org.apache.hadoop.hbase.security.access

Class TestRpcAccessChecks

java.lang.Object

org.apache.hadoop.hbase.security.access.TestRpcAccessChecks

public class TestRpcAccessChecks
extends Object

This class tests operations in MasterRpcServices which require ADMIN access. It doesn't test all operations which require ADMIN access, only those which get vetted within MasterRpcServices at the point of entry itself (unlike old approach of using hooks in AccessController). Sidenote: There is one big difference between how security tests for AccessController hooks work, and how the tests in this class for security in MasterRpcServices work. The difference arises because of the way AC & MasterRpcServices get the user. In AccessController, it first checks if there is an active rpc user in ObserverContext. If not, it uses UserProvider for current user. This *might* make sense in the context of coprocessors, because they can be called outside the context of RPCs. But in the context of MasterRpcServices, only one way makes sense - RPCServer.getRequestUser(). In AC tests, when we do FooUser.runAs on AccessController instance directly, it bypasses the rpc framework completely, but works because UserProvider provides the correct user, i.e. FooUser in this case. But this doesn't work for the tests here, so we go around by doing complete RPCs.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
(package private) static interface	TestRpcAccessChecks.Action
static class	TestRpcAccessChecks.DummyCpService

Field Summary

Fields

Modifier and Type	Field and Description
static HBaseClassTestRule	CLASS_RULE
private static org.apache.hadoop.conf.Configuration	conf
private static String	GROUP_ADMIN
org.junit.rules.TestName	TEST_NAME
private static HBaseTestingUtility	TEST_UTIL
private static org.apache.hadoop.hbase.security.User	USER_ADMIN
private static org.apache.hadoop.hbase.security.User	USER_ADMIN_NOT_SUPER
private static org.apache.hadoop.hbase.security.User	USER_GROUP_ADMIN
private static org.apache.hadoop.hbase.security.User	USER_IN_SUPERGROUPS
private static org.apache.hadoop.hbase.security.User	USER_NON_ADMIN

Constructor Summary

Constructors

Constructor and Description
TestRpcAccessChecks()

Method Summary

Modifier and Type	Method and Description
private static void	enableSecurity(org.apache.hadoop.conf.Configuration conf)
static void	setup()
void	testCleanerChoreRunning()
void	testEnableCatalogJanitor()
void	testExecProcedure()
void	testExecProcedureWithRet()
void	testExecRegionServerService()
void	testExecService()
void	testGrantDeniedOnSuperUsersGroups()
void	testNormalize()
void	testRevokeDeniedOnSuperUsersGroups()
void	testRunCatalogJanitor()
void	testRunCleanerChore()
void	testSetNormalizerRunning()
void	testTableFlush()
void	testTableFlushAndSnapshot()
private void	verifiedDeniedServiceException(org.apache.hadoop.hbase.security.User user, TestRpcAccessChecks.Action action)
private void	verifyAdminCheckForAction(TestRpcAccessChecks.Action action)
private void	verifyAllowed(org.apache.hadoop.hbase.security.User user, TestRpcAccessChecks.Action action)
private void	verifyDenied(org.apache.hadoop.hbase.security.User user, TestRpcAccessChecks.Action action)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CLASS_RULE

public static final HBaseClassTestRule CLASS_RULE

TEST_NAME

public final org.junit.rules.TestName TEST_NAME

TEST_UTIL

private static final HBaseTestingUtility TEST_UTIL

conf

private static org.apache.hadoop.conf.Configuration conf

USER_ADMIN

private static org.apache.hadoop.hbase.security.User USER_ADMIN

USER_NON_ADMIN

private static org.apache.hadoop.hbase.security.User USER_NON_ADMIN

USER_IN_SUPERGROUPS

private static org.apache.hadoop.hbase.security.User USER_IN_SUPERGROUPS

USER_ADMIN_NOT_SUPER

private static org.apache.hadoop.hbase.security.User USER_ADMIN_NOT_SUPER

GROUP_ADMIN

private static final String GROUP_ADMIN

See Also:

Constant Field Values

USER_GROUP_ADMIN

private static org.apache.hadoop.hbase.security.User USER_GROUP_ADMIN

Constructor Detail

TestRpcAccessChecks

public TestRpcAccessChecks()

Method Detail

enableSecurity

private static void enableSecurity(org.apache.hadoop.conf.Configuration conf)
                            throws IOException

Throws:

IOException

setup

public static void setup()
                  throws Exception

Throws:

Exception

verifyAllowed

private void verifyAllowed(org.apache.hadoop.hbase.security.User user,
                           TestRpcAccessChecks.Action action)
                    throws Exception

Throws:

Exception

verifyDenied

private void verifyDenied(org.apache.hadoop.hbase.security.User user,
                          TestRpcAccessChecks.Action action)
                   throws Exception

Throws:

Exception

verifiedDeniedServiceException

private void verifiedDeniedServiceException(org.apache.hadoop.hbase.security.User user,
                                            TestRpcAccessChecks.Action action)
                                     throws Exception

Throws:

Exception

verifyAdminCheckForAction

private void verifyAdminCheckForAction(TestRpcAccessChecks.Action action)
                                throws Exception

Throws:

Exception

testEnableCatalogJanitor

public void testEnableCatalogJanitor()
                              throws Exception

Throws:

Exception

testRunCatalogJanitor

public void testRunCatalogJanitor()
                           throws Exception

Throws:

Exception

testCleanerChoreRunning

public void testCleanerChoreRunning()
                             throws Exception

Throws:

Exception

testRunCleanerChore

public void testRunCleanerChore()
                         throws Exception

Throws:

Exception

testExecProcedure

public void testExecProcedure()
                       throws Exception

Throws:

Exception

testExecService

public void testExecService()
                     throws Exception

Throws:

Exception

testExecProcedureWithRet

public void testExecProcedureWithRet()
                              throws Exception

Throws:

Exception

testNormalize

public void testNormalize()
                   throws Exception

Throws:

Exception

testSetNormalizerRunning

public void testSetNormalizerRunning()
                              throws Exception

Throws:

Exception

testExecRegionServerService

public void testExecRegionServerService()
                                 throws Exception

Throws:

Exception

testTableFlush

public void testTableFlush()
                    throws Exception

Throws:

Exception

testTableFlushAndSnapshot

public void testTableFlushAndSnapshot()
                               throws Exception

Throws:

Exception

testGrantDeniedOnSuperUsersGroups

public void testGrantDeniedOnSuperUsersGroups()

testRevokeDeniedOnSuperUsersGroups

public void testRevokeDeniedOnSuperUsersGroups()