public class MultiTenantAuthorizer extends ConfluentServerAuthorizer
Modifier and Type | Field and Description |
---|---|
static java.lang.String |
MAX_ACLS_PER_TENANT_PROP |
Constructor and Description |
---|
MultiTenantAuthorizer() |
Modifier and Type | Method and Description |
---|---|
java.lang.Iterable<org.apache.kafka.common.acl.AclBinding> |
acls(org.apache.kafka.common.acl.AclBindingFilter filter) |
java.util.List<org.apache.kafka.server.authorizer.AuthorizationResult> |
authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
java.util.List<org.apache.kafka.server.authorizer.Action> actions) |
void |
configure(java.util.Map<java.lang.String,?> configs) |
protected void |
configureProviders(java.util.List<io.confluent.security.authorizer.provider.AccessRuleProvider> accessRuleProviders,
io.confluent.security.authorizer.provider.GroupProvider groupProvider,
io.confluent.security.authorizer.provider.MetadataProvider metadataProvider,
io.confluent.security.authorizer.provider.AuditLogProvider auditLogProvider) |
java.util.List<? extends java.util.concurrent.CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> |
createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
java.util.List<org.apache.kafka.common.acl.AclBinding> aclBindings) |
java.util.List<? extends java.util.concurrent.CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> |
deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
java.util.List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters) |
boolean |
isAuditLogEnabled() |
protected boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal userOrGroupPrincipal,
io.confluent.security.authorizer.Action action) |
centralizedAclProvider, configureServerInfo, createAcls, deleteAcls, reconfigurableConfigs, reconfigure, start, validateReconfiguration, zkAclProvider
accessRuleProvider, accessRuleProviders, auditLogProvider, authorize, close, groupProvider, logAuditMessage, metadataProvider, ready, scope, start
public static final java.lang.String MAX_ACLS_PER_TENANT_PROP
public void configure(java.util.Map<java.lang.String,?> configs)
configure
in interface org.apache.kafka.common.Configurable
configure
in class io.confluent.security.authorizer.EmbeddedAuthorizer
public java.util.List<org.apache.kafka.server.authorizer.AuthorizationResult> authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, java.util.List<org.apache.kafka.server.authorizer.Action> actions)
authorize
in class ConfluentServerAuthorizer
protected boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal sessionPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal userOrGroupPrincipal, io.confluent.security.authorizer.Action action)
isSuperUser
in class io.confluent.security.authorizer.EmbeddedAuthorizer
public java.util.List<? extends java.util.concurrent.CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, java.util.List<org.apache.kafka.common.acl.AclBinding> aclBindings)
createAcls
in class ConfluentServerAuthorizer
public java.util.List<? extends java.util.concurrent.CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, java.util.List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters)
deleteAcls
in class ConfluentServerAuthorizer
public java.lang.Iterable<org.apache.kafka.common.acl.AclBinding> acls(org.apache.kafka.common.acl.AclBindingFilter filter)
acls
in class ConfluentServerAuthorizer
protected void configureProviders(java.util.List<io.confluent.security.authorizer.provider.AccessRuleProvider> accessRuleProviders, io.confluent.security.authorizer.provider.GroupProvider groupProvider, io.confluent.security.authorizer.provider.MetadataProvider metadataProvider, io.confluent.security.authorizer.provider.AuditLogProvider auditLogProvider)
configureProviders
in class io.confluent.security.authorizer.EmbeddedAuthorizer
public boolean isAuditLogEnabled()