Modifier and Type | Method and Description |
---|---|
java.util.Set<AccessRule> |
accessRules(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
Scope scope,
ResourcePattern resource)
Returns the set of access rules for the user and group principals that match the provided
resource.
|
boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
Scope scope)
Returns true if either the session's user principal or one of the provided group
principals is a super user.
|
boolean |
mayDeny()
Returns true if this provider supports DENY rules.
|
needsLicense, providerName, start, usesMetadataFromThisKafkaCluster
boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, Scope scope)
sessionPrincipal
- User principal from the SessiongroupPrincipals
- List of group principals of the user, which may be emptyscope
- Scope of resource being accessjava.util.Set<AccessRule> accessRules(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, Scope scope, ResourcePattern resource)
sessionPrincipal
- User principal from the SessiongroupPrincipals
- List of group principals of the user, which may be emptyscope
- Scope of resourceresource
- Resource being accessedboolean mayDeny()