org.apache.hadoop.hbase.security.visibility

Class DefinedSetFilterScanLabelGenerator

java.lang.Object

org.apache.hadoop.hbase.security.visibility.DefinedSetFilterScanLabelGenerator

All Implemented Interfaces:

org.apache.hadoop.conf.Configurable, ScanLabelGenerator

@InterfaceAudience.Private
public class DefinedSetFilterScanLabelGenerator
extends Object
implements ScanLabelGenerator

This is an implementation for ScanLabelGenerator. It will extract labels from passed in authorizations and cross check against the set of predefined authorization labels for given user. The labels for which the user is not authorized will be dropped.

Field Summary

Fields

Modifier and Type	Field and Description
private org.apache.hadoop.conf.Configuration	conf
private VisibilityLabelsCache	labelsCache
private static org.slf4j.Logger	LOG

Constructor Summary

Constructors

Constructor and Description
DefinedSetFilterScanLabelGenerator()

Method Summary

Modifier and Type	Method and Description
private List<String>	dropLabelsNotInUserAuths(List<String> labels, List<String> auths, String userName)
org.apache.hadoop.conf.Configuration	getConf()
List<String>	getLabels(User user, Authorizations authorizations) Helps to get a list of lables associated with an UGI
void	setConf(org.apache.hadoop.conf.Configuration conf)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

conf

private org.apache.hadoop.conf.Configuration conf

labelsCache

private VisibilityLabelsCache labelsCache

Constructor Detail

DefinedSetFilterScanLabelGenerator

public DefinedSetFilterScanLabelGenerator()

Method Detail

setConf

public void setConf(org.apache.hadoop.conf.Configuration conf)

Specified by:

setConf in interface org.apache.hadoop.conf.Configurable

getConf

public org.apache.hadoop.conf.Configuration getConf()

Specified by:

getConf in interface org.apache.hadoop.conf.Configurable

getLabels

public List<String> getLabels(User user,
                              Authorizations authorizations)

Description copied from interface: ScanLabelGenerator

Helps to get a list of lables associated with an UGI

Specified by:

getLabels in interface ScanLabelGenerator

Returns:

The labels

dropLabelsNotInUserAuths

private List<String> dropLabelsNotInUserAuths(List<String> labels,
                                              List<String> auths,
                                              String userName)