org.apache.tez.common.security

Class ACLManager

java.lang.Object

org.apache.tez.common.security.ACLManager

@InterfaceAudience.Private
public class ACLManager
extends Object

Class to manage ACLs for the Tez AM and DAGs and provides functionality to check whether a user is authorized to take certain actions.

Field Summary

Fields

Modifier and Type	Field and Description
static String	WILDCARD_ACL_VALUE

Constructor Summary

Constructors

Constructor and Description
ACLManager(ACLManager amACLManager, String dagUser, org.apache.hadoop.conf.Configuration dagConf)
ACLManager(String amUser)
ACLManager(String amUser, org.apache.hadoop.conf.Configuration conf)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkAMModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)
boolean	checkAMViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)
boolean	checkDAGModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)
boolean	checkDAGViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)
static String	toCommaSeparatedString(Collection<String> collection)
Map<org.apache.hadoop.yarn.api.records.ApplicationAccessType,String>	toYARNACls()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

WILDCARD_ACL_VALUE

public static final String WILDCARD_ACL_VALUE

See Also:

Constant Field Values

Constructor Detail

ACLManager

public ACLManager(String amUser)

ACLManager

public ACLManager(String amUser,
          org.apache.hadoop.conf.Configuration conf)

ACLManager

public ACLManager(ACLManager amACLManager,
          String dagUser,
          org.apache.hadoop.conf.Configuration dagConf)

Method Detail

checkAMViewAccess

public boolean checkAMViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)

checkAMModifyAccess

public boolean checkAMModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)

checkDAGViewAccess

public boolean checkDAGViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)

checkDAGModifyAccess

public boolean checkDAGModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)

toYARNACls

public Map<org.apache.hadoop.yarn.api.records.ApplicationAccessType,String> toYARNACls()

toCommaSeparatedString

public static String toCommaSeparatedString(Collection<String> collection)