Package com.floragunn.searchguard.authtoken

Class RestrictedSgRoles

java.lang.Object

com.floragunn.searchguard.sgconf.SgRoles

com.floragunn.searchguard.authtoken.RestrictedSgRoles

All Implemented Interfaces:

org.elasticsearch.common.xcontent.ToXContent, org.elasticsearch.common.xcontent.ToXContentObject

public class RestrictedSgRoles
extends com.floragunn.searchguard.sgconf.SgRoles

Nested Class Summary

Nested classes/interfaces inherited from class com.floragunn.searchguard.sgconf.SgRoles

com.floragunn.searchguard.sgconf.SgRoles.TenantPermissions

Nested classes/interfaces inherited from interface org.elasticsearch.common.xcontent.ToXContent

org.elasticsearch.common.xcontent.ToXContent.DelegatingMapParams, org.elasticsearch.common.xcontent.ToXContent.MapParams, org.elasticsearch.common.xcontent.ToXContent.Params

Field Summary

Fields inherited from interface org.elasticsearch.common.xcontent.ToXContent

EMPTY_PARAMS

Method Summary

Modifier and Type	Method	Description
com.floragunn.searchguard.sgconf.SgRoles	filter(Set<String> roles)
boolean	get(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved requestedResolved, com.floragunn.searchguard.user.User user, String[] allIndexPermsRequiredA, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)
Set<String>	getAllPermittedIndicesForKibana(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved resolved, com.floragunn.searchguard.user.User user, String[] actions, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService cs)
Set<String>	getClusterPermissions(com.floragunn.searchguard.user.User user)
com.floragunn.searchguard.sgconf.EvaluatedDlsFlsConfig	getDlsFls(com.floragunn.searchguard.user.User user, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService, org.elasticsearch.common.xcontent.NamedXContentRegistry namedXContentRegistry)
Set<String>	getRoleNames()
com.floragunn.searchguard.sgconf.SgRoles.TenantPermissions	getTenantPermissions(com.floragunn.searchguard.user.User user, String requestedTenant)
boolean	hasTenantPermission(com.floragunn.searchguard.user.User user, String requestedTenant, String action)
boolean	impliesClusterPermissionPermission(String action0)
boolean	impliesTypePermGlobal(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved requestedResolved, com.floragunn.searchguard.user.User user, String[] allIndexPermsRequiredA, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)
boolean	isIndexPrivilegeAliasResolutionEnabled()
Map<String,Boolean>	mapTenants(com.floragunn.searchguard.user.User user, Set<String> tenantNames)
Set<String>	reduce(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved requestedResolved, com.floragunn.searchguard.user.User user, String[] strings, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)
org.elasticsearch.common.xcontent.XContentBuilder	toXContent(org.elasticsearch.common.xcontent.XContentBuilder builder, org.elasticsearch.common.xcontent.ToXContent.Params params)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.elasticsearch.common.xcontent.ToXContentObject

isFragment

Method Detail

impliesClusterPermissionPermission

public boolean impliesClusterPermissionPermission(String action0)

Specified by:

impliesClusterPermissionPermission in class com.floragunn.searchguard.sgconf.SgRoles

getRoleNames

public Set<String> getRoleNames()

Specified by:

getRoleNames in class com.floragunn.searchguard.sgconf.SgRoles

reduce

public Set<String> reduce(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved requestedResolved,
                          com.floragunn.searchguard.user.User user,
                          String[] strings,
                          org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                          org.elasticsearch.cluster.service.ClusterService clusterService)

Specified by:

reduce in class com.floragunn.searchguard.sgconf.SgRoles

impliesTypePermGlobal

public boolean impliesTypePermGlobal(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved requestedResolved,
                                     com.floragunn.searchguard.user.User user,
                                     String[] allIndexPermsRequiredA,
                                     org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                     org.elasticsearch.cluster.service.ClusterService clusterService)

Specified by:

impliesTypePermGlobal in class com.floragunn.searchguard.sgconf.SgRoles

getClusterPermissions

public Set<String> getClusterPermissions(com.floragunn.searchguard.user.User user)

Specified by:

getClusterPermissions in class com.floragunn.searchguard.sgconf.SgRoles

get

public boolean get(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved requestedResolved,
                   com.floragunn.searchguard.user.User user,
                   String[] allIndexPermsRequiredA,
                   org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                   org.elasticsearch.cluster.service.ClusterService clusterService)

Specified by:

get in class com.floragunn.searchguard.sgconf.SgRoles

getDlsFls

public com.floragunn.searchguard.sgconf.EvaluatedDlsFlsConfig getDlsFls(com.floragunn.searchguard.user.User user,
                                                                        org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                                                        org.elasticsearch.cluster.service.ClusterService clusterService,
                                                                        org.elasticsearch.common.xcontent.NamedXContentRegistry namedXContentRegistry)

Specified by:

getDlsFls in class com.floragunn.searchguard.sgconf.SgRoles

getAllPermittedIndicesForKibana

public Set<String> getAllPermittedIndicesForKibana(com.floragunn.searchguard.resolver.IndexResolverReplacer.Resolved resolved,
                                                   com.floragunn.searchguard.user.User user,
                                                   String[] actions,
                                                   org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                                                   org.elasticsearch.cluster.service.ClusterService cs)

Specified by:

getAllPermittedIndicesForKibana in class com.floragunn.searchguard.sgconf.SgRoles

filter

public com.floragunn.searchguard.sgconf.SgRoles filter(Set<String> roles)

Specified by:

filter in class com.floragunn.searchguard.sgconf.SgRoles

toXContent

public org.elasticsearch.common.xcontent.XContentBuilder toXContent(org.elasticsearch.common.xcontent.XContentBuilder builder,
                                                                    org.elasticsearch.common.xcontent.ToXContent.Params params)
                                                             throws IOException

Throws:

IOException

getTenantPermissions

public com.floragunn.searchguard.sgconf.SgRoles.TenantPermissions getTenantPermissions(com.floragunn.searchguard.user.User user,
                                                                                       String requestedTenant)

Specified by:

getTenantPermissions in class com.floragunn.searchguard.sgconf.SgRoles

hasTenantPermission

public boolean hasTenantPermission(com.floragunn.searchguard.user.User user,
                                   String requestedTenant,
                                   String action)

Specified by:

hasTenantPermission in class com.floragunn.searchguard.sgconf.SgRoles

mapTenants

public Map<String,Boolean> mapTenants(com.floragunn.searchguard.user.User user,
                                            Set<String> tenantNames)

Specified by:

mapTenants in class com.floragunn.searchguard.sgconf.SgRoles

isIndexPrivilegeAliasResolutionEnabled

public boolean isIndexPrivilegeAliasResolutionEnabled()

Specified by:

isIndexPrivilegeAliasResolutionEnabled in class com.floragunn.searchguard.sgconf.SgRoles