org.apache.hadoop.hbase.security.access

类 AccessControlClient

java.lang.Object

org.apache.hadoop.hbase.security.access.AccessControlClient

@InterfaceAudience.Public
@InterfaceStability.Evolving
public class AccessControlClient
extends Object

Utility client for doing access control admin operations.

字段概要

字段

限定符和类型	字段和说明
static TableName	ACL_TABLE_NAME

构造器概要

构造器

构造器和说明
AccessControlClient()

方法概要

方法

限定符和类型	方法和说明
static List<UserPermission>	getUserPermissions(org.apache.hadoop.conf.Configuration conf, String tableRegex) 已过时。 Use getUserPermissions(Connection, String) instead.
static List<UserPermission>	getUserPermissions(Connection connection, String tableRegex) List all the userPermissions matching the given pattern.
static void	grant(org.apache.hadoop.conf.Configuration conf, String userName, Permission.Action... actions) 已过时。 Use grant(Connection, String, Permission.Action...) instead.
static void	grant(org.apache.hadoop.conf.Configuration conf, String namespace, String userName, Permission.Action... actions) 已过时。 Use grant(Connection, String, String, Permission.Action...) instead.
static void	grant(org.apache.hadoop.conf.Configuration conf, TableName tableName, String userName, byte[] family, byte[] qual, Permission.Action... actions) 已过时。 Use grant(Connection, TableName, String, byte[], byte[], Permission.Action...) instead.
static void	grant(Connection connection, String userName, boolean mergeExistingPermissions, Permission.Action... actions) Grant global permissions for the specified user.
static void	grant(Connection connection, String userName, Permission.Action... actions) Grant global permissions for the specified user.
static void	grant(Connection connection, String namespace, String userName, boolean mergeExistingPermissions, Permission.Action... actions) Grants permission on the specified namespace for the specified user.
static void	grant(Connection connection, String namespace, String userName, Permission.Action... actions) Grants permission on the specified namespace for the specified user.
static void	grant(Connection connection, TableName tableName, String userName, byte[] family, byte[] qual, boolean mergeExistingPermissions, Permission.Action... actions) Grants permission on the specified table for the specified user
static void	grant(Connection connection, TableName tableName, String userName, byte[] family, byte[] qual, Permission.Action... actions) Grants permission on the specified table for the specified user.
static boolean	isAccessControllerRunning(org.apache.hadoop.conf.Configuration conf) 已过时。 Use isAccessControllerRunning(Connection) instead.
static boolean	isAccessControllerRunning(Connection connection)
static boolean	isAuthorizationEnabled(Connection connection) Return true if authorization is supported and enabled
static boolean	isCellAuthorizationEnabled(Connection connection) Return true if cell authorization is supported and enabled
static void	revoke(org.apache.hadoop.conf.Configuration conf, String userName, Permission.Action... actions) 已过时。 Use revoke(Connection, String, Permission.Action...) instead.
static void	revoke(org.apache.hadoop.conf.Configuration conf, String namespace, String userName, Permission.Action... actions) 已过时。 Use revoke(Connection, String, String, Permission.Action...) instead.
static void	revoke(org.apache.hadoop.conf.Configuration conf, TableName tableName, String username, byte[] family, byte[] qualifier, Permission.Action... actions) 已过时。 Use revoke(Connection, TableName, String, byte[], byte[], Permission.Action...) instead.
static void	revoke(Connection connection, String userName, Permission.Action... actions) Revoke global permissions for the specified user.
static void	revoke(Connection connection, String namespace, String userName, Permission.Action... actions) Revokes the permission on the table for the specified user.
static void	revoke(Connection connection, TableName tableName, String username, byte[] family, byte[] qualifier, Permission.Action... actions) Revokes the permission on the table

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

ACL_TABLE_NAME

public static final TableName ACL_TABLE_NAME

构造器详细资料

AccessControlClient

public AccessControlClient()

方法详细资料

isAuthorizationEnabled

public static boolean isAuthorizationEnabled(Connection connection)
                                      throws IOException

Return true if authorization is supported and enabled

参数:

connection - The connection to use

返回:

true if authorization is supported and enabled, false otherwise

抛出:

IOException

isCellAuthorizationEnabled

public static boolean isCellAuthorizationEnabled(Connection connection)
                                          throws IOException

Return true if cell authorization is supported and enabled

参数:

connection - The connection to use

返回:

true if cell authorization is supported and enabled, false otherwise

抛出:

IOException

grant

public static void grant(Connection connection,
         TableName tableName,
         String userName,
         byte[] family,
         byte[] qual,
         boolean mergeExistingPermissions,
         Permission.Action... actions)
                  throws Throwable

Grants permission on the specified table for the specified user

参数:

connection - The Connection instance to use

tableName -

userName -

family -

qual -

mergeExistingPermissions - If set to false, later granted permissions will override previous granted permissions. otherwise, it'll merge with previous granted permissions.

actions -

抛出:

Throwable

grant

public static void grant(Connection connection,
         TableName tableName,
         String userName,
         byte[] family,
         byte[] qual,
         Permission.Action... actions)
                  throws Throwable

Grants permission on the specified table for the specified user. If permissions for a specified user exists, later granted permissions will override previous granted permissions.

参数:

connection -

tableName -

userName -

family -

qual -

actions -

抛出:

Throwable

grant

public static void grant(Connection connection,
         String namespace,
         String userName,
         boolean mergeExistingPermissions,
         Permission.Action... actions)
                  throws Throwable

Grants permission on the specified namespace for the specified user.

