Package | Description |
---|---|
org.apache.cassandra.auth | |
org.apache.cassandra.auth.jmx | |
org.apache.cassandra.cql3.statements |
Modifier and Type | Field and Description |
---|---|
RoleResource |
Role.resource
Represents a user or group in the auth subsystem.
|
Modifier and Type | Method and Description |
---|---|
static RoleResource |
RoleResource.fromName(java.lang.String name)
Parses a role resource name into a RoleResource instance.
|
RoleResource |
AuthenticatedUser.getPrimaryRole() |
static RoleResource |
RoleResource.role(java.lang.String name)
Creates a RoleResource representing an individual Role.
|
static RoleResource |
RoleResource.root() |
Modifier and Type | Method and Description |
---|---|
java.util.Set<RoleResource> |
CassandraRoleManager.getAllRoles() |
java.util.Set<RoleResource> |
IRoleManager.getAllRoles()
Called during the execution of an unqualified LIST ROLES query.
|
java.util.Set<RoleResource> |
AuthenticatedUser.getRoles()
Get the roles that have been granted to the user via the IRoleManager
|
static java.util.Set<RoleResource> |
Roles.getRoles(RoleResource primaryRole)
Identify all roles granted to the supplied Role, including both directly granted
and inherited roles.
|
java.util.Set<RoleResource> |
CassandraRoleManager.getRoles(RoleResource grantee,
boolean includeInherited) |
java.util.Set<RoleResource> |
IRoleManager.getRoles(RoleResource grantee,
boolean includeInherited)
Called during execution of a LIST ROLES query.
|
Modifier and Type | Method and Description |
---|---|
void |
CassandraRoleManager.alterRole(AuthenticatedUser performer,
RoleResource role,
RoleOptions options) |
void |
IRoleManager.alterRole(AuthenticatedUser performer,
RoleResource role,
RoleOptions options)
Called during execution of ALTER ROLE statement.
|
DCPermissions |
AllowAllNetworkAuthorizer.authorize(RoleResource role) |
DCPermissions |
CassandraNetworkAuthorizer.authorize(RoleResource role) |
DCPermissions |
INetworkAuthorizer.authorize(RoleResource role)
Returns the dc permissions associated with the given role
|
boolean |
CassandraRoleManager.canLogin(RoleResource role) |
boolean |
IRoleManager.canLogin(RoleResource role)
Return true if there exists a Role with the given name which has login
privileges.
|
static boolean |
Roles.canLogin(RoleResource role)
Returns true if the supplied role has the login privilege.
|
int |
RoleResource.compareTo(RoleResource o) |
void |
CassandraRoleManager.createRole(AuthenticatedUser performer,
RoleResource role,
RoleOptions options) |
void |
IRoleManager.createRole(AuthenticatedUser performer,
RoleResource role,
RoleOptions options)
Called during execution of a CREATE ROLE statement.
|
void |
AllowAllNetworkAuthorizer.drop(RoleResource role) |
void |
CassandraNetworkAuthorizer.drop(RoleResource role) |
void |
INetworkAuthorizer.drop(RoleResource role)
Called when a role is deleted, so any corresponding network auth
data can also be cleaned up
|
void |
CassandraRoleManager.dropRole(AuthenticatedUser performer,
RoleResource role) |
void |
IRoleManager.dropRole(AuthenticatedUser performer,
RoleResource role)
Called during execution of DROP ROLE statement, as well we removing any main record of the role from the system
this implies that we want to revoke this role from all other roles that it has been granted to.
|
static Role |
Roles.fromRoleResource(RoleResource resource,
IRoleManager roleManager)
Constructs a Role object from a RoleResource, using the methods of the supplied IRoleManager.
|
java.util.Map<java.lang.String,java.lang.String> |
CassandraRoleManager.getCustomOptions(RoleResource role) |
java.util.Map<java.lang.String,java.lang.String> |
IRoleManager.getCustomOptions(RoleResource role)
Where an implementation supports OPTIONS in CREATE and ALTER operations
this method should return the
Map<String, String> representing the custom
options associated with the role, as supplied to CREATE or ALTER. |
static java.util.Map<java.lang.String,java.lang.String> |
Roles.getOptions(RoleResource role)
Returns the map of custom options for the named role.
|
java.util.Set<Role> |
CassandraRoleManager.getRoleDetails(RoleResource grantee) |
default java.util.Set<Role> |
IRoleManager.getRoleDetails(RoleResource grantee)
Used to retrieve detailed role info on the full set of roles granted to a grantee.
