org.apache.accumulo.test.randomwalk.security

Class WalkingSecurity

java.lang.Object

org.apache.accumulo.server.security.SecurityOperation

org.apache.accumulo.test.randomwalk.security.WalkingSecurity

All Implemented Interfaces:

Authenticator, Authorizor, PermissionHandler

public class WalkingSecurity
extends SecurityOperation
implements Authorizor, Authenticator, PermissionHandler

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.apache.log4j.Logger	log

Fields inherited from class org.apache.accumulo.server.security.SecurityOperation

authenticator, authorizor, permHandle

Constructor Summary

Constructors

Constructor and Description
WalkingSecurity(Authorizor author, Authenticator authent, PermissionHandler pm, String instanceId)
WalkingSecurity(State state2)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	ambiguousAuthorizations(String userName)
boolean	authenticateUser(String principal, AuthenticationToken token)
boolean	canAskAboutUser(TCredentials credentials, String user)
void	changeAuthorizations(String user, Authorizations authorizations)
void	changePassword(String principal, AuthenticationToken token)
void	cleanNamespacePermissions(String namespace)
void	cleanTablePermissions(String table)
void	cleanUser(String user)
static void	clearInstance()
void	createUser(String principal, AuthenticationToken token)
void	dropUser(String user)
static WalkingSecurity	get(State state)
String[]	getAuthsArray()
Map<String,Integer>	getAuthsMap()
Authorizations	getCachedUserAuthorizations(String user)
org.apache.hadoop.fs.FileSystem	getFs()
String	getLastKey()
boolean	getNamespaceExists()
String	getNamespaceName()
String	getNspUserName()
Set<Class<? extends AuthenticationToken>>	getSupportedTokenTypes()
TCredentials	getSysCredentials()
byte[]	getSysPassword()
AuthenticationToken	getSysToken()
String	getSysUserName()
TCredentials	getTabCredentials()
boolean	getTableExists()
String	getTableName()
byte[]	getTabPassword()
AuthenticationToken	getTabToken()
String	getTabUserName()
byte[]	getUserPassword(String user)
void	grantNamespacePermission(String user, String namespace, NamespacePermission permission)
void	grantSystemPermission(String user, SystemPermission permission)
void	grantTablePermission(String user, String table, TablePermission permission)
boolean	hasCachedNamespacePermission(String user, String namespace, NamespacePermission permission)
boolean	hasCachedSystemPermission(String user, SystemPermission permission)
boolean	hasCachedTablePermission(String user, String table, TablePermission permission)
boolean	hasNamespacePermission(String user, String namespace, NamespacePermission permission)
boolean	hasSystemPermission(String user, SystemPermission permission)
boolean	hasTablePermission(String user, String table, TablePermission permission)
boolean	inAmbiguousZone(String userName, TablePermission tp)
void	increaseAuthMap(String s, int increment)
void	initialize(String instanceId, boolean initialize)
void	initializeSecurity(TCredentials rootuser, String token)
void	initTable(String table)
void	initUser(String user)
boolean	isValidAuthorizations(String user, List<ByteBuffer> auths)
Set<String>	listUsers()
void	revokeNamespacePermission(String user, String namespace, NamespacePermission permission)
void	revokeSystemPermission(String user, SystemPermission permission)
void	revokeTablePermission(String user, String table, TablePermission permission)
void	setNamespaceName(String nsName)
void	setNspUserName(String name)
void	setSysUserName(String name)
void	setTableName(String tName)
void	setTabUserName(String name)
boolean	userExists(String user)
boolean	userPassTransient(String user)
boolean	validSecurityHandlers(Authenticator one, Authorizor two)
boolean	validSecurityHandlers(Authenticator one, PermissionHandler two)
boolean	validSecurityHandlers(Authorizor one, PermissionHandler two)
boolean	validTokenClass(String tokenClass)

Methods inherited from class org.apache.accumulo.server.security.SecurityOperation

_hasNamespacePermission, _hasTablePermission, authenticate, authenticateUser, canAlterNamespace, canAlterTable, canBulkImport, canBulkImport, canChangeAuthorizations, canChangePassword, canCloneTable, canCompact, canConditionallyUpdate, canCreateNamespace, canCreateTable, canCreateUser, canDeleteNamespace, canDeleteRange, canDeleteTable, canDropUser, canExport, canFlush, canGrantNamespace, canGrantSystem, canGrantTable, canImport, canMerge, canOnlineOfflineTable, canPerformSystemActions, canRenameNamespace, canRenameTable, canRevokeNamespace, canRevokeSystem, canRevokeTable, canScan, canScan, canScan, canSplitTablet, canWrite, changeAuthorizations, changePassword, createUser, deleteNamespace, deleteTable, dropUser, getAuthenticator, getAuthorizor, getInstance, getInstance, getPermHandler, getRootUsername, getUserAuthorizations, getUserAuthorizations, grantNamespacePermission, grantSystemPermission, grantTablePermission, hasNamespacePermission, hasSystemPermission, hasTablePermission, hasTablePermission, initializeSecurity, isSystemUser, listUsers, revokeNamespacePermission, revokeSystemPermission, revokeTablePermission, userHasAuthorizations