参数:

connection -

namespace -

userName -

mergeExistingPermissions - If set to false, later granted permissions will override previous granted permissions. otherwise, it'll merge with previous granted permissions.

actions -

抛出:

Throwable

grant

public static void grant(Connection connection,
         String namespace,
         String userName,
         Permission.Action... actions)
                  throws Throwable

Grants permission on the specified namespace for the specified user. If permissions for a specified user exists, later granted permissions will override previous granted permissions.

参数:

connection - The Connection instance to use

namespace -

userName -

actions -

抛出:

Throwable

grant

public static void grant(Connection connection,
         String userName,
         boolean mergeExistingPermissions,
         Permission.Action... actions)
                  throws Throwable

Grant global permissions for the specified user.

参数:

connection - The Connection instance to use

userName -

mergeExistingPermissions - If set to false, later granted permissions will override previous granted permissions. otherwise, it'll merge with previous granted permissions.

actions -

抛出:

Throwable

grant

public static void grant(Connection connection,
         String userName,
         Permission.Action... actions)
                  throws Throwable

Grant global permissions for the specified user.

参数:

connection - The Connection instance to use

userName -

actions -

抛出:

Throwable

isAccessControllerRunning

public static boolean isAccessControllerRunning(Connection connection)
                                         throws MasterNotRunningException,
                                                ZooKeeperConnectionException,
                                                IOException

抛出:

MasterNotRunningException

ZooKeeperConnectionException

IOException

revoke

public static void revoke(Connection connection,
          TableName tableName,
          String username,
          byte[] family,
          byte[] qualifier,
          Permission.Action... actions)
                   throws Throwable

Revokes the permission on the table

参数:

connection - The Connection instance to use

tableName -

username -

family -

qualifier -

actions -

抛出:

Throwable

revoke

public static void revoke(Connection connection,
          String namespace,
          String userName,
          Permission.Action... actions)
                   throws Throwable

Revokes the permission on the table for the specified user.

参数:

connection - The Connection instance to use

namespace -

userName -

actions -

抛出:

Throwable

revoke

public static void revoke(Connection connection,
          String userName,
          Permission.Action... actions)
                   throws Throwable

Revoke global permissions for the specified user.

参数:

connection - The Connection instance to use

抛出:

Throwable

getUserPermissions

public static List<UserPermission> getUserPermissions(Connection connection,
                                      String tableRegex)
                                               throws Throwable

List all the userPermissions matching the given pattern.

参数:

connection - The Connection instance to use

tableRegex - The regular expression string to match against

返回:

- returns an array of UserPermissions

抛出:

Throwable

grant

@Deprecated
public static void grant(org.apache.hadoop.conf.Configuration conf,
                    TableName tableName,
                    String userName,
                    byte[] family,
                    byte[] qual,
                    Permission.Action... actions)
                  throws Throwable

已过时。 Use grant(Connection, TableName, String, byte[], byte[], Permission.Action...) instead.

Grants permission on the specified table for the specified user

参数:

conf -

tableName -

userName -

family -

qual -

actions -

抛出:

Throwable

grant

@Deprecated
public static void grant(org.apache.hadoop.conf.Configuration conf,
                    String namespace,
                    String userName,
                    Permission.Action... actions)
                  throws Throwable

已过时。 Use grant(Connection, String, String, Permission.Action...) instead.

Grants permission on the specified namespace for the specified user.

参数:

conf -

namespace -

userName -

actions -

抛出:

Throwable

grant

@Deprecated
public static void grant(org.apache.hadoop.conf.Configuration conf,
                    String userName,
                    Permission.Action... actions)
                  throws Throwable

已过时。 Use grant(Connection, String, Permission.Action...) instead.

Grant global permissions for the specified user.

抛出:

Throwable

isAccessControllerRunning

@Deprecated
public static boolean isAccessControllerRunning(org.apache.hadoop.conf.Configuration conf)
                                         throws MasterNotRunningException,
                                                ZooKeeperConnectionException,
                                                IOException

已过时。 Use isAccessControllerRunning(Connection) instead.

抛出:

MasterNotRunningException

ZooKeeperConnectionException

IOException

revoke

@Deprecated
public static void revoke(org.apache.hadoop.conf.Configuration conf,
                     TableName tableName,
                     String username,
                     byte[] family,
                     byte[] qualifier,
                     Permission.Action... actions)
                   throws Throwable

已过时。 Use revoke(Connection, TableName, String, byte[], byte[], Permission.Action...) instead.

Revokes the permission on the table

参数:

conf -

tableName -

username -

family -

qualifier -

actions -

抛出:

Throwable

revoke

@Deprecated
public static void revoke(org.apache.hadoop.conf.Configuration conf,
                     String namespace,
                     String userName,
                     Permission.Action... actions)
                   throws Throwable

已过时。 Use revoke(Connection, String, String, Permission.Action...) instead.

Revokes the permission on the table for the specified user.

参数:

conf -

namespace -

userName -

actions -

抛出:

Throwable

revoke

@Deprecated
public static void revoke(org.apache.hadoop.conf.Configuration conf,
                     String userName,
                     Permission.Action... actions)
                   throws Throwable

已过时。 Use revoke(Connection, String, Permission.Action...) instead.

Revoke global permissions for the specified user.

抛出:

Throwable

getUserPermissions

@Deprecated
public static List<UserPermission> getUserPermissions(org.apache.hadoop.conf.Configuration conf,
                                                 String tableRegex)
                                               throws Throwable

已过时。 Use getUserPermissions(Connection, String) instead.

List all the userPermissions matching the given pattern. If pattern is null, the behavior is dependent on whether user has global admin privileges or not. If yes, the global permissions along with the list of superusers would be returned. Else, no rows get returned.

参数:

conf -

tableRegex - The regular expression string to match against

返回:

- returns an array of UserPermissions

抛出:

Throwable