org.apache.hadoop.hbase.security.access

Class ZKPermissionWatcher

java.lang.Object

org.apache.hadoop.hbase.zookeeper.ZooKeeperListener

org.apache.hadoop.hbase.security.access.ZKPermissionWatcher

@InterfaceAudience.Private
public class ZKPermissionWatcher
extends ZooKeeperListener

Handles synchronization of access control list entries and updates throughout all nodes in the cluster. The AccessController instance on the _acl_ table regions, creates a znode for each table as /hbase/acl/tablename, with the znode data containing a serialized list of the permissions granted for the table. The AccessController instances on all other cluster hosts watch the znodes for updates, which trigger updates in the TableAuthManager permission cache.

Field Summary

Fields inherited from class org.apache.hadoop.hbase.zookeeper.ZooKeeperListener

watcher

Constructor Summary

Constructors

Constructor and Description
ZKPermissionWatcher(ZooKeeperWatcher watcher, TableAuthManager authManager, org.apache.hadoop.conf.Configuration conf)

Method Summary

Methods

Modifier and Type	Method and Description
void	deleteNamespaceACLNode(String namespace) Delete the acl notify node of namespace
void	deleteTableACLNode(TableName tableName) Delete the acl notify node of table
void	nodeChildrenChanged(String path) Called when an existing node has a child node added or removed.
void	nodeCreated(String path) Called when a new node has been created.
void	nodeDataChanged(String path) Called when an existing node has changed data.
void	nodeDeleted(String path) Called when a node has been deleted
void	start()
void	writeToZookeeper(byte[] entry, byte[] permsData) Write a table's access controls to the permissions mirror in zookeeper

Methods inherited from class org.apache.hadoop.hbase.zookeeper.ZooKeeperListener

getWatcher

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ZKPermissionWatcher

public ZKPermissionWatcher(ZooKeeperWatcher watcher,
                   TableAuthManager authManager,
                   org.apache.hadoop.conf.Configuration conf)

Method Detail

start

public void start()
           throws org.apache.zookeeper.KeeperException

Throws:

org.apache.zookeeper.KeeperException

nodeCreated

public void nodeCreated(String path)

Description copied from class: ZooKeeperListener

Called when a new node has been created.

Overrides:

nodeCreated in class ZooKeeperListener

Parameters:

path - full path of the new node

nodeDeleted

public void nodeDeleted(String path)

Description copied from class: ZooKeeperListener

Called when a node has been deleted

Overrides:

nodeDeleted in class ZooKeeperListener

Parameters:

path - full path of the deleted node

nodeDataChanged

public void nodeDataChanged(String path)

Description copied from class: ZooKeeperListener

Called when an existing node has changed data.

Overrides:

nodeDataChanged in class ZooKeeperListener

Parameters:

path - full path of the updated node

nodeChildrenChanged

public void nodeChildrenChanged(String path)

Description copied from class: ZooKeeperListener

Called when an existing node has a child node added or removed.

Overrides:

nodeChildrenChanged in class ZooKeeperListener

Parameters:

path - full path of the node whose children have changed

writeToZookeeper

public void writeToZookeeper(byte[] entry,
                    byte[] permsData)

Write a table's access controls to the permissions mirror in zookeeper

Parameters:

entry -

permsData -

deleteTableACLNode

public void deleteTableACLNode(TableName tableName)

Delete the acl notify node of table

Parameters:

tableName -

deleteNamespaceACLNode

public void deleteNamespaceACLNode(String namespace)

Delete the acl notify node of namespace