org.apache.drill.exec.rpc.user

Class InboundImpersonationManager

java.lang.Object

org.apache.drill.exec.rpc.user.InboundImpersonationManager

public class InboundImpersonationManager
extends Object

Helper class to manage inbound impersonation.

Impersonation policies format: [ { proxy_principals : { users : ["..."], groups : ["..."] }, target_principals : { users : ["..."], groups : ["..."] } }, { proxy_principals : { users : ["..."], groups : ["..."] }, target_principals : { users : ["..."], groups : ["..."] } }, ... ]

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	InboundImpersonationManager.InboundImpersonationPolicyValidator Validator for impersonation policies.

Constructor Summary

Constructors

Constructor and Description
InboundImpersonationManager()

Method Summary

Modifier and Type	Method and Description
static boolean	hasImpersonationPrivileges(String proxyName, String targetName, String policiesString)
void	replaceUserOnSession(String targetName, UserSession session) Check if the current session user, as a proxy user, is authorized to impersonate the given target user based on the system's impersonation policies.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

InboundImpersonationManager

public InboundImpersonationManager()

Method Detail

hasImpersonationPrivileges

public static boolean hasImpersonationPrivileges(String proxyName,
                                                 String targetName,
                                                 String policiesString)
                                          throws IOException

Throws:

IOException

replaceUserOnSession

public void replaceUserOnSession(String targetName,
                                 UserSession session)

Check if the current session user, as a proxy user, is authorized to impersonate the given target user based on the system's impersonation policies.

Parameters:

targetName - target user name

session - user session