Package org.apache.hadoop.hbase.security

Examples of org.apache.hadoop.hbase.security.AccessDeniedException

929
930
931
932
933
934
935
936
937
  private void requireScannerOwner(InternalScanner s) throws AccessDeniedException {
    if (RequestContext.isInRequestContext()) {
      String requestUName = RequestContext.getRequestUserName();
      String owner = scannerOwners.get(s);
      if (owner != null && !owner.equals(requestUName)) {
        throw new AccessDeniedException("User '" + requestUName + "' is not the scanner owner!");
      }
    }
  }
View Full Code Here
1152
1153
1154
1155
1156
1157
1158
1159
1160
  private void performACLCheck() throws IOException {
    // Do ACL check only when the security is enabled.
    if (this.acOn && !isSystemOrSuperUser()) {
      User user = getActiveUser();
      throw new AccessDeniedException("User '" + (user != null ? user.getShortName() : "null")
          + " is not authorized to perform this action.");
    }
  }
View Full Code Here
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
      List<String> auths = this.visibilityManager.getAuths(user.getShortName());
      if (LOG.isTraceEnabled()) {
        LOG.trace("The list of auths are "+auths);
      }
      if (!auths.contains(SYSTEM_LABEL)) {
        throw new AccessDeniedException("User '" + user.getShortName()
            + "' is not authorized to perform this action.");
      }
    }
  }
View Full Code Here
382
383
384
385
386
387
388
389
                                 permission, tableName, family, qualifier);
      }
    }
    logResult(result);
    if (!result.isAllowed()) {
      throw new AccessDeniedException("Insufficient permissions " + result.toContextString());
    }
  }
View Full Code Here
413
414
415
416
417
418
419
420
421
422
423
    User user = getActiveUser();
    AuthResult result = permissionGranted(request, user, perm, env, families);
    logResult(result);

    if (!result.isAllowed()) {
      throw new AccessDeniedException("Insufficient permissions (table=" +
        env.getRegion().getTableDesc().getTableName()+
        ((families != null && families.size() > 0) ? ", family: " +
        result.toFamilyString() : "") + ", action=" +
        perm.toString() + ")");
    }
View Full Code Here
436
437
438
439
440
441
442
443
444
445
    User user = getActiveUser();
    if (authManager.authorize(user, perm)) {
      logResult(AuthResult.allow(request, "Global check allowed", user, perm, tableName, familyMap));
    } else {
      logResult(AuthResult.deny(request, "Global check failed", user, perm, tableName, familyMap));
      throw new AccessDeniedException("Insufficient permissions for user '" +
          (user != null ? user.getShortName() : "null") +"' (global, action=" +
          perm.toString() + ")");
    }
  }
View Full Code Here
456
457
458
459
460
461
462
463
464
465
    User user = getActiveUser();
    if (authManager.authorize(user, perm)) {
      logResult(AuthResult.allow(request, "Global check allowed", user, perm, namespace));
    } else {
      logResult(AuthResult.deny(request, "Global check failed", user, perm, namespace));
      throw new AccessDeniedException("Insufficient permissions for user '" +
          (user != null ? user.getShortName() : "null") +"' (global, action=" +
          perm.toString() + ")");
    }
  }
View Full Code Here
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
              if (!authManager.authorize(user, getTableName(e), cell, false, action)) {
                AuthResult authResult = AuthResult.deny(request, "Insufficient permissions",
                  user, action, getTableName(e), CellUtil.cloneFamily(cell),
                  CellUtil.cloneQualifier(cell));
                logResult(authResult);
                throw new AccessDeniedException("Insufficient permissions " +
                  authResult.toContextString());
              }
            }
            cellsChecked++;
          }
        } while (more);
      } catch (AccessDeniedException ex) {
        throw ex;
      } catch (IOException ex) {
        LOG.error("Exception while getting cells to calculate covering permission", ex);
      } finally {
        scanner.close();
      }
    }

    // If there were no cells to check, throw the ADE
    if (cellsChecked < 1) {
      if (LOG.isTraceEnabled()) {
        LOG.trace("No cells found with scan");
      }
      AuthResult authResult = AuthResult.deny(request, "Insufficient permissions",
        user, cellCheckActions.get(0), getTableName(e), familyMap);
      logResult(authResult);
      throw new AccessDeniedException("Insufficient permissions " +
        authResult.toContextString());
    }

    // Log that authentication succeeded. We need to trade off logging maybe
    // thousands of fine grained decisions with providing detail.
View Full Code Here
842
843
844
845
846
847
848
849
850
851
  @Override
  public void preDisableTable(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName)
      throws IOException {
    if (Bytes.equals(tableName.getName(), AccessControlLists.ACL_GLOBAL_NAME)) {
      throw new AccessDeniedException("Not allowed to disable "
          + AccessControlLists.ACL_TABLE_NAME + " table.");
    }
    requirePermission("disableTable", tableName, null, null, Action.ADMIN, Action.CREATE);
  }
View Full Code Here
1408
1409
1410
1411
1412
1413
1414
1415
1416
      throws AccessDeniedException {
    if (RequestContext.isInRequestContext()) {
      String requestUserName = RequestContext.getRequestUserName();
      String owner = scannerOwners.get(s);
      if (owner != null && !owner.equals(requestUserName)) {
        throw new AccessDeniedException("User '"+ requestUserName +"' is not the scanner owner!");
      }
    }
  }
View Full Code Here
TOP

Related Classes of org.apache.hadoop.hbase.security.AccessDeniedException

  • org.apache.hadoop.hbase.ipc.RpcServer$Connection
  • org.apache.hadoop.hbase.security.access.AccessController
  • org.apache.hadoop.hbase.security.token.TokenProvider
  • org.apache.hadoop.hbase.security.visibility.VisibilityController
  • org.apache.hadoop.hbase.security.visibility.VisibilityUtils
  • org.apache.hadoop.hbase.util.FSUtils
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.