Modifier and Type | Method and Description |
---|---|
AuthorizeRule |
findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
java.lang.String host,
Action action)
Returns the first matching access rule for the user and group principals that match the provided
resource.
|
boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal,
Scope scope)
Returns true if the provided principal is a super user.
|
boolean |
mayDeny()
Returns true if this provider supports DENY rules.
|
providerName, start, usesMetadataFromThisKafkaCluster
boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal, Scope scope)
principal
- User principal from the Session or the group principal of a group that
the user belongs to.scope
- Scope of resource being accessAuthorizeRule findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, java.lang.String host, Action action)
sessionPrincipal
- User principal from the SessiongroupPrincipals
- List of group principals of the user, which may be emptyhost
- Client IP addressaction
- Action being authorizedboolean mayDeny()