org.apache.hadoop.hbase.security.visibility

Class EnforcingScanLabelGenerator

java.lang.Object

org.apache.hadoop.hbase.security.visibility.EnforcingScanLabelGenerator

All Implemented Interfaces:

org.apache.hadoop.conf.Configurable, ScanLabelGenerator

@InterfaceAudience.Private
public class EnforcingScanLabelGenerator
extends Object
implements ScanLabelGenerator

This ScanLabelGenerator enforces a set of predefined authorizations for a given user, the set defined by the admin using the VisibilityClient admin interface or the set_auths shell command. Any authorizations requested with Scan#authorizations will be ignored.

Field Summary

Fields

Modifier and Type	Field and Description
private org.apache.hadoop.conf.Configuration	conf
private VisibilityLabelsCache	labelsCache
private static org.slf4j.Logger	LOG

Constructor Summary

Constructors

Constructor and Description
EnforcingScanLabelGenerator()

Method Summary

Modifier and Type	Method and Description
org.apache.hadoop.conf.Configuration	getConf()
List<String>	getLabels(User user, Authorizations authorizations) Helps to get a list of lables associated with an UGI
void	setConf(org.apache.hadoop.conf.Configuration conf)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

conf

private org.apache.hadoop.conf.Configuration conf

labelsCache

private VisibilityLabelsCache labelsCache

Constructor Detail

EnforcingScanLabelGenerator

public EnforcingScanLabelGenerator()

Method Detail

setConf

public void setConf(org.apache.hadoop.conf.Configuration conf)

Specified by:

setConf in interface org.apache.hadoop.conf.Configurable

getConf

public org.apache.hadoop.conf.Configuration getConf()

Specified by:

getConf in interface org.apache.hadoop.conf.Configurable

getLabels

public List<String> getLabels(User user,
                              Authorizations authorizations)

Description copied from interface: ScanLabelGenerator

Helps to get a list of lables associated with an UGI

Specified by:

getLabels in interface ScanLabelGenerator

Returns:

The labels