public class ScopeAccessRuleStore extends Object implements AccessRuleStore
Constructor and Description |
---|
ScopeAccessRuleStore() |
ScopeAccessRuleStore(Map<io.confluent.security.authorizer.Scope,NavigableMap<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>>> accessRules) |
Modifier and Type | Method and Description |
---|---|
void |
add(io.confluent.security.authorizer.Scope scope,
org.apache.kafka.common.security.auth.KafkaPrincipal principal,
Map<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> rules) |
void |
addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules,
io.confluent.security.authorizer.Scope resourceScope,
Set<org.apache.kafka.common.security.auth.KafkaPrincipal> principals,
String host,
io.confluent.security.authorizer.Operation operation,
io.confluent.security.authorizer.ResourceType resourceType) |
io.confluent.security.authorizer.provider.AuthorizeRule |
findMatchingRule(Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals,
String host,
io.confluent.security.authorizer.Action action) |
NavigableMap<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> |
get(io.confluent.security.authorizer.Scope scope) |
Set<io.confluent.security.authorizer.Scope> |
knownScopes() |
Set<io.confluent.security.authorizer.AccessRule> |
remove(io.confluent.security.authorizer.Scope scope,
io.confluent.security.authorizer.ResourcePattern resourcePattern) |
void |
removeDeletedAccessRules(io.confluent.security.authorizer.Scope scope,
org.apache.kafka.common.security.auth.KafkaPrincipal principal,
Map<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> keepRules) |
long |
ruleCount() |
void |
update(io.confluent.security.authorizer.Scope scope,
io.confluent.security.authorizer.ResourcePattern resourcePattern,
Set<io.confluent.security.authorizer.AccessRule> newRules) |
public ScopeAccessRuleStore(Map<io.confluent.security.authorizer.Scope,NavigableMap<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>>> accessRules)
public ScopeAccessRuleStore()
public Set<io.confluent.security.authorizer.Scope> knownScopes()
knownScopes
in interface AccessRuleStore
public NavigableMap<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> get(io.confluent.security.authorizer.Scope scope)
get
in interface AccessRuleStore
public void add(io.confluent.security.authorizer.Scope scope, org.apache.kafka.common.security.auth.KafkaPrincipal principal, Map<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> rules)
add
in interface AccessRuleStore
public void update(io.confluent.security.authorizer.Scope scope, io.confluent.security.authorizer.ResourcePattern resourcePattern, Set<io.confluent.security.authorizer.AccessRule> newRules)
update
in interface AccessRuleStore
public Set<io.confluent.security.authorizer.AccessRule> remove(io.confluent.security.authorizer.Scope scope, io.confluent.security.authorizer.ResourcePattern resourcePattern)
remove
in interface AccessRuleStore
public io.confluent.security.authorizer.provider.AuthorizeRule findMatchingRule(Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals, String host, io.confluent.security.authorizer.Action action)
findMatchingRule
in interface AccessRuleStore
public void addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules, io.confluent.security.authorizer.Scope resourceScope, Set<org.apache.kafka.common.security.auth.KafkaPrincipal> principals, String host, io.confluent.security.authorizer.Operation operation, io.confluent.security.authorizer.ResourceType resourceType)
addMatchingRules
in interface AccessRuleStore
public long ruleCount()
ruleCount
in interface AccessRuleStore
public void removeDeletedAccessRules(io.confluent.security.authorizer.Scope scope, org.apache.kafka.common.security.auth.KafkaPrincipal principal, Map<io.confluent.security.authorizer.ResourcePattern,Set<io.confluent.security.authorizer.AccessRule>> keepRules)
removeDeletedAccessRules
in interface AccessRuleStore