Package com.floragunn.searchguard.privileges

Class PrivilegesEvaluator

java.lang.Object

com.floragunn.searchguard.privileges.PrivilegesEvaluator

All Implemented Interfaces:

DynamicConfigFactory.DCFListener

public class PrivilegesEvaluator
extends Object
implements DynamicConfigFactory.DCFListener

Field Summary

Fields

Modifier and Type	Field	Description
protected org.apache.logging.log4j.Logger	actionTrace
protected org.apache.logging.log4j.Logger	log

Constructor Summary

Constructors

Constructor

Description

PrivilegesEvaluator(org.elasticsearch.client.Client localClient, org.elasticsearch.cluster.service.ClusterService clusterService, org.elasticsearch.threadpool.ThreadPool threadPool, ConfigurationRepository configurationRepository, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, AuditLog auditLog, org.elasticsearch.common.settings.Settings settings, ClusterInfoHolder clusterInfoHolder, IndexResolverReplacer irr, SpecialPrivilegesEvaluationContextProviderRegistry specialPrivilegesEvaluationContextProviderRegistry, GuiceDependencies guiceDependencies, org.elasticsearch.xcontent.NamedXContentRegistry namedXContentRegistry, boolean enterpriseModulesEnabled)

Method Summary

Modifier and Type	Method	Description
PrivilegesEvaluatorResponse	evaluate(User user, String action0, org.elasticsearch.action.ActionRequest request, org.elasticsearch.tasks.Task task, SpecialPrivilegesEvaluationContext specialPrivilegesEvaluationContext)
Map<String,Boolean>	evaluateClusterAndTenantPrivileges(User user, org.elasticsearch.common.transport.TransportAddress caller, Collection<String> privilegesAskedFor)
Set<String>	getAllConfiguredTenantNames()
boolean	hasClusterPermission(User user, String action)
static boolean	isClusterPerm(String action0)
static boolean	isIndexPerm(String action)
boolean	isInitialized()
boolean	isKibanaRbacEnabled()
static boolean	isTenantPerm(String action0)
String	kibanaIndex()
String	kibanaServerUsername()
Set<String>	mapSgRoles(User user, org.elasticsearch.common.transport.TransportAddress caller)
Map<String,Boolean>	mapTenants(User user, Set<String> roles)	Only used for authinfo REST API
boolean	multitenancyEnabled()
boolean	notFailOnForbiddenEnabled()
void	onChanged(ConfigModel cm, DynamicConfigModel dcm, InternalUsersModel ium)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected final org.apache.logging.log4j.Logger log

actionTrace

protected final org.apache.logging.log4j.Logger actionTrace

Constructor Detail

PrivilegesEvaluator

public PrivilegesEvaluator(org.elasticsearch.client.Client localClient,
                           org.elasticsearch.cluster.service.ClusterService clusterService,
                           org.elasticsearch.threadpool.ThreadPool threadPool,
                           ConfigurationRepository configurationRepository,
                           org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                           AuditLog auditLog,
                           org.elasticsearch.common.settings.Settings settings,
                           ClusterInfoHolder clusterInfoHolder,
                           IndexResolverReplacer irr,
                           SpecialPrivilegesEvaluationContextProviderRegistry specialPrivilegesEvaluationContextProviderRegistry,
                           GuiceDependencies guiceDependencies,
                           org.elasticsearch.xcontent.NamedXContentRegistry namedXContentRegistry,
                           boolean enterpriseModulesEnabled)

Method Detail

onChanged

public void onChanged(ConfigModel cm,
                      DynamicConfigModel dcm,
                      InternalUsersModel ium)

Specified by:

onChanged in interface DynamicConfigFactory.DCFListener

isInitialized

public boolean isInitialized()

evaluate

public PrivilegesEvaluatorResponse evaluate(User user,
                                            String action0,
                                            org.elasticsearch.action.ActionRequest request,
                                            org.elasticsearch.tasks.Task task,
                                            SpecialPrivilegesEvaluationContext specialPrivilegesEvaluationContext)

mapSgRoles

public Set<String> mapSgRoles(User user,
                              org.elasticsearch.common.transport.TransportAddress caller)

getAllConfiguredTenantNames

public Set<String> getAllConfiguredTenantNames()

multitenancyEnabled

public boolean multitenancyEnabled()

notFailOnForbiddenEnabled

public boolean notFailOnForbiddenEnabled()

kibanaIndex

public String kibanaIndex()

kibanaServerUsername

public String kibanaServerUsername()

isClusterPerm

public static boolean isClusterPerm(String action0)

isTenantPerm

public static boolean isTenantPerm(String action0)

isIndexPerm

public static boolean isIndexPerm(String action)

mapTenants

public Map<String,Boolean> mapTenants(User user,
                                            Set<String> roles)

Only used for authinfo REST API

evaluateClusterAndTenantPrivileges

public Map<String,Boolean> evaluateClusterAndTenantPrivileges(User user,
                                                                    org.elasticsearch.common.transport.TransportAddress caller,
                                                                    Collection<String> privilegesAskedFor)

hasClusterPermission

public boolean hasClusterPermission(User user,
                                    String action)

isKibanaRbacEnabled

public boolean isKibanaRbacEnabled()