Package com.floragunn.searchguard.privileges

Class PrivilegesEvaluator

java.lang.Object

com.floragunn.searchguard.privileges.PrivilegesEvaluator

All Implemented Interfaces:

DynamicConfigFactory.DCFListener

public class PrivilegesEvaluator
extends Object
implements DynamicConfigFactory.DCFListener

Field Summary

Fields

Modifier and Type	Field	Description
protected org.apache.logging.log4j.Logger	actionTrace
protected org.apache.logging.log4j.Logger	log

Constructor Summary

Constructors

Constructor

Description

PrivilegesEvaluator(org.elasticsearch.cluster.service.ClusterService clusterService, org.elasticsearch.threadpool.ThreadPool threadPool, ConfigurationRepository configurationRepository, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, AuditLog auditLog, org.elasticsearch.common.settings.Settings settings, PrivilegesInterceptor privilegesInterceptor, ClusterInfoHolder clusterInfoHolder, IndexResolverReplacer irr, boolean enterpriseModulesEnabled)

Method Summary

Modifier and Type	Method	Description
PrivilegesEvaluatorResponse	evaluate(User user, String action0, org.elasticsearch.action.ActionRequest request, org.elasticsearch.tasks.Task task, ActionConfig actionConfig, InternalAuthTokenProvider.AuthFromInternalAuthToken authFromInternalAuthToken)
Map<String,Boolean>	evaluateKibanaApplicationPrivileges(User user, org.elasticsearch.common.transport.TransportAddress caller, Collection<String> privileges)
Set<String>	getAllConfiguredTenantNames()
boolean	hasTenantPermission(User user, Set<String> mappedRoles, String action)
boolean	isInitialized()
boolean	isKibanaRbacEnabled()
String	kibanaIndex()
String	kibanaServerUsername()
Set<String>	mapSgRoles(User user, org.elasticsearch.common.transport.TransportAddress caller)
Map<String,Boolean>	mapTenants(User user, Set<String> roles)
boolean	multitenancyEnabled()
boolean	notFailOnForbiddenEnabled()
void	onChanged(ConfigModel cm, DynamicConfigModel dcm, InternalUsersModel ium)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected final org.apache.logging.log4j.Logger log

actionTrace

protected final org.apache.logging.log4j.Logger actionTrace

Constructor Detail

PrivilegesEvaluator

public PrivilegesEvaluator(org.elasticsearch.cluster.service.ClusterService clusterService,
                           org.elasticsearch.threadpool.ThreadPool threadPool,
                           ConfigurationRepository configurationRepository,
                           org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                           AuditLog auditLog,
                           org.elasticsearch.common.settings.Settings settings,
                           PrivilegesInterceptor privilegesInterceptor,
                           ClusterInfoHolder clusterInfoHolder,
                           IndexResolverReplacer irr,
                           boolean enterpriseModulesEnabled)

Method Detail

onChanged

public void onChanged(ConfigModel cm,
                      DynamicConfigModel dcm,
                      InternalUsersModel ium)

Specified by:

onChanged in interface DynamicConfigFactory.DCFListener

isInitialized

public boolean isInitialized()

evaluate

public PrivilegesEvaluatorResponse evaluate(User user,
                                            String action0,
                                            org.elasticsearch.action.ActionRequest request,
                                            org.elasticsearch.tasks.Task task,
                                            ActionConfig actionConfig,
                                            InternalAuthTokenProvider.AuthFromInternalAuthToken authFromInternalAuthToken)

mapSgRoles

public Set<String> mapSgRoles(User user,
                              org.elasticsearch.common.transport.TransportAddress caller)

mapTenants

public Map<String,Boolean> mapTenants(User user,
                                            Set<String> roles)

getAllConfiguredTenantNames

public Set<String> getAllConfiguredTenantNames()

multitenancyEnabled

public boolean multitenancyEnabled()

notFailOnForbiddenEnabled

public boolean notFailOnForbiddenEnabled()

kibanaIndex

public String kibanaIndex()

kibanaServerUsername

public String kibanaServerUsername()

evaluateKibanaApplicationPrivileges

public Map<String,Boolean> evaluateKibanaApplicationPrivileges(User user,
                                                                     org.elasticsearch.common.transport.TransportAddress caller,
                                                                     Collection<String> privileges)

hasTenantPermission

public boolean hasTenantPermission(User user,
                                   Set<String> mappedRoles,
                                   String action)

isKibanaRbacEnabled

public boolean isKibanaRbacEnabled()