org.gridgain.grid.kernal.managers.security

Interface GridSecurityManager

All Superinterfaces:

GridComponent, GridManager

All Known Implementing Classes:

GridOsSecurityManager

public interface GridSecurityManager
extends GridManager

This interface defines a grid authentication manager.

Method Summary

Methods

Modifier and Type	Method and Description
GridSecurityContext	authenticate(GridAuthenticationContext ctx) Authenticates subject via underlying GridAuthenticationSpis.
GridSecuritySubject	authenticatedSubject(UUID subjId) Gets authenticated node subject.
Collection<GridSecuritySubject>	authenticatedSubjects() Gets collection of authenticated nodes.
GridSecurityContext	authenticateNode(GridNode node, GridSecurityCredentials cred) Authenticates grid node with it's attributes via underlying GridAuthenticationSpis.
void	authorize(String name, GridSecurityPermission perm, GridSecurityContext securityCtx) Authorizes grid operation.
void	onSessionExpired(UUID subjId) Callback invoked when subject session got expired.
boolean	securityEnabled() Checks if security check is enabled.

Methods inherited from interface org.gridgain.grid.kernal.managers.GridManager

addSpiAttributes, enabled

Methods inherited from interface org.gridgain.grid.kernal.GridComponent

collectDiscoveryData, onDiscoveryDataReceived, onKernalStart, onKernalStop, printMemoryStats, start, stop, validateNode

Method Detail

securityEnabled

boolean securityEnabled()

Checks if security check is enabled.

Returns:

True if authentication check is enabled.

authenticateNode

GridSecurityContext authenticateNode(GridNode node,
                                   GridSecurityCredentials cred)
                                     throws GridException

Authenticates grid node with it's attributes via underlying GridAuthenticationSpis.

Parameters:

node - Node id to authenticate.

cred - Security credentials.

Returns:

True if succeeded, false otherwise.

Throws:

GridException - If error occurred.

authenticate

GridSecurityContext authenticate(GridAuthenticationContext ctx)
                                 throws GridException

Authenticates subject via underlying GridAuthenticationSpis.

Parameters:

ctx - Authentication context.

Returns:

True if succeeded, false otherwise.

Throws:

GridException - If error occurred.

authenticatedSubjects

Collection<GridSecuritySubject> authenticatedSubjects()
                                                      throws GridException

Gets collection of authenticated nodes.

Returns:

Collection of authenticated nodes.

Throws:

GridException - If error occurred.

authenticatedSubject

GridSecuritySubject authenticatedSubject(UUID subjId)
                                         throws GridException

Gets authenticated node subject.

Parameters:

subjId - Subject ID.

Returns:

Security subject.

Throws:

GridException - If error occurred.

authorize

void authorize(String name,
             GridSecurityPermission perm,
             @Nullable
             GridSecurityContext securityCtx)
               throws GridSecurityException

Authorizes grid operation.

Parameters:

name - Cache name or task class name.

perm - Permission to authorize.

securityCtx - Optional security context.

Throws:

GridSecurityException - If security check failed.

onSessionExpired

void onSessionExpired(UUID subjId)

Callback invoked when subject session got expired.

Parameters:

subjId - Subject ID.