org.apache.tez.common.security

Class ACLManager

java.lang.Object

org.apache.tez.common.security.ACLManager

@InterfaceAudience.Private
public class ACLManager
extends Object

Class to manage ACLs for the Tez AM and DAGs and provides functionality to check whether a user is authorized to take certain actions.

Constructor Summary

Constructors

Constructor and Description
ACLManager(ACLManager amACLManager, String dagUser, org.apache.hadoop.conf.Configuration dagConf)
ACLManager(String amUser)
ACLManager(String amUser, org.apache.hadoop.conf.Configuration conf)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkAMModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)
boolean	checkAMViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)
boolean	checkDAGModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)
boolean	checkDAGViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)
Map<org.apache.hadoop.yarn.api.records.ApplicationAccessType,String>	toYARNACls()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ACLManager

public ACLManager(String amUser)

ACLManager

public ACLManager(String amUser,
          org.apache.hadoop.conf.Configuration conf)

ACLManager

public ACLManager(ACLManager amACLManager,
          String dagUser,
          org.apache.hadoop.conf.Configuration dagConf)

Method Detail

checkAMViewAccess

public boolean checkAMViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)

checkAMModifyAccess

public boolean checkAMModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)

checkDAGViewAccess

public boolean checkDAGViewAccess(org.apache.hadoop.security.UserGroupInformation ugi)

checkDAGModifyAccess

public boolean checkDAGModifyAccess(org.apache.hadoop.security.UserGroupInformation ugi)

toYARNACls

public Map<org.apache.hadoop.yarn.api.records.ApplicationAccessType,String> toYARNACls()