io.confluent.kafka.security.authorizer.acl

Class StandardAclProvider

java.lang.Object

io.confluent.kafka.security.authorizer.acl.StandardAclProvider

All Implemented Interfaces:

ExtendedAccessRuleProvider, io.confluent.security.authorizer.provider.AccessRuleProvider, io.confluent.security.authorizer.provider.Provider, Closeable, AutoCloseable, org.apache.kafka.common.Configurable

public class StandardAclProvider
extends Object
implements ExtendedAccessRuleProvider

Provider implementation which derives access rules from StandardAuthorizer, which is the default authorizer for KRaft and stores rules in the __cluster_metadata topic.

Constructor Summary

Constructors

Constructor and Description
StandardAclProvider()

Method Summary

Modifier and Type	Method and Description
void	addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules, Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals, String host, io.confluent.security.authorizer.Operation operation, io.confluent.security.authorizer.Scope resourceScope, io.confluent.security.authorizer.ResourceType resourceType)
Optional<org.apache.kafka.server.authorizer.Authorizer>	asAuthorizer()
void	close()
void	configure(Map<String,?> configs)
io.confluent.security.authorizer.provider.AuthorizeRule	findRule(Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals, String host, io.confluent.security.authorizer.Action action)
boolean	isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal, io.confluent.security.authorizer.Scope scope)
boolean	mayDeny()
String	providerName()
boolean	usesMetadataFromThisKafkaCluster()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.security.authorizer.acl.ExtendedAccessRuleProvider

addMatchingRules, findRule

Methods inherited from interface io.confluent.security.authorizer.provider.Provider

start

Constructor Detail

StandardAclProvider

public StandardAclProvider()

Method Detail

configure

public void configure(Map<String,?> configs)

Specified by:

configure in interface org.apache.kafka.common.Configurable

providerName

public String providerName()

Specified by:

providerName in interface io.confluent.security.authorizer.provider.Provider

mayDeny

public boolean mayDeny()

Specified by:

mayDeny in interface io.confluent.security.authorizer.provider.AccessRuleProvider

usesMetadataFromThisKafkaCluster

public boolean usesMetadataFromThisKafkaCluster()

Specified by:

usesMetadataFromThisKafkaCluster in interface io.confluent.security.authorizer.provider.Provider

isSuperUser

public boolean isSuperUser(org.apache.kafka.common.security.auth.KafkaPrincipal principal,
                           io.confluent.security.authorizer.Scope scope)

Specified by:

isSuperUser in interface io.confluent.security.authorizer.provider.AccessRuleProvider

findRule

public io.confluent.security.authorizer.provider.AuthorizeRule findRule(Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals,
                                                                        String host,
                                                                        io.confluent.security.authorizer.Action action)

Specified by:

findRule in interface ExtendedAccessRuleProvider

addMatchingRules

public void addMatchingRules(io.confluent.security.authorizer.provider.ResourceAuthorizeRules matchingRules,
                             Set<org.apache.kafka.common.security.auth.KafkaPrincipal> matchingPrincipals,
                             String host,
                             io.confluent.security.authorizer.Operation operation,
                             io.confluent.security.authorizer.Scope resourceScope,
                             io.confluent.security.authorizer.ResourceType resourceType)

Specified by:

addMatchingRules in interface ExtendedAccessRuleProvider

close

public void close()
           throws IOException

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

Throws:

IOException

asAuthorizer

public Optional<org.apache.kafka.server.authorizer.Authorizer> asAuthorizer()

Specified by:

asAuthorizer in interface io.confluent.security.authorizer.provider.AccessRuleProvider