| Package | Description |
|---|---|
| org.apache.hadoop.hbase.client |
Provides HBase Client
|
| org.apache.hadoop.hbase.coprocessor |
Table of Contents
|
| org.apache.hadoop.hbase.master | |
| org.apache.hadoop.hbase.security.access | |
| org.apache.hadoop.hbase.thrift2.client |
| Modifier and Type | Method and Description |
|---|---|
List<UserPermission> |
Admin.getUserPermissions(GetUserPermissionsRequest getUserPermissionsRequest)
Get the global/namespace/table permissions for user
|
CompletableFuture<List<UserPermission>> |
AsyncAdmin.getUserPermissions(GetUserPermissionsRequest getUserPermissionsRequest)
Get the global/namespace/table permissions for user
|
CompletableFuture<List<UserPermission>> |
RawAsyncHBaseAdmin.getUserPermissions(GetUserPermissionsRequest getUserPermissionsRequest) |
CompletableFuture<List<UserPermission>> |
AsyncHBaseAdmin.getUserPermissions(GetUserPermissionsRequest getUserPermissionsRequest) |
List<UserPermission> |
HBaseAdmin.getUserPermissions(GetUserPermissionsRequest getUserPermissionsRequest) |
| Modifier and Type | Method and Description |
|---|---|
void |
Admin.grant(UserPermission userPermission,
boolean mergeExistingPermissions)
Grants user specific permissions
|
CompletableFuture<Void> |
AsyncAdmin.grant(UserPermission userPermission,
boolean mergeExistingPermissions)
Grants user specific permissions
|
CompletableFuture<Void> |
RawAsyncHBaseAdmin.grant(UserPermission userPermission,
boolean mergeExistingPermissions) |
CompletableFuture<Void> |
AsyncHBaseAdmin.grant(UserPermission userPermission,
boolean mergeExistingPermissions) |
void |
HBaseAdmin.grant(UserPermission userPermission,
boolean mergeExistingPermissions) |
void |
Admin.revoke(UserPermission userPermission)
Revokes user specific permissions
|
CompletableFuture<Void> |
AsyncAdmin.revoke(UserPermission userPermission)
Revokes user specific permissions
|
CompletableFuture<Void> |
RawAsyncHBaseAdmin.revoke(UserPermission userPermission) |
CompletableFuture<Void> |
AsyncHBaseAdmin.revoke(UserPermission userPermission) |
void |
HBaseAdmin.revoke(UserPermission userPermission) |
| Modifier and Type | Method and Description |
|---|---|
default void |
MasterObserver.postGrant(ObserverContext<MasterCoprocessorEnvironment> ctx,
UserPermission userPermission,
boolean mergeExistingPermissions)
Called after granting user permissions.
|
default void |
MasterObserver.postRevoke(ObserverContext<MasterCoprocessorEnvironment> ctx,
UserPermission userPermission)
Called after revoking user permissions.
|
default void |
MasterObserver.preGrant(ObserverContext<MasterCoprocessorEnvironment> ctx,
UserPermission userPermission,
boolean mergeExistingPermissions)
Called before granting user permissions.
|
default void |
MasterObserver.preRevoke(ObserverContext<MasterCoprocessorEnvironment> ctx,
UserPermission userPermission)
Called before revoking user permissions.
|
| Modifier and Type | Method and Description |
|---|---|
void |
MasterCoprocessorHost.postGrant(UserPermission userPermission,
boolean mergeExistingPermissions) |
void |
MasterCoprocessorHost.postRevoke(UserPermission userPermission) |
void |
MasterCoprocessorHost.preGrant(UserPermission userPermission,
boolean mergeExistingPermissions) |
void |
MasterCoprocessorHost.preRevoke(UserPermission userPermission) |
| Modifier and Type | Field and Description |
|---|---|
private Map<TableName,List<UserPermission>> |
AccessController.tableAcls |
| Modifier and Type | Method and Description |
|---|---|
private UserPermission |
SnapshotScannerHDFSAclController.getUserGlobalPermission(org.apache.hadoop.conf.Configuration conf,
String userName) |
private UserPermission |
SnapshotScannerHDFSAclController.getUserNamespacePermission(org.apache.hadoop.conf.Configuration conf,
String userName,
String namespace) |
private UserPermission |
SnapshotScannerHDFSAclController.getUserTablePermission(org.apache.hadoop.conf.Configuration conf,
String userName,
TableName tableName) |
static UserPermission |
AccessControlUtil.toUserPermission(org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.UserPermission proto)
Converts a user permission proto to a client user permission object.
|
static UserPermission |
ShadedAccessControlUtil.toUserPermission(org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UserPermission proto)
Converts a user permission proto to a client user permission object.
