public class StandardAclProvider extends Object implements ExtendedAccessRuleProvider
StandardAuthorizer
,
which is the default authorizer for KRaft and stores rules in the __cluster_metadata
topic.Constructor and Description |
---|
StandardAclProvider() |
Modifier and Type | Method and Description |
---|---|
void |
addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules,
Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals,
String host,
io.confluent.security.authorizer.Operation operation,
io.confluent.security.authorizer.Scope resourceScope,
io.confluent.security.authorizer.ResourceType resourceType) |
Optional<org.apache.kafka.server.authorizer.Authorizer> |
asAuthorizer() |
void |
close() |
void |
configure(Map<String,?> configs) |
io.confluent.security.authorizer.provider.AuthorizeRule |
findRule(Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals,
String host,
io.confluent.security.authorizer.Action action) |
boolean |
isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal,
io.confluent.security.authorizer.Scope scope) |
boolean |
mayDeny() |
String |
providerName() |
CompletionStage<Void> |
start(org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo) |
boolean |
usesMetadataFromThisKafkaCluster() |
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
addMatchingRules, findRule
public void configure(Map<String,?> configs)
configure
in interface org.apache.kafka.common.Configurable
public CompletionStage<Void> start(org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo)
start
in interface io.confluent.security.authorizer.provider.Provider
public String providerName()
providerName
in interface io.confluent.security.authorizer.provider.Provider
public boolean mayDeny()
mayDeny
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public boolean usesMetadataFromThisKafkaCluster()
usesMetadataFromThisKafkaCluster
in interface io.confluent.security.authorizer.provider.Provider
public boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal, io.confluent.security.authorizer.Scope scope)
isSuperUser
in interface io.confluent.security.authorizer.provider.AccessRuleProvider
public io.confluent.security.authorizer.provider.AuthorizeRule findRule(Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals, String host, io.confluent.security.authorizer.Action action)
findRule
in interface ExtendedAccessRuleProvider
public void addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules, Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals, String host, io.confluent.security.authorizer.Operation operation, io.confluent.security.authorizer.Scope resourceScope, io.confluent.security.authorizer.ResourceType resourceType)
addMatchingRules
in interface ExtendedAccessRuleProvider
public void close() throws IOException
close
in interface Closeable
close
in interface AutoCloseable
IOException
public Optional<org.apache.kafka.server.authorizer.Authorizer> asAuthorizer()
asAuthorizer
in interface io.confluent.security.authorizer.provider.AccessRuleProvider