public class AclProvider
extends kafka.security.auth.SimpleAclAuthorizer
implements io.confluent.security.authorizer.provider.AccessRuleProvider
kafka.security.auth.SimpleAclAuthorizer.AclChangedNotificationHandler$, kafka.security.auth.SimpleAclAuthorizer.ResourceOrdering$, kafka.security.auth.SimpleAclAuthorizer.VersionedAcls, kafka.security.auth.SimpleAclAuthorizer.VersionedAcls$
Constructor and Description |
---|
AclProvider() |
Modifier and Type | Method and Description |
---|---|
java.util.Set<io.confluent.security.authorizer.AccessRule> |
accessRules(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
io.confluent.security.authorizer.Scope scope,
io.confluent.security.authorizer.ResourcePattern resource) |
boolean |
authorize(kafka.network.RequestChannel.Session session,
kafka.security.auth.Operation operation,
kafka.security.auth.Resource resource) |
boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
io.confluent.security.authorizer.Scope scope) |
boolean |
mayDeny() |
boolean |
needsLicense() |
java.lang.String |
providerName() |
boolean |
usesMetadataFromThisKafkaCluster() |
AclChangedNotificationHandler, addAcls, AllowEveryoneIfNoAclIsFoundProp, close, configure, debug, debug, error, error, fatal, fatal, getAcls, getAcls, getAcls, getMatchingAcls, info, info, isDebugEnabled, isSuperUser, isTraceEnabled, kafka$security$auth$SimpleAclAuthorizer$$getAclsFromZk, kafka$security$auth$SimpleAclAuthorizer$$lock, kafka$security$auth$SimpleAclAuthorizer$$updateCache, logger, loggerName, logIdent_$eq, logIdent, maxUpdateRetries_$eq, maxUpdateRetries, msgWithLogIdent, NoAcls, removeAcls, removeAcls, startZkChangeListeners, SuperUsersProp, trace, trace, warn, warn, ZkConnectionTimeOutProp, ZkMaxInFlightRequests, ZkSessionTimeOutProp, ZkUrlProp
public java.lang.String providerName()
providerName
in interface io.confluent.security.authorizer.provider.Provider
public boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, io.confluent.security.authorizer.Scope scope)
isSuperUser
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public boolean mayDeny()
mayDeny
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public boolean usesMetadataFromThisKafkaCluster()
usesMetadataFromThisKafkaCluster
in interface io.confluent.security.authorizer.provider.Provider
public java.util.Set<io.confluent.security.authorizer.AccessRule> accessRules(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, io.confluent.security.authorizer.Scope scope, io.confluent.security.authorizer.ResourcePattern resource)
accessRules
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public boolean authorize(kafka.network.RequestChannel.Session session, kafka.security.auth.Operation operation, kafka.security.auth.Resource resource)
authorize
in interface kafka.security.auth.Authorizer
authorize
in class kafka.security.auth.SimpleAclAuthorizer
public boolean needsLicense()
needsLicense
in interface io.confluent.security.authorizer.provider.Provider