Package com.floragunn.searchguard.sgconf

Class SgRoles

java.lang.Object

com.floragunn.searchguard.sgconf.SgRoles

All Implemented Interfaces:

org.elasticsearch.common.xcontent.ToXContent, org.elasticsearch.common.xcontent.ToXContentObject

Direct Known Subclasses:

ConfigModelV6.SgRoles, ConfigModelV7.SgRoles

public abstract class SgRoles
extends Object
implements org.elasticsearch.common.xcontent.ToXContentObject

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static interface	SgRoles.TenantPermissions

Nested classes/interfaces inherited from interface org.elasticsearch.common.xcontent.ToXContent

org.elasticsearch.common.xcontent.ToXContent.DelegatingMapParams, org.elasticsearch.common.xcontent.ToXContent.MapParams, org.elasticsearch.common.xcontent.ToXContent.Params

Field Summary

Fields inherited from interface org.elasticsearch.common.xcontent.ToXContent

EMPTY_PARAMS

Constructor Summary

Constructors

Constructor	Description
SgRoles()

Method Summary

Modifier and Type	Method	Description
abstract SgRoles	filter(Set<String> roles)
abstract boolean	get(IndexResolverReplacer.Resolved requestedResolved, User user, String[] allIndexPermsRequiredA, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)
abstract Set<String>	getAllPermittedIndicesForKibana(IndexResolverReplacer.Resolved resolved, User user, String[] actions, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService cs)
abstract Set<String>	getClusterPermissions(User user)
abstract EvaluatedDlsFlsConfig	getDlsFls(User user, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService, org.elasticsearch.common.xcontent.NamedXContentRegistry namedXContentRegistry)
abstract Set<String>	getRoleNames()
abstract SgRoles.TenantPermissions	getTenantPermissions(User user, String requestedTenant)
abstract boolean	hasTenantPermission(User user, String requestedTenant, String action)
abstract boolean	impliesClusterPermissionPermission(String action0)
abstract boolean	impliesTypePermGlobal(IndexResolverReplacer.Resolved requestedResolved, User user, String[] allIndexPermsRequiredA, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)
abstract boolean	isIndexPrivilegeAliasResolutionEnabled()
abstract Map<String,Boolean>	mapTenants(User user, Set<String> allTenantNames)	Only used for authinfo REST API
abstract Set<String>	reduce(IndexResolverReplacer.Resolved requestedResolved, User user, String[] strings, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.elasticsearch.common.xcontent.ToXContent

toXContent

Methods inherited from interface org.elasticsearch.common.xcontent.ToXContentObject

isFragment

Constructor Detail

SgRoles

public SgRoles()

Method Detail

impliesClusterPermissionPermission

public abstract boolean impliesClusterPermissionPermission(String action0)

getRoleNames

public abstract Set<String> getRoleNames()

reduce

public abstract Set<String> reduce(IndexResolverReplacer.Resolved requestedResolved,
                                   User user,
                                   String[] strings,
                                   org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                   org.elasticsearch.cluster.service.ClusterService clusterService)

impliesTypePermGlobal

public abstract boolean impliesTypePermGlobal(IndexResolverReplacer.Resolved requestedResolved,
                                              User user,
                                              String[] allIndexPermsRequiredA,
                                              org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                              org.elasticsearch.cluster.service.ClusterService clusterService)

get

public abstract boolean get(IndexResolverReplacer.Resolved requestedResolved,
                            User user,
                            String[] allIndexPermsRequiredA,
                            org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                            org.elasticsearch.cluster.service.ClusterService clusterService)

getDlsFls

public abstract EvaluatedDlsFlsConfig getDlsFls(User user,
                                                org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                                org.elasticsearch.cluster.service.ClusterService clusterService,
                                                org.elasticsearch.common.xcontent.NamedXContentRegistry namedXContentRegistry)

getAllPermittedIndicesForKibana

public abstract Set<String> getAllPermittedIndicesForKibana(IndexResolverReplacer.Resolved resolved,
                                                            User user,
                                                            String[] actions,
                                                            org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                                            org.elasticsearch.cluster.service.ClusterService cs)

filter

public abstract SgRoles filter(Set<String> roles)

getTenantPermissions

public abstract SgRoles.TenantPermissions getTenantPermissions(User user,
                                                               String requestedTenant)

getClusterPermissions

public abstract Set<String> getClusterPermissions(User user)

hasTenantPermission

public abstract boolean hasTenantPermission(User user,
                                            String requestedTenant,
                                            String action)

mapTenants

public abstract Map<String,Boolean> mapTenants(User user,
                                                     Set<String> allTenantNames)

Only used for authinfo REST API

isIndexPrivilegeAliasResolutionEnabled

public abstract boolean isIndexPrivilegeAliasResolutionEnabled()