAuthorizer()

Method Detail

init

public void init(OpenMetadataApplicationConfig config,
                 org.jdbi.v3.core.Jdbi dbi)

Description copied from interface: Authorizer

Initialize the authorizer

Specified by:

init in interface Authorizer

listPermissions

public List<ResourcePermission> listPermissions(javax.ws.rs.core.SecurityContext securityContext,
                                                String user)

Description copied from interface: Authorizer

Returns a list of operations that the authenticated user (subject) can perform

Specified by:

listPermissions in interface Authorizer

getPermission

public ResourcePermission getPermission(javax.ws.rs.core.SecurityContext securityContext,
                                        String user,
                                        String resourceType)

Description copied from interface: Authorizer

Returns a list of operations that the authenticated user (subject) can perform on a given resource type

Specified by:

getPermission in interface Authorizer

getPermission

public ResourcePermission getPermission(javax.ws.rs.core.SecurityContext securityContext,
                                        String user,
                                        ResourceContextInterface resourceContext)

Description copied from interface: Authorizer

Returns a list of operations that the authenticated user (subject) can perform on a given resource

Specified by:

getPermission in interface Authorizer

authorize

public void authorize(javax.ws.rs.core.SecurityContext securityContext,
                      OperationContext operationContext,
                      ResourceContextInterface resourceContext)

Specified by:

authorize in interface Authorizer

authorizeAdmin

public void authorizeAdmin(javax.ws.rs.core.SecurityContext securityContext)

Specified by:

authorizeAdmin in interface Authorizer

authorizeAdminOrBot

public void authorizeAdminOrBot(javax.ws.rs.core.SecurityContext securityContext)

Specified by:

authorizeAdminOrBot in interface Authorizer

shouldMaskPasswords

public boolean shouldMaskPasswords(javax.ws.rs.core.SecurityContext securityContext)

Specified by:

shouldMaskPasswords in interface Authorizer

authorizePII

public boolean authorizePII(javax.ws.rs.core.SecurityContext securityContext,
                            EntityReference owner)

In 1.2, evaluate policies here instead of just checking the subject

Specified by:

authorizePII in interface Authorizer

getSubjectContext

public static SubjectContext getSubjectContext(javax.ws.rs.core.SecurityContext securityContext)