Example usage for org.apache.hadoop.security.authorize ServiceAuthorizationManager authorize

Introduction

In this page you can find the example usage for org.apache.hadoop.security.authorize ServiceAuthorizationManager authorize.

Prototype

public void authorize(UserGroupInformation user, Class<?> protocol, Configuration conf, InetAddress addr)
        throws AuthorizationException 

Source Link

Document

Authorize the user to access the protocol being used.

Usage

From source file:org.apache.hama.ipc.Server.java

License:Apache License

/**
 * Authorize the incoming client connection.
 * /*from  www .j a  va  2s .  c  o  m*/
 * @param user client user
 * @param connection incoming connection
 * @param addr InetAddress of incoming connection
 * @throws AuthorizationException when the client isn't authorized to talk the
 *           protocol
 */
@SuppressWarnings("static-access")
public void authorize(UserGroupInformation user, ConnectionHeader connection, InetAddress addr)
        throws AuthorizationException {
    if (authorize) {
        Class<?> protocol = null;
        try {
            protocol = getProtocolClass(connection.getProtocol(), getConf());
        } catch (ClassNotFoundException cfne) {
            throw new AuthorizationException("Unknown protocol: " + connection.getProtocol());
        }
        ServiceAuthorizationManager authManager = new ServiceAuthorizationManager();
        authManager.authorize(user, protocol, getConf(), addr);
    }
}

---

From source file:probos.TestStaticMethods.java

License:Open Source License

@Test
public void testPolicy() throws Exception {
    Configuration c = new Configuration();
    ServiceAuthorizationManager sam = new ServiceAuthorizationManager();
    System.setProperty("hadoop.policy.file", "probos-policy.xml");
    sam.refreshWithLoadedConfiguration(c, new ControllerPolicyProvider());
    AccessControlList acl = sam.getProtocolsAcls(PBSClient.class);
    assertNotNull(acl);//from ww  w .j  av a2 s  .  co  m
    assertEquals("*", acl.getAclString());
    assertTrue(acl
            .isUserAllowed(UserGroupInformation.createUserForTesting("testUser", new String[] { "mygroup" })));
    sam.authorize(UserGroupInformation.getCurrentUser(), PBSClient.class, c, InetAddress.getLocalHost());
}

---