|
static java.util.Set<Role> |
Roles.getRoleDetails(RoleResource primaryRole)
Get detailed info on all the roles granted to the role identified by the supplied RoleResource.
|
static java.util.Set<RoleResource> |
Roles.getRoles(RoleResource primaryRole)
Identify all roles granted to the supplied Role, including both directly granted
and inherited roles.
|
java.util.Set<RoleResource> |
CassandraRoleManager.getRoles(RoleResource grantee,
boolean includeInherited) |
java.util.Set<RoleResource> |
IRoleManager.getRoles(RoleResource grantee,
boolean includeInherited)
Called during execution of a LIST ROLES query.
|
void |
AllowAllAuthorizer.grant(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource to) |
void |
CassandraAuthorizer.grant(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource grantee) |
void |
IAuthorizer.grant(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource grantee)
Grants a set of permissions on a resource to a role.
|
void |
CassandraRoleManager.grantRole(AuthenticatedUser performer,
RoleResource role,
RoleResource grantee) |
void |
IRoleManager.grantRole(AuthenticatedUser performer,
RoleResource role,
RoleResource grantee)
Called during execution of GRANT ROLE query.
|
static boolean |
Roles.hasSuperuserStatus(RoleResource role)
Returns true if the supplied role or any other role granted to it
(directly or indirectly) has superuser status.
|
boolean |
CassandraRoleManager.isExistingRole(RoleResource role) |
boolean |
IRoleManager.isExistingRole(RoleResource role)
Return true is a Role with the given name exists in the system.
|
boolean |
CassandraRoleManager.isSuper(RoleResource role) |
boolean |
IRoleManager.isSuper(RoleResource role)
Return true if there exists a Role with the given name that also has
superuser status.
|
java.util.Set<PermissionDetails> |
AllowAllAuthorizer.list(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource of) |
java.util.Set<PermissionDetails> |
CassandraAuthorizer.list(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource grantee) |
java.util.Set<PermissionDetails> |
IAuthorizer.list(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource grantee)
Returns a list of permissions on a resource granted to a role.
|
void |
AllowAllAuthorizer.revoke(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource from) |
void |
CassandraAuthorizer.revoke(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource revokee) |
void |
IAuthorizer.revoke(AuthenticatedUser performer,
java.util.Set<Permission> permissions,
IResource resource,
RoleResource revokee)
Revokes a set of permissions on a resource from a user.
|
void |
AllowAllAuthorizer.revokeAllFrom(RoleResource droppedRole) |
void |
CassandraAuthorizer.revokeAllFrom(RoleResource revokee) |
void |
IAuthorizer.revokeAllFrom(RoleResource revokee)
Called before deleting a role with DROP ROLE statement (or the alias provided for compatibility,
DROP USER) so that a new role with the same name wouldn't inherit permissions of the deleted one in the future.
|
void |
CassandraRoleManager.revokeRole(AuthenticatedUser performer,
RoleResource role,
RoleResource revokee) |
void |
IRoleManager.revokeRole(AuthenticatedUser performer,
RoleResource role,
RoleResource revokee)
Called during the execution of a REVOKE ROLE query.
|
void |
AllowAllNetworkAuthorizer.setRoleDatacenters(RoleResource role,
DCPermissions permissions) |
void |
CassandraNetworkAuthorizer.setRoleDatacenters(RoleResource role,
DCPermissions permissions) |
void |
INetworkAuthorizer.setRoleDatacenters(RoleResource role,
DCPermissions permissions) |
Modifier and Type | Field and Description |
---|---|
protected java.util.function.Function<RoleResource,java.util.Set<PermissionDetails>> |
AuthorizationProxy.getPermissions |
protected java.util.function.Predicate<RoleResource> |
AuthorizationProxy.isSuperuser |
Modifier and Type | Field and Description |
---|---|
protected RoleResource |
PermissionsManagementStatement.grantee |
protected RoleResource |
RoleManagementStatement.grantee |
protected RoleResource |
RoleManagementStatement.role |
Modifier and Type | Method and Description |
---|---|
void |
AuthenticationStatement.checkPermission(ClientState state,
Permission required,
RoleResource resource) |
Modifier and Type | Method and Description |
---|---|
protected ResultMessage |
ListRolesStatement.formatResults(java.util.List<RoleResource> sortedRoles) |
protected ResultMessage |
ListUsersStatement.formatResults(java.util.List<RoleResource> sortedRoles) |
Copyright © 2009-2020 The Apache Software Foundation