org.apache.tez.common.security

Class ACLManager

java.lang.Object

org.apache.tez.common.security.ACLManager

@InterfaceAudience.Private
public class ACLManager
extends Object

Class to manage ACLs for the Tez AM and DAGs and provides functionality to check whether a user is authorized to take certain actions.

Constructor Summary

Constructors

Constructor and Description
ACLManager(ACLManager amACLManager, String dagUser, org.apache.hadoop.conf.Configuration dagConf)
ACLManager(String amUser)
ACLManager(String amUser, org.apache.hadoop.conf.Configuration conf)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkAMModifyAccess(String user, Collection<String> userGroups)
boolean	checkAMViewAccess(String user, Collection<String> userGroups)
boolean	checkDAGModifyAccess(String user, Collection<String> userGroups)
boolean	checkDAGViewAccess(String user, Collection<String> userGroups)
Map<org.apache.hadoop.yarn.api.records.ApplicationAccessType,String>	toYARNACls()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ACLManager

public ACLManager(String amUser)

ACLManager

public ACLManager(String amUser,
          org.apache.hadoop.conf.Configuration conf)

ACLManager

public ACLManager(ACLManager amACLManager,
          String dagUser,
          org.apache.hadoop.conf.Configuration dagConf)

Method Detail

checkAMViewAccess

public boolean checkAMViewAccess(String user,
                        Collection<String> userGroups)

checkAMModifyAccess

public boolean checkAMModifyAccess(String user,
                          Collection<String> userGroups)

checkDAGViewAccess

public boolean checkDAGViewAccess(String user,
                         Collection<String> userGroups)

checkDAGModifyAccess

public boolean checkDAGModifyAccess(String user,
                           Collection<String> userGroups)

toYARNACls

public Map<org.apache.hadoop.yarn.api.records.ApplicationAccessType,String> toYARNACls()