1 /*
2 * Licensed to the Apache Software Foundation (ASF) under one
3 * or more contributor license agreements. See the NOTICE file
4 * distributed with this work for additional information
5 * regarding copyright ownership. The ASF licenses this file
6 * to you under the Apache License, Version 2.0 (the
7 * "License"); you may not use this file except in compliance
8 * with the License. You may obtain a copy of the License at
9 *
10 * http://www.apache.org/licenses/LICENSE-2.0
11 *
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
17 */
18
19 package org.apache.hadoop.hbase.security.access;
20
21 import org.apache.hadoop.hbase.classification.InterfaceAudience;
22 import org.apache.hadoop.hbase.classification.InterfaceStability;
23
24 @InterfaceAudience.Public
25 @InterfaceStability.Evolving
26 public interface AccessControlConstants {
27
28 /**
29 * Configuration option that toggles whether EXEC permission checking is
30 * performed during coprocessor endpoint invocations.
31 */
32 public static final String EXEC_PERMISSION_CHECKS_KEY = "hbase.security.exec.permission.checks";
33 /** Default setting for hbase.security.exec.permission.checks; false */
34 public static final boolean DEFAULT_EXEC_PERMISSION_CHECKS = false;
35
36 /**
37 * Configuration or CF schema option for early termination of access checks
38 * if table or CF permissions grant access. Pre-0.98 compatible behavior
39 */
40 public static final String CF_ATTRIBUTE_EARLY_OUT = "hbase.security.access.early_out";
41 /** Default setting for hbase.security.access.early_out */
42 public static final boolean DEFAULT_ATTRIBUTE_EARLY_OUT = true;
43
44 // Operation attributes for cell level security
45
46 /** Cell level ACL */
47 public static final String OP_ATTRIBUTE_ACL = "acl";
48 /** Cell level ACL evaluation strategy */
49 public static final String OP_ATTRIBUTE_ACL_STRATEGY = "acl.strategy";
50 /** Default cell ACL evaluation strategy: Table and CF first, then ACL */
51 public static final byte[] OP_ATTRIBUTE_ACL_STRATEGY_DEFAULT = new byte[] { 0 };
52 /** Alternate cell ACL evaluation strategy: Cell ACL first, then table and CF */
53 public static final byte[] OP_ATTRIBUTE_ACL_STRATEGY_CELL_FIRST = new byte[] { 1 };
54
55 }