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.accumulo.server.security.handler.Authenticator

initializeSecurity

Field Detail

log

protected static final org.apache.log4j.Logger log

Constructor Detail

WalkingSecurity

public WalkingSecurity(Authorizor author,
               Authenticator authent,
               PermissionHandler pm,
               String instanceId)

WalkingSecurity

public WalkingSecurity(State state2)

Method Detail

get

public static WalkingSecurity get(State state)

initialize

public void initialize(String instanceId,
              boolean initialize)

Specified by:

initialize in interface Authenticator

Specified by:

initialize in interface Authorizor

Specified by:

initialize in interface PermissionHandler

validSecurityHandlers

public boolean validSecurityHandlers(Authenticator one,
                            PermissionHandler two)

Specified by:

validSecurityHandlers in interface Authorizor

validSecurityHandlers

public boolean validSecurityHandlers(Authenticator one,
                            Authorizor two)

Specified by:

validSecurityHandlers in interface PermissionHandler

validSecurityHandlers

public boolean validSecurityHandlers(Authorizor one,
                            PermissionHandler two)

Specified by:

validSecurityHandlers in interface Authenticator

initializeSecurity

public void initializeSecurity(TCredentials rootuser,
                      String token)
                        throws ThriftSecurityException

Specified by:

initializeSecurity in interface Authorizor

Specified by:

initializeSecurity in interface PermissionHandler

Throws:

ThriftSecurityException

changeAuthorizations

public void changeAuthorizations(String user,
                        Authorizations authorizations)
                          throws AccumuloSecurityException

Specified by:

changeAuthorizations in interface Authorizor

Throws:

AccumuloSecurityException

getCachedUserAuthorizations

public Authorizations getCachedUserAuthorizations(String user)
                                           throws AccumuloSecurityException

Specified by:

getCachedUserAuthorizations in interface Authorizor

Throws:

AccumuloSecurityException

ambiguousAuthorizations

public boolean ambiguousAuthorizations(String userName)

initUser

public void initUser(String user)
              throws AccumuloSecurityException

Specified by:

initUser in interface Authorizor

Specified by:

initUser in interface PermissionHandler

Throws:

AccumuloSecurityException

listUsers

public Set<String> listUsers()
                      throws AccumuloSecurityException

Specified by:

listUsers in interface Authenticator

Throws:

AccumuloSecurityException

authenticateUser

public boolean authenticateUser(String principal,
                       AuthenticationToken token)

Specified by:

authenticateUser in interface Authenticator

createUser

public void createUser(String principal,
              AuthenticationToken token)
                throws AccumuloSecurityException

Specified by:

createUser in interface Authenticator

Throws:

AccumuloSecurityException

dropUser

public void dropUser(String user)
              throws AccumuloSecurityException

Specified by:

dropUser in interface Authenticator

Specified by:

dropUser in interface Authorizor

Throws:

AccumuloSecurityException

changePassword

public void changePassword(String principal,
                  AuthenticationToken token)
                    throws AccumuloSecurityException

Specified by:

changePassword in interface Authenticator

Throws:

AccumuloSecurityException

userExists

public boolean userExists(String user)

Specified by:

userExists in interface Authenticator

hasSystemPermission

public boolean hasSystemPermission(String user,
                          SystemPermission permission)
                            throws AccumuloSecurityException

Specified by:

hasSystemPermission in interface PermissionHandler

Throws:

AccumuloSecurityException

hasCachedSystemPermission

public boolean hasCachedSystemPermission(String user,
                                SystemPermission permission)
                                  throws AccumuloSecurityException

Specified by:

hasCachedSystemPermission in interface PermissionHandler

Throws:

AccumuloSecurityException

hasTablePermission

public boolean hasTablePermission(String user,
                         String table,
                         TablePermission permission)
                           throws AccumuloSecurityException,
                                  TableNotFoundException

Specified by:

hasTablePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

TableNotFoundException

hasCachedTablePermission

public boolean hasCachedTablePermission(String user,
                               String table,
                               TablePermission permission)
                                 throws AccumuloSecurityException,
                                        TableNotFoundException

Specified by:

hasCachedTablePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

TableNotFoundException

hasNamespacePermission

public boolean hasNamespacePermission(String user,
                             String namespace,
                             NamespacePermission permission)
                               throws AccumuloSecurityException,
                                      NamespaceNotFoundException

Specified by:

hasNamespacePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

NamespaceNotFoundException

hasCachedNamespacePermission

public boolean hasCachedNamespacePermission(String user,
                                   String namespace,
                                   NamespacePermission permission)
                                     throws AccumuloSecurityException,
                                            NamespaceNotFoundException

