public class TenantAclProvider extends AclProvider
TenantMetadata.isSuperUser
enabled.kafka.security.auth.SimpleAclAuthorizer.AclChangedNotificationHandler$, kafka.security.auth.SimpleAclAuthorizer.ResourceOrdering$, kafka.security.auth.SimpleAclAuthorizer.VersionedAcls, kafka.security.auth.SimpleAclAuthorizer.VersionedAcls$
Constructor and Description |
---|
TenantAclProvider() |
Modifier and Type | Method and Description |
---|---|
java.util.Set<io.confluent.security.authorizer.AccessRule> |
accessRules(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
io.confluent.security.authorizer.Scope scope,
io.confluent.security.authorizer.ResourcePattern resource) |
void |
configure(java.util.Map<java.lang.String,?> configs) |
boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals,
io.confluent.security.authorizer.Scope scope) |
boolean |
mayDeny() |
java.lang.String |
providerName() |
boolean |
usesMetadataFromThisKafkaCluster() |
authorize, needsLicense
AclChangedNotificationHandler, addAcls, AllowEveryoneIfNoAclIsFoundProp, close, debug, debug, error, error, fatal, fatal, getAcls, getAcls, getAcls, getMatchingAcls, info, info, isDebugEnabled, isSuperUser, isTraceEnabled, kafka$security$auth$SimpleAclAuthorizer$$getAclsFromZk, kafka$security$auth$SimpleAclAuthorizer$$lock, kafka$security$auth$SimpleAclAuthorizer$$updateCache, logger, loggerName, logIdent_$eq, logIdent, maxUpdateRetries_$eq, maxUpdateRetries, msgWithLogIdent, NoAcls, removeAcls, removeAcls, startZkChangeListeners, SuperUsersProp, trace, trace, warn, warn, ZkConnectionTimeOutProp, ZkMaxInFlightRequests, ZkSessionTimeOutProp, ZkUrlProp
public void configure(java.util.Map<java.lang.String,?> configs)
configure
in interface org.apache.kafka.common.Configurable
configure
in class kafka.security.auth.SimpleAclAuthorizer
public java.lang.String providerName()
providerName
in interface io.confluent.security.authorizer.provider.Provider
providerName
in class AclProvider
public boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, io.confluent.security.authorizer.Scope scope)
isSuperUser
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
isSuperUser
in class AclProvider
public java.util.Set<io.confluent.security.authorizer.AccessRule> accessRules(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, java.util.Set<org.apache.kafka.common.security.auth.KafkaPrincipal> groupPrincipals, io.confluent.security.authorizer.Scope scope, io.confluent.security.authorizer.ResourcePattern resource)
accessRules
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
accessRules
in class AclProvider
public boolean mayDeny()
mayDeny
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
mayDeny
in class AclProvider
public boolean usesMetadataFromThisKafkaCluster()
usesMetadataFromThisKafkaCluster
in interface io.confluent.security.authorizer.provider.Provider
usesMetadataFromThisKafkaCluster
in class AclProvider