Package org.openmetadata.service.security

Interface Authorizer

All Known Implementing Classes:

DefaultAuthorizer, NoopAuthorizer

public interface Authorizer

Method Summary

Modifier and Type	Method	Description
void	authorize(javax.ws.rs.core.SecurityContext securityContext, OperationContext operationContext, ResourceContextInterface resourceContext)
void	authorizeAdmin(javax.ws.rs.core.SecurityContext securityContext)
void	authorizeAdminOrBot(javax.ws.rs.core.SecurityContext securityContext)
boolean	authorizePII(javax.ws.rs.core.SecurityContext securityContext, EntityReference owner)	Let the user view PII Sensitive data
ResourcePermission	getPermission(javax.ws.rs.core.SecurityContext securityContext, String user, String resource)	Returns a list of operations that the authenticated user (subject) can perform on a given resource type
ResourcePermission	getPermission(javax.ws.rs.core.SecurityContext securityContext, String user, ResourceContextInterface resourceContext)	Returns a list of operations that the authenticated user (subject) can perform on a given resource
void	init(OpenMetadataApplicationConfig openMetadataApplicationConfig, org.jdbi.v3.core.Jdbi jdbi)	Initialize the authorizer
List<ResourcePermission>	listPermissions(javax.ws.rs.core.SecurityContext securityContext, String user)	Returns a list of operations that the authenticated user (subject) can perform
boolean	shouldMaskPasswords(javax.ws.rs.core.SecurityContext securityContext)

Method Detail

init

void init(OpenMetadataApplicationConfig openMetadataApplicationConfig,
          org.jdbi.v3.core.Jdbi jdbi)

Initialize the authorizer

listPermissions

List<ResourcePermission> listPermissions(javax.ws.rs.core.SecurityContext securityContext,
                                         String user)

Returns a list of operations that the authenticated user (subject) can perform

getPermission

ResourcePermission getPermission(javax.ws.rs.core.SecurityContext securityContext,
                                 String user,
                                 String resource)

Returns a list of operations that the authenticated user (subject) can perform on a given resource type

getPermission

ResourcePermission getPermission(javax.ws.rs.core.SecurityContext securityContext,
                                 String user,
                                 ResourceContextInterface resourceContext)

Returns a list of operations that the authenticated user (subject) can perform on a given resource

authorize

void authorize(javax.ws.rs.core.SecurityContext securityContext,
               OperationContext operationContext,
               ResourceContextInterface resourceContext)

authorizeAdmin

void authorizeAdmin(javax.ws.rs.core.SecurityContext securityContext)

authorizeAdminOrBot

void authorizeAdminOrBot(javax.ws.rs.core.SecurityContext securityContext)

shouldMaskPasswords

boolean shouldMaskPasswords(javax.ws.rs.core.SecurityContext securityContext)

authorizePII

boolean authorizePII(javax.ws.rs.core.SecurityContext securityContext,
                     EntityReference owner)

Let the user view PII Sensitive data