Specified by:

hasCachedNamespacePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

NamespaceNotFoundException

grantSystemPermission

public void grantSystemPermission(String user,
                         SystemPermission permission)
                           throws AccumuloSecurityException

Specified by:

grantSystemPermission in interface PermissionHandler

Throws:

AccumuloSecurityException

revokeSystemPermission

public void revokeSystemPermission(String user,
                          SystemPermission permission)
                            throws AccumuloSecurityException

Specified by:

revokeSystemPermission in interface PermissionHandler

Throws:

AccumuloSecurityException

grantTablePermission

public void grantTablePermission(String user,
                        String table,
                        TablePermission permission)
                          throws AccumuloSecurityException,
                                 TableNotFoundException

Specified by:

grantTablePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

TableNotFoundException

revokeTablePermission

public void revokeTablePermission(String user,
                         String table,
                         TablePermission permission)
                           throws AccumuloSecurityException,
                                  TableNotFoundException

Specified by:

revokeTablePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

TableNotFoundException

grantNamespacePermission

public void grantNamespacePermission(String user,
                            String namespace,
                            NamespacePermission permission)
                              throws AccumuloSecurityException,
                                     NamespaceNotFoundException

Specified by:

grantNamespacePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

NamespaceNotFoundException

revokeNamespacePermission

public void revokeNamespacePermission(String user,
                             String namespace,
                             NamespacePermission permission)
                               throws AccumuloSecurityException,
                                      NamespaceNotFoundException

Specified by:

revokeNamespacePermission in interface PermissionHandler

Throws:

AccumuloSecurityException

NamespaceNotFoundException

cleanTablePermissions

public void cleanTablePermissions(String table)
                           throws AccumuloSecurityException,
                                  TableNotFoundException

Specified by:

cleanTablePermissions in interface PermissionHandler

Throws:

AccumuloSecurityException

TableNotFoundException

cleanNamespacePermissions

public void cleanNamespacePermissions(String namespace)
                               throws AccumuloSecurityException,
                                      NamespaceNotFoundException

Specified by:

cleanNamespacePermissions in interface PermissionHandler

Throws:

AccumuloSecurityException

NamespaceNotFoundException

cleanUser

public void cleanUser(String user)
               throws AccumuloSecurityException

Specified by:

cleanUser in interface PermissionHandler

Throws:

AccumuloSecurityException

getTabUserName

public String getTabUserName()

getSysUserName

public String getSysUserName()

getNspUserName

public String getNspUserName()

setTabUserName

public void setTabUserName(String name)

setNspUserName

public void setNspUserName(String name)

setSysUserName

public void setSysUserName(String name)

getTableName

public String getTableName()

getNamespaceName

public String getNamespaceName()

getTableExists

public boolean getTableExists()

getNamespaceExists

public boolean getNamespaceExists()

getSysCredentials

public TCredentials getSysCredentials()

getTabCredentials

public TCredentials getTabCredentials()

getSysToken

public AuthenticationToken getSysToken()

getTabToken

public AuthenticationToken getTabToken()

getUserPassword

public byte[] getUserPassword(String user)

getSysPassword

public byte[] getSysPassword()

getTabPassword

public byte[] getTabPassword()

userPassTransient

public boolean userPassTransient(String user)

setTableName

public void setTableName(String tName)

setNamespaceName

public void setNamespaceName(String nsName)

initTable

public void initTable(String table)
               throws AccumuloSecurityException

Specified by:

initTable in interface PermissionHandler

Throws:

AccumuloSecurityException

getAuthsArray

public String[] getAuthsArray()

inAmbiguousZone

public boolean inAmbiguousZone(String userName,
                      TablePermission tp)

getAuthsMap

public Map<String,Integer> getAuthsMap()

getLastKey

public String getLastKey()

increaseAuthMap

public void increaseAuthMap(String s,
                   int increment)

getFs

public org.apache.hadoop.fs.FileSystem getFs()

canAskAboutUser

public boolean canAskAboutUser(TCredentials credentials,
                      String user)
                        throws ThriftSecurityException

Overrides:

canAskAboutUser in class SecurityOperation

Throws:

ThriftSecurityException

validTokenClass

public boolean validTokenClass(String tokenClass)

Specified by:

validTokenClass in interface Authenticator

clearInstance

public static void clearInstance()

getSupportedTokenTypes

public Set<Class<? extends AuthenticationToken>> getSupportedTokenTypes()

Specified by:

getSupportedTokenTypes in interface Authenticator

isValidAuthorizations

public boolean isValidAuthorizations(String user,
                            List<ByteBuffer> auths)
                              throws AccumuloSecurityException

Specified by:

isValidAuthorizations in interface Authorizor

Throws:

AccumuloSecurityException