io.hawt.osgi.jmx

Class RBACDecorator

java.lang.Object

io.hawt.osgi.jmx.RBACDecorator

All Implemented Interfaces:

RBACDecoratorMBean

public class RBACDecorator
extends Object
implements RBACDecoratorMBean

An MBean that may be used by hawtio:type=security,name=RBACRegistry to decorate optimized jolokia list operation with RBAC info.

Field Summary

Fields

Modifier and Type	Field and Description
static org.slf4j.Logger	LOG

Constructor Summary

Constructors

Constructor and Description
RBACDecorator(org.osgi.framework.BundleContext bundleContext)

Method Summary

Modifier and Type	Method and Description
void	decorate(Map<String,Object> result) If we have access to ConfigurationAdmin, we can add RBAC information
static List<String>	iterateDownPids(List<String> segments) see: org.apache.karaf.management.KarafMBeanServerGuard#iterateDownPids(java.util.List) Given a list of segments, return a list of PIDs that are searched in this order.
static boolean	mayShareRBACInfo(List<String> realJmxAclPids, ObjectName o1, ObjectName o2) Checks if two ObjectNames may share RBAC info - if the same configadmin PIDs are examined by Karaf
static List<String>	nameSegments(ObjectName objectName) see: org.apache.karaf.management.KarafMBeanServerGuard#getNameSegments(javax.management.ObjectName) Assuming full ObjectName (not null, not containing wildcards and other funny stuff), split objectName to elements used then co contruct ordered list of PIDs to check for MBean permissions.
static String	pidListKey(List<String> allJmxAclPids, ObjectName n) Converts ObjectName to a key that helps verifying whether different MBeans can produce same RBAC info

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

public static org.slf4j.Logger LOG

Constructor Detail

RBACDecorator

public RBACDecorator(org.osgi.framework.BundleContext bundleContext)

Method Detail

decorate

public void decorate(Map<String,Object> result)
              throws Exception

If we have access to ConfigurationAdmin, we can add RBAC information

Specified by:

decorate in interface RBACDecoratorMBean

Parameters:

result -

Throws:

Exception

pidListKey

public static String pidListKey(List<String> allJmxAclPids,
                                ObjectName n)
                         throws NoSuchAlgorithmException,
                                UnsupportedEncodingException

Converts ObjectName to a key that helps verifying whether different MBeans can produce same RBAC info

Parameters:

allJmxAclPids -

n -

Returns:

Throws:

NoSuchAlgorithmException

UnsupportedEncodingException

nameSegments

public static List<String> nameSegments(ObjectName objectName)

see: org.apache.karaf.management.KarafMBeanServerGuard#getNameSegments(javax.management.ObjectName) Assuming full ObjectName (not null, not containing wildcards and other funny stuff), split objectName to elements used then co contruct ordered list of PIDs to check for MBean permissions.

Returns:

iterateDownPids

public static List<String> iterateDownPids(List<String> segments)

see: org.apache.karaf.management.KarafMBeanServerGuard#iterateDownPids(java.util.List) Given a list of segments, return a list of PIDs that are searched in this order. For example, given the following segments: org.foo, bar, test the following list of PIDs will be generated (in this order): jmx.acl.org.foo.bar.test jmx.acl.org.foo.bar jmx.acl.org.foo jmx.acl The order is used as a search order, in which the most specific PID is searched first. Assume that none of the segments contain special/wildcard values.

Parameters:

segments - the ObjectName segments.

Returns:

the PIDs corresponding with the ObjectName in the above order.

mayShareRBACInfo

public static boolean mayShareRBACInfo(List<String> realJmxAclPids,
                                       ObjectName o1,
                                       ObjectName o2)

Checks if two ObjectNames may share RBAC info - if the same configadmin PIDs are examined by Karaf

Parameters:

realJmxAclPids -

o1 -

o2 -

Returns: