public class TenantAclProvider extends AclProvider
TenantMetadata.isSuperUser
enabled.kafka.security.authorizer.AclAuthorizer.AclChangedNotificationHandler$, kafka.security.authorizer.AclAuthorizer.AclSeqs, kafka.security.authorizer.AclAuthorizer.ResourceOrdering, kafka.security.authorizer.AclAuthorizer.VersionedAcls, kafka.security.authorizer.AclAuthorizer.VersionedAcls$
Constructor and Description |
---|
TenantAclProvider() |
Modifier and Type | Method and Description |
---|---|
io.confluent.security.authorizer.provider.AuthorizeRule |
findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
java.lang.String host,
io.confluent.security.authorizer.Action action) |
boolean |
mayDeny() |
java.lang.String |
providerName() |
boolean |
usesMetadataFromThisKafkaCluster() |
authorize, findRule, isSuperUser, start, start, updateCache
AclChangedNotificationHandler, acls, AllowEveryoneIfNoAclIsFoundProp, authorizerLogger, close, configPrefix, configure, createAcls, createAcls, debug, debug, deleteAcls, deleteAcls, error, error, fatal, fatal, info, info, isDebugEnabled, isSuperUser, isTraceEnabled, logAuditMessage, logger, loggerName, logIdent_$eq, logIdent, matchingAcls, maxUpdateRetries_$eq, maxUpdateRetries, msgWithLogIdent, NoAcls, processAclChangeNotification, registerAclUpdateListener, startZkChangeListeners, SuperUsersProp, trace, trace, warn, warn, WildcardHost, ZkConnectionTimeOutProp, ZkMaxInFlightRequests, ZkSessionTimeOutProp, ZkUrlProp
public java.lang.String providerName()
providerName
in interface io.confluent.security.authorizer.provider.Provider
providerName
in class AclProvider
public io.confluent.security.authorizer.provider.AuthorizeRule findRule(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, java.lang.String host, io.confluent.security.authorizer.Action action)
findRule
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
findRule
in class AclProvider
public boolean mayDeny()
mayDeny
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
mayDeny
in class AclProvider
public boolean usesMetadataFromThisKafkaCluster()
usesMetadataFromThisKafkaCluster
in interface io.confluent.security.authorizer.provider.Provider
usesMetadataFromThisKafkaCluster
in class AclProvider