Package org.apache.hadoop.hbase.security.visibility

Interface Summary

Interface	Description
ScanLabelGenerator	This would be the interface which would be used add labels to the RPC context and this would be stored against the UGI.
VisibilityExpEvaluator	During the read (ie.
VisibilityLabelOrdinalProvider
VisibilityLabelService	The interface which deals with visibility labels and user auths admin service as well as the cell visibility expression storage part and read time evaluation.

Class Summary

Class	Description
Authorizations	This class contains visibility labels associated with a Scan/Get deciding which all labeled data current scan/get can access.
CellVisibility	This contains a visibility expression which can be associated with a cell.
DefaultVisibilityLabelServiceImpl
DefinedSetFilterScanLabelGenerator	This is an implementation for ScanLabelGenerator.
EnforcingScanLabelGenerator	This ScanLabelGenerator enforces a set of predefined authorizations for a given user, the set defined by the admin using the VisibilityClient admin interface or the set_auths shell command.
ExpressionExpander
ExpressionParser
FeedUserAuthScanLabelGenerator	If the passed in authorization is null, then this ScanLabelGenerator feeds the set of predefined authorization labels for the given user.
SimpleScanLabelGenerator	This is a simple implementation for ScanLabelGenerator.
VisibilityClient	Utility client for doing visibility labels admin operations.
VisibilityConstants
VisibilityController	Coprocessor that has both the MasterObserver and RegionObserver implemented that supports in visibility labels
VisibilityController.DeleteVersionVisibilityExpressionFilter
VisibilityLabelFilter	This Filter checks the visibility expression with each KV against visibility labels associated with the scan.
VisibilityLabelsCache	Maintains the cache for visibility labels and also uses the zookeeper to update the labels in the system.
VisibilityLabelServiceManager	Manages singleton instance of VisibilityLabelService
VisibilityLabelsValidator	A simple validator that validates the labels passed
VisibilityNewVersionBehaivorTracker	Similar to MvccSensitiveTracker but tracks the visibility expression also before deciding if a Cell can be considered deleted
VisibilityNewVersionBehaivorTracker.TagInfo
VisibilityReplication	A RegionServerObserver impl that provides the custom VisibilityReplicationEndpoint.
VisibilityReplicationEndpoint
VisibilityScanDeleteTracker	Similar to ScanDeletTracker but tracks the visibility expression also before deciding if a Cell can be considered deleted
VisibilityUtils	Utility method to support visibility
ZKVisibilityLabelWatcher	A zk watcher that watches the labels table znode.

Exception Summary

Exception	Description
InvalidLabelException
LabelAlreadyExistsException
ParseException
VisibilityControllerNotReadyException