org.apache.hadoop.hbase.security.visibility

Class EnforcingScanLabelGenerator

java.lang.Object

org.apache.hadoop.hbase.security.visibility.EnforcingScanLabelGenerator

All Implemented Interfaces:

org.apache.hadoop.conf.Configurable, ScanLabelGenerator

@InterfaceAudience.Private
public class EnforcingScanLabelGenerator
extends Object
implements ScanLabelGenerator

This ScanLabelGenerator enforces a set of predefined authorizations for a given user, the set defined by the admin using the VisibilityClient admin interface or the set_auths shell command. Any authorizations requested with Scan#authorizations will be ignored.

Constructor Summary

Constructors

Constructor and Description
EnforcingScanLabelGenerator()

Method Summary

Methods

Modifier and Type	Method and Description
org.apache.hadoop.conf.Configuration	getConf()
List<String>	getLabels(User user, Authorizations authorizations) Helps to get a list of lables associated with an UGI
void	setConf(org.apache.hadoop.conf.Configuration conf)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EnforcingScanLabelGenerator

public EnforcingScanLabelGenerator()

Method Detail

setConf

public void setConf(org.apache.hadoop.conf.Configuration conf)

Specified by:

setConf in interface org.apache.hadoop.conf.Configurable

getConf

public org.apache.hadoop.conf.Configuration getConf()

Specified by:

getConf in interface org.apache.hadoop.conf.Configurable

getLabels

public List<String> getLabels(User user,
                     Authorizations authorizations)

Description copied from interface: ScanLabelGenerator

Helps to get a list of lables associated with an UGI

Specified by:

getLabels in interface ScanLabelGenerator

Returns:

The labels