io.druid.server.security

Interface AuthorizationInfo

public interface AuthorizationInfo

This interface should be used to store as well as process Authorization Information An extension can be used to inject servlet filter which will create objects of this type and set it as a request attribute with attribute name as AuthConfig.DRUID_AUTH_TOKEN. In the jersey resources if the authorization is enabled depending on AuthConfig.enabled the isAuthorized(Resource, Action) method will be used to perform authorization checks

Method Summary

Modifier and Type	Method and Description
Access	isAuthorized(Resource resource, Action action) Perform authorization checks for the given Resource and Action.

Method Detail

isAuthorized

Access isAuthorized(Resource resource,
                    Action action)

Perform authorization checks for the given Resource and Action. resource