public class AclProvider
extends kafka.security.authorizer.AclAuthorizer
implements io.confluent.security.authorizer.provider.AccessRuleProvider
kafka.security.authorizer.AclAuthorizer.AclChangedNotificationHandler$, kafka.security.authorizer.AclAuthorizer.ResourceOrdering$, kafka.security.authorizer.AclAuthorizer.VersionedAcls, kafka.security.authorizer.AclAuthorizer.VersionedAcls$
Constructor and Description |
---|
AclProvider() |
Modifier and Type | Method and Description |
---|---|
java.util.List<org.apache.kafka.server.authorizer.AuthorizationResult> |
authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
java.util.List<org.apache.kafka.server.authorizer.Action> actions) |
protected io.confluent.security.authorizer.provider.AuthorizeRule |
findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
org.apache.kafka.common.security.auth.KafkaPrincipal wildcardUserPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal wilcardGroupPrincipal,
java.lang.String host,
io.confluent.security.authorizer.Action action) |
io.confluent.security.authorizer.provider.AuthorizeRule |
findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
java.lang.String host,
io.confluent.security.authorizer.Action action) |
boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal,
io.confluent.security.authorizer.Scope scope) |
boolean |
mayDeny() |
java.lang.String |
providerName() |
java.util.Map<org.apache.kafka.common.Endpoint,java.util.concurrent.CompletableFuture<java.lang.Void>> |
start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo) |
boolean |
usesMetadataFromThisKafkaCluster() |
AclChangedNotificationHandler, acls, AllowEveryoneIfNoAclIsFoundProp, authorizerLogger, close, configPrefix, configure, createAcls, createAcls, debug, debug, deleteAcls, deleteAcls, error, error, fatal, fatal, info, info, isDebugEnabled, isSuperUser, isTraceEnabled, kafka$security$authorizer$AclAuthorizer$$aclUpdateListeners, kafka$security$authorizer$AclAuthorizer$$getAclsFromZk, kafka$security$authorizer$AclAuthorizer$$lock, kafka$security$authorizer$AclAuthorizer$$updateCache, logAuditMessage, logger, loggerName, logIdent_$eq, logIdent, matchingAcls, maxUpdateRetries_$eq, maxUpdateRetries, msgWithLogIdent, NoAcls, registerAclUpdateListener, startZkChangeListeners, SuperUsersProp, trace, trace, warn, warn, WildcardHost, ZkConnectionTimeOutProp, ZkMaxInFlightRequests, ZkSessionTimeOutProp, ZkUrlProp
public java.lang.String providerName()
providerName
in interface io.confluent.security.authorizer.provider.Provider
public boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal, io.confluent.security.authorizer.Scope scope)
isSuperUser
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public boolean mayDeny()
mayDeny
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public boolean usesMetadataFromThisKafkaCluster()
usesMetadataFromThisKafkaCluster
in interface io.confluent.security.authorizer.provider.Provider
public io.confluent.security.authorizer.provider.AuthorizeRule findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, java.lang.String host, io.confluent.security.authorizer.Action action)
findRule
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
protected io.confluent.security.authorizer.provider.AuthorizeRule findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, org.apache.kafka.common.security.auth.KafkaPrincipal wildcardUserPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal wilcardGroupPrincipal, java.lang.String host, io.confluent.security.authorizer.Action action)
public java.util.Map<org.apache.kafka.common.Endpoint,java.util.concurrent.CompletableFuture<java.lang.Void>> start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo)
start
in interface org.apache.kafka.server.authorizer.Authorizer
start
in class kafka.security.authorizer.AclAuthorizer
public java.util.List<org.apache.kafka.server.authorizer.AuthorizationResult> authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, java.util.List<org.apache.kafka.server.authorizer.Action> actions)
authorize
in interface org.apache.kafka.server.authorizer.Authorizer
authorize
in class kafka.security.authorizer.AclAuthorizer