org.apache.hadoop.crypto.key.kms.server

Interface KeyAuthorizationKeyProvider.KeyACLs

All Known Implementing Classes:

KMSACLs

Enclosing class:

KeyAuthorizationKeyProvider

public static interface KeyAuthorizationKeyProvider.KeyACLs

Interface that needs to be implemented by a client of the KeyAuthorizationKeyProvider.

Method Summary

Modifier and Type	Method and Description
boolean	hasAccessToKey(String aclName, UserGroupInformation ugi, KeyAuthorizationKeyProvider.KeyOpType opType) This is called by the KeyProvider to check if the given user is authorized to perform the specified operation on the given acl name.
boolean	isACLPresent(String aclName, KeyAuthorizationKeyProvider.KeyOpType opType)

Method Detail

hasAccessToKey

boolean hasAccessToKey(String aclName,
                       UserGroupInformation ugi,
                       KeyAuthorizationKeyProvider.KeyOpType opType)

This is called by the KeyProvider to check if the given user is authorized to perform the specified operation on the given acl name.

Parameters:

aclName - name of the key ACL

ugi - User's UserGroupInformation

opType - Operation Type

Returns:

true if user has access to the aclName and opType else false

isACLPresent

boolean isACLPresent(String aclName,
                     KeyAuthorizationKeyProvider.KeyOpType opType)

Parameters:

aclName - ACL name

opType - Operation Type

Returns:

true if AclName exists else false