|
| Modifier and Type | Method and Description |
|---|---|
static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
PermissionStorage.getGlobalPermissions(org.apache.hadoop.conf.Configuration conf) |
static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
PermissionStorage.getNamespacePermissions(org.apache.hadoop.conf.Configuration conf,
String namespace) |
(package private) static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
PermissionStorage.getPermissions(org.apache.hadoop.conf.Configuration conf,
byte[] entryName,
Table t,
byte[] cf,
byte[] cq,
String user,
boolean hasFilterUser)
Reads user permission assignments stored in the
l: column family of the first
table row in _acl_. |
static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
PermissionStorage.getTablePermissions(org.apache.hadoop.conf.Configuration conf,
TableName tableName) |
static List<UserPermission> |
PermissionStorage.getUserNamespacePermissions(org.apache.hadoop.conf.Configuration conf,
String namespace,
String user,
boolean hasFilterUser)
Returns the currently granted permissions for a given namespace as the specified user plus
associated permissions.
|
static List<UserPermission> |
PermissionStorage.getUserPermissions(org.apache.hadoop.conf.Configuration conf,
byte[] entryName,
byte[] cf,
byte[] cq,
String user,
boolean hasFilterUser)
Returns the currently granted permissions for a given table/namespace with associated
permissions based on the specified column family, column qualifier and user name.
|
static List<UserPermission> |
AccessControlClient.getUserPermissions(Connection connection,
String tableRegex)
List all the userPermissions matching the given pattern.
|
static List<UserPermission> |
AccessControlClient.getUserPermissions(Connection connection,
String tableRegex,
byte[] columnFamily)
List all the userPermissions matching the given table pattern and column family.
|
static List<UserPermission> |
AccessControlClient.getUserPermissions(Connection connection,
String tableRegex,
byte[] columnFamily,
byte[] columnQualifier)
List all the userPermissions matching the given table pattern, column family and column
qualifier.
|
static List<UserPermission> |
AccessControlClient.getUserPermissions(Connection connection,
String tableRegex,
byte[] columnFamily,
byte[] columnQualifier,
String userName)
List all the userPermissions matching the given table pattern, column family and column
qualifier.
|
static List<UserPermission> |
AccessControlClient.getUserPermissions(Connection connection,
String tableRegex,
byte[] columnFamily,
String userName)
List all the userPermissions matching the given table pattern, column family and user name.
|
static List<UserPermission> |
AccessControlClient.getUserPermissions(Connection connection,
String tableRegex,
String userName)
List all the userPermissions matching the given table pattern and user name.
|
static List<UserPermission> |
AccessControlUtil.getUserPermissions(com.google.protobuf.RpcController controller,
org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol)
Deprecated.
Use
Admin.getUserPermissions(GetUserPermissionsRequest) instead. |
static List<UserPermission> |
AccessControlUtil.getUserPermissions(com.google.protobuf.RpcController controller,
org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol,
byte[] namespace)
Deprecated.
|
static List<UserPermission> |
AccessControlUtil.getUserPermissions(com.google.protobuf.RpcController controller,
org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol,
byte[] namespace,
String userName)
Deprecated.
|
static List<UserPermission> |
AccessControlUtil.getUserPermissions(com.google.protobuf.RpcController controller,
org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol,
String userName)
Deprecated.
|
static List<UserPermission> |
AccessControlUtil.getUserPermissions(com.google.protobuf.RpcController controller,
org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol,
TableName t)
Deprecated.
|
static List<UserPermission> |
AccessControlUtil.getUserPermissions(com.google.protobuf.RpcController controller,
org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol,
TableName t,
byte[] columnFamily,
byte[] columnQualifier,
String userName)
Deprecated.
|
static List<UserPermission> |
PermissionStorage.getUserTablePermissions(org.apache.hadoop.conf.Configuration conf,
TableName tableName,
byte[] cf,
byte[] cq,
String userName,
boolean hasFilterUser)
Returns the currently granted permissions for a given table as the specified user plus
associated permissions.
|
(package private) static Map<byte[],org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission>> |
PermissionStorage.loadAll(org.apache.hadoop.conf.Configuration conf)
Load all permissions from the region server holding
_acl_, primarily intended for
testing purposes. |
(package private) static Map<byte[],org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission>> |
PermissionStorage.loadAll(Region aclRegion)
Loads all of the permission grants stored in a region of the
_acl_ table. |
private static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
PermissionStorage.parsePermissions(byte[] entryName,
Result result,
byte[] cf,
byte[] cq,
String user,
boolean hasFilterUser)
Parse and filter permission based on the specified column family, column qualifier and user
name.
|
static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
PermissionStorage.readUserPermission(byte[] data,
org.apache.hadoop.conf.Configuration conf) |
static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> |
AccessControlUtil.toUserPermission(org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.UsersAndPermissions proto)
Convert a protobuf UserTablePermissions to a ListMultimap<Username, UserPermission>
|
| Modifier and Type | Method and Description |
|---|---|
(package private) static void |
PermissionStorage.addUserPermission(org.apache.hadoop.conf.Configuration conf,
UserPermission userPerm,
Table t) |
static void |
PermissionStorage.addUserPermission(org.apache.hadoop.conf.Configuration conf,
UserPermission userPerm,
Table t,
boolean mergeExistingPermissions)
Stores a new user permission grant in the access control lists table.
|
static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.GrantRequest |
ShadedAccessControlUtil.buildGrantRequest(UserPermission userPermission,
boolean mergeExistingPermissions) |
static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.RevokeRequest |
ShadedAccessControlUtil.buildRevokeRequest(UserPermission userPermission) |
private boolean |
SnapshotScannerHDFSAclHelper.checkUserPermission(UserPermission userPermission) |
(package private) boolean |
SnapshotScannerHDFSAclHelper.containReadAction(UserPermission userPermission) |
boolean |
SnapshotScannerHDFSAclHelper.grantAcl(UserPermission userPermission,
Set<String> skipNamespaces,
Set<TableName> skipTables)
Set acl when grant user permission
|
private void |
SnapshotScannerHDFSAclHelper.handleGrantOrRevokeAcl(UserPermission userPermission,
SnapshotScannerHDFSAclHelper.HDFSAclOperation.OperationType operationType,
Set<String> skipNamespaces,
Set<TableName> skipTables) |
void |
SnapshotScannerHDFSAclController.postGrant(ObserverContext<MasterCoprocessorEnvironment> c,
UserPermission userPermission,
boolean mergeExistingPermissions) |
void |
SnapshotScannerHDFSAclController.postRevoke(ObserverContext<MasterCoprocessorEnvironment> c,
UserPermission userPermission) |
void |
AccessController.preGrant(ObserverContext<MasterCoprocessorEnvironment> ctx,
UserPermission userPermission,
boolean mergeExistingPermissions) |
private void |
AccessController.preGrantOrRevoke(User caller,
String request,
UserPermission userPermission) |
void |
AccessController.preRevoke(ObserverContext<MasterCoprocessorEnvironment> ctx,
UserPermission userPermission) |
private static void |
PermissionStorage.removePermissionRecord(org.apache.hadoop.conf.Configuration conf,
UserPermission userPerm,
Table t) |
private void |
SnapshotScannerHDFSAclController.removeUserGlobalHdfsAcl(Table aclTable,
String userName,
UserPermission userPermission) |
private void |
SnapshotScannerHDFSAclController.removeUserNamespaceHdfsAcl(Table aclTable,
String userName,
String namespace,
UserPermission userPermission) |
static void |
PermissionStorage.removeUserPermission(org.apache.hadoop.conf.Configuration conf,
UserPermission userPerm,
Table t)
Removes a previously granted permission from the stored access control lists.
|
private void |
SnapshotScannerHDFSAclController.removeUserTableHdfsAcl(Table aclTable,
String userName,
TableName tableName,
UserPermission userPermission) |
boolean |
SnapshotScannerHDFSAclHelper.revokeAcl(UserPermission userPermission,
Set<String> skipNamespaces,
Set<TableName> skipTables)
Remove acl when grant or revoke user permission
|
static org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.UserPermission |
AccessControlUtil.toUserPermission(UserPermission perm)
Convert a client user permission to a user permission proto
|
static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UserPermission |
ShadedAccessControlUtil.toUserPermission(UserPermission perm)
Convert a client user permission to a user permission proto
|
(package private) static byte[] |
PermissionStorage.userPermissionKey(UserPermission permission)
Build qualifier key from user permission: username username,family username,family,qualifier
|
| Modifier and Type | Method and Description |
|---|---|
static org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.GetUserPermissionsResponse |
AccessControlUtil.buildGetUserPermissionsResponse(List<UserPermission> permissions)
Converts the permissions list into a protocol buffer GetUserPermissionsResponse
|
static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.GetUserPermissionsResponse |
ShadedAccessControlUtil.buildGetUserPermissionsResponse(List<UserPermission> permissions) |
private Set<String> |
SnapshotScannerHDFSAclHelper.getUsersWithReadAction(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> permissionMultimap) |
static org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.UsersAndPermissions |
AccessControlUtil.toUserTablePermissions(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> perm)
Convert a ListMultimap<String, TablePermission> where key is username to a protobuf
UserPermission
|
static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UsersAndPermissions |
ShadedAccessControlUtil.toUserTablePermissions(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> perm)
Convert a ListMultimap<String, TablePermission> where key is username to a shaded
protobuf UserPermission
|
static byte[] |
PermissionStorage.writePermissionsAsBytes(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,UserPermission> perms,
org.apache.hadoop.conf.Configuration conf)
Writes a set of permissions as
Writable instances and returns the
resulting byte array. |
| Modifier and Type | Method and Description |
|---|---|
List<UserPermission> |
ThriftAdmin.getUserPermissions(GetUserPermissionsRequest getUserPermissionsRequest) |
| Modifier and Type | Method and Description |
|---|---|
void |
ThriftAdmin.grant(UserPermission userPermission,
boolean mergeExistingPermissions) |
void |
ThriftAdmin.revoke(UserPermission userPermission) |
Copyright © 2007–2020 The Apache Software Foundation. All rights reserved.