Class EnforcingScanLabelGenerator

java.lang.Object
org.apache.hadoop.hbase.security.visibility.EnforcingScanLabelGenerator
All Implemented Interfaces:
org.apache.hadoop.conf.Configurable, ScanLabelGenerator

@Private public class EnforcingScanLabelGenerator extends Object implements ScanLabelGenerator
This ScanLabelGenerator enforces a set of predefined authorizations for a given user, the set defined by the admin using the VisibilityClient admin interface or the set_auths shell command. Any authorizations requested with Scan#authorizations will be ignored.
  • Field Details

  • Constructor Details

  • Method Details

    • setConf

      public void setConf(org.apache.hadoop.conf.Configuration conf)
      Specified by:
      setConf in interface org.apache.hadoop.conf.Configurable
    • getConf

      public org.apache.hadoop.conf.Configuration getConf()
      Specified by:
      getConf in interface org.apache.hadoop.conf.Configurable
    • getLabels

      public List<String> getLabels(User user, Authorizations authorizations)
      Description copied from interface: ScanLabelGenerator
      Helps to get a list of lables associated with an UGI
      Specified by:
      getLabels in interface ScanLabelGenerator
      Returns:
      The labels