Uses of Class
org.apache.hadoop.hbase.security.access.UserPermission
Package
Description
Provides HBase Client
Table of Contents
-
Uses of UserPermission in org.apache.hadoop.hbase.client
Modifier and TypeMethodDescriptionAdmin.getUserPermissions
(GetUserPermissionsRequest getUserPermissionsRequest) Get the global/namespace/table permissions for userAdminOverAsyncAdmin.getUserPermissions
(GetUserPermissionsRequest getUserPermissionsRequest) AsyncAdmin.getUserPermissions
(GetUserPermissionsRequest getUserPermissionsRequest) Get the global/namespace/table permissions for userAsyncHBaseAdmin.getUserPermissions
(GetUserPermissionsRequest getUserPermissionsRequest) RawAsyncHBaseAdmin.getUserPermissions
(GetUserPermissionsRequest getUserPermissionsRequest) Modifier and TypeMethodDescriptionvoid
Admin.grant
(UserPermission userPermission, boolean mergeExistingPermissions) Grants user specific permissionsvoid
AdminOverAsyncAdmin.grant
(UserPermission userPermission, boolean mergeExistingPermissions) AsyncAdmin.grant
(UserPermission userPermission, boolean mergeExistingPermissions) Grants user specific permissionsAsyncHBaseAdmin.grant
(UserPermission userPermission, boolean mergeExistingPermissions) RawAsyncHBaseAdmin.grant
(UserPermission userPermission, boolean mergeExistingPermissions) void
Admin.revoke
(UserPermission userPermission) Revokes user specific permissionsvoid
AdminOverAsyncAdmin.revoke
(UserPermission userPermission) AsyncAdmin.revoke
(UserPermission userPermission) Revokes user specific permissionsAsyncHBaseAdmin.revoke
(UserPermission userPermission) RawAsyncHBaseAdmin.revoke
(UserPermission userPermission) -
Uses of UserPermission in org.apache.hadoop.hbase.coprocessor
Modifier and TypeMethodDescriptiondefault void
MasterObserver.postGrant
(ObserverContext<MasterCoprocessorEnvironment> ctx, UserPermission userPermission, boolean mergeExistingPermissions) Called after granting user permissions.default void
MasterObserver.postRevoke
(ObserverContext<MasterCoprocessorEnvironment> ctx, UserPermission userPermission) Called after revoking user permissions.default void
MasterObserver.preGrant
(ObserverContext<MasterCoprocessorEnvironment> ctx, UserPermission userPermission, boolean mergeExistingPermissions) Called before granting user permissions.default void
MasterObserver.preRevoke
(ObserverContext<MasterCoprocessorEnvironment> ctx, UserPermission userPermission) Called before revoking user permissions. -
Uses of UserPermission in org.apache.hadoop.hbase.master
Modifier and TypeMethodDescriptionvoid
MasterCoprocessorHost.postGrant
(UserPermission userPermission, boolean mergeExistingPermissions) void
MasterCoprocessorHost.postRevoke
(UserPermission userPermission) void
MasterCoprocessorHost.preGrant
(UserPermission userPermission, boolean mergeExistingPermissions) void
MasterCoprocessorHost.preRevoke
(UserPermission userPermission) -
Uses of UserPermission in org.apache.hadoop.hbase.security.access
Modifier and TypeFieldDescriptionprivate Map<TableName,
List<UserPermission>> AccessController.tableAcls
Modifier and TypeMethodDescriptionprivate UserPermission
SnapshotScannerHDFSAclController.getUserGlobalPermission
(org.apache.hadoop.conf.Configuration conf, String userName) private UserPermission
SnapshotScannerHDFSAclController.getUserNamespacePermission
(org.apache.hadoop.conf.Configuration conf, String userName, String namespace) private UserPermission
SnapshotScannerHDFSAclController.getUserTablePermission
(org.apache.hadoop.conf.Configuration conf, String userName, TableName tableName) static UserPermission
AccessControlUtil.toUserPermission
(org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UserPermission proto) Converts a user permission proto to a client user permission object.static UserPermission
ShadedAccessControlUtil.toUserPermission
(org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UserPermission proto) Converts a user permission proto to a client user permission object.Modifier and TypeMethodDescriptionstatic org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> PermissionStorage.getGlobalPermissions
(org.apache.hadoop.conf.Configuration conf) static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> PermissionStorage.getNamespacePermissions
(org.apache.hadoop.conf.Configuration conf, String namespace) (package private) static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> PermissionStorage.getPermissions
(org.apache.hadoop.conf.Configuration conf, byte[] entryName, Table t, byte[] cf, byte[] cq, String user, boolean hasFilterUser) Reads user permission assignments stored in thel:
column family of the first table row in_acl_
.static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> PermissionStorage.getTablePermissions
(org.apache.hadoop.conf.Configuration conf, TableName tableName) static List<UserPermission>
PermissionStorage.getUserNamespacePermissions
(org.apache.hadoop.conf.Configuration conf, String namespace, String user, boolean hasFilterUser) Returns the currently granted permissions for a given namespace as the specified user plus associated permissions.static List<UserPermission>
AccessControlClient.getUserPermissions
(Connection connection, String tableRegex) List all the userPermissions matching the given pattern.static List<UserPermission>
AccessControlClient.getUserPermissions
(Connection connection, String tableRegex, byte[] columnFamily) List all the userPermissions matching the given table pattern and column family.static List<UserPermission>
AccessControlClient.getUserPermissions
(Connection connection, String tableRegex, byte[] columnFamily, byte[] columnQualifier) List all the userPermissions matching the given table pattern, column family and column qualifier.static List<UserPermission>
AccessControlClient.getUserPermissions
(Connection connection, String tableRegex, byte[] columnFamily, byte[] columnQualifier, String userName) List all the userPermissions matching the given table pattern, column family and column qualifier.static List<UserPermission>
AccessControlClient.getUserPermissions
(Connection connection, String tableRegex, byte[] columnFamily, String userName) List all the userPermissions matching the given table pattern, column family and user name.static List<UserPermission>
AccessControlClient.getUserPermissions
(Connection connection, String tableRegex, String userName) List all the userPermissions matching the given table pattern and user name.static List<UserPermission>
AccessControlUtil.getUserPermissions
(org.apache.hbase.thirdparty.com.google.protobuf.RpcController controller, org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol) Deprecated.static List<UserPermission>
AccessControlUtil.getUserPermissions
(org.apache.hbase.thirdparty.com.google.protobuf.RpcController controller, org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol, byte[] namespace) Deprecated.UseAdmin.getUserPermissions(GetUserPermissionsRequest)
instead.static List<UserPermission>
AccessControlUtil.getUserPermissions
(org.apache.hbase.thirdparty.com.google.protobuf.RpcController controller, org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol, byte[] namespace, String userName) Deprecated.UseAdmin.getUserPermissions(GetUserPermissionsRequest)
instead.static List<UserPermission>
AccessControlUtil.getUserPermissions
(org.apache.hbase.thirdparty.com.google.protobuf.RpcController controller, org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol, String userName) Deprecated.UseAdmin.getUserPermissions(GetUserPermissionsRequest)
instead.static List<UserPermission>
AccessControlUtil.getUserPermissions
(org.apache.hbase.thirdparty.com.google.protobuf.RpcController controller, org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol, TableName t) Deprecated.UseAdmin.getUserPermissions(GetUserPermissionsRequest)
instead.static List<UserPermission>
AccessControlUtil.getUserPermissions
(org.apache.hbase.thirdparty.com.google.protobuf.RpcController controller, org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface protocol, TableName t, byte[] columnFamily, byte[] columnQualifier, String userName) Deprecated.UseAdmin.getUserPermissions(GetUserPermissionsRequest)
instead.static List<UserPermission>
PermissionStorage.getUserPermissions
(org.apache.hadoop.conf.Configuration conf, byte[] entryName, byte[] cf, byte[] cq, String user, boolean hasFilterUser) Returns the currently granted permissions for a given table/namespace with associated permissions based on the specified column family, column qualifier and user name.static List<UserPermission>
PermissionStorage.getUserTablePermissions
(org.apache.hadoop.conf.Configuration conf, TableName tableName, byte[] cf, byte[] cq, String userName, boolean hasFilterUser) Returns the currently granted permissions for a given table as the specified user plus associated permissions.(package private) static Map<byte[],
org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String, UserPermission>> PermissionStorage.loadAll
(org.apache.hadoop.conf.Configuration conf) Load all permissions from the region server holding_acl_
, primarily intended for testing purposes.(package private) static Map<byte[],
org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String, UserPermission>> Loads all of the permission grants stored in a region of the_acl_
table.private static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> PermissionStorage.parsePermissions
(byte[] entryName, Result result, byte[] cf, byte[] cq, String user, boolean hasFilterUser) Parse and filter permission based on the specified column family, column qualifier and user name.static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> PermissionStorage.readUserPermission
(byte[] data, org.apache.hadoop.conf.Configuration conf) static org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String,
UserPermission> AccessControlUtil.toUserPermission
(org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UsersAndPermissions proto) Convert a protobuf UserTablePermissions to a ListMultimap<Username, UserPermission>Modifier and TypeMethodDescription(package private) static void
PermissionStorage.addUserPermission
(org.apache.hadoop.conf.Configuration conf, UserPermission userPerm, Table t) static void
PermissionStorage.addUserPermission
(org.apache.hadoop.conf.Configuration conf, UserPermission userPerm, Table t, boolean mergeExistingPermissions) Stores a new user permission grant in the access control lists table.static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.GrantRequest
ShadedAccessControlUtil.buildGrantRequest
(UserPermission userPermission, boolean mergeExistingPermissions) static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.RevokeRequest
ShadedAccessControlUtil.buildRevokeRequest
(UserPermission userPermission) private boolean
SnapshotScannerHDFSAclHelper.checkUserPermission
(UserPermission userPermission) (package private) boolean
SnapshotScannerHDFSAclHelper.containReadAction
(UserPermission userPermission) boolean
SnapshotScannerHDFSAclHelper.grantAcl
(UserPermission userPermission, Set<String> skipNamespaces, Set<TableName> skipTables) Set acl when grant user permissionprivate void
SnapshotScannerHDFSAclHelper.handleGrantOrRevokeAcl
(UserPermission userPermission, SnapshotScannerHDFSAclHelper.HDFSAclOperation.OperationType operationType, Set<String> skipNamespaces, Set<TableName> skipTables) void
SnapshotScannerHDFSAclController.postGrant
(ObserverContext<MasterCoprocessorEnvironment> c, UserPermission userPermission, boolean mergeExistingPermissions) void
SnapshotScannerHDFSAclController.postRevoke
(ObserverContext<MasterCoprocessorEnvironment> c, UserPermission userPermission) void
AccessController.preGrant
(ObserverContext<MasterCoprocessorEnvironment> ctx, UserPermission userPermission, boolean mergeExistingPermissions) private void
AccessController.preGrantOrRevoke
(User caller, String request, UserPermission userPermission) void
AccessController.preRevoke
(ObserverContext<MasterCoprocessorEnvironment> ctx, UserPermission userPermission) private static void
PermissionStorage.removePermissionRecord
(org.apache.hadoop.conf.Configuration conf, UserPermission userPerm, Table t) private void
SnapshotScannerHDFSAclController.removeUserGlobalHdfsAcl
(Table aclTable, String userName, UserPermission userPermission) private void
SnapshotScannerHDFSAclController.removeUserNamespaceHdfsAcl
(Table aclTable, String userName, String namespace, UserPermission userPermission) static void
PermissionStorage.removeUserPermission
(org.apache.hadoop.conf.Configuration conf, UserPermission userPerm, Table t) Removes a previously granted permission from the stored access control lists.private void
SnapshotScannerHDFSAclController.removeUserTableHdfsAcl
(Table aclTable, String userName, TableName tableName, UserPermission userPermission) boolean
SnapshotScannerHDFSAclHelper.revokeAcl
(UserPermission userPermission, Set<String> skipNamespaces, Set<TableName> skipTables) Remove acl when grant or revoke user permissionstatic org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UserPermission
AccessControlUtil.toUserPermission
(UserPermission perm) Convert a client user permission to a user permission protostatic org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UserPermission
ShadedAccessControlUtil.toUserPermission
(UserPermission perm) Convert a client user permission to a user permission proto(package private) static byte[]
PermissionStorage.userPermissionKey
(UserPermission permission) Build qualifier key from user permission: username username,family username,family,qualifierModifier and TypeMethodDescriptionstatic org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.GetUserPermissionsResponse
AccessControlUtil.buildGetUserPermissionsResponse
(List<UserPermission> permissions) Converts the permissions list into a protocol buffer GetUserPermissionsResponsestatic org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.GetUserPermissionsResponse
ShadedAccessControlUtil.buildGetUserPermissionsResponse
(List<UserPermission> permissions) SnapshotScannerHDFSAclHelper.getUsersWithReadAction
(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String, UserPermission> permissionMultimap) static org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UsersAndPermissions
AccessControlUtil.toUserTablePermissions
(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String, UserPermission> perm) Convert a ListMultimap<String, TablePermission> where key is username to a protobuf UserPermissionstatic org.apache.hadoop.hbase.shaded.protobuf.generated.AccessControlProtos.UsersAndPermissions
ShadedAccessControlUtil.toUserTablePermissions
(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String, UserPermission> perm) Convert a ListMultimap<String, TablePermission> where key is username to a shaded protobuf UserPermissionstatic byte[]
PermissionStorage.writePermissionsAsBytes
(org.apache.hbase.thirdparty.com.google.common.collect.ListMultimap<String, UserPermission> perms, org.apache.hadoop.conf.Configuration conf) Writes a set of permissions asWritable
instances and returns the resulting byte array. -
Uses of UserPermission in org.apache.hadoop.hbase.thrift2.client
Modifier and TypeMethodDescriptionThriftAdmin.getUserPermissions
(GetUserPermissionsRequest getUserPermissionsRequest) Modifier and TypeMethodDescriptionvoid
ThriftAdmin.grant
(UserPermission userPermission, boolean mergeExistingPermissions) void
ThriftAdmin.revoke
(UserPermission userPermission)
Admin.getUserPermissions(GetUserPermissionsRequest)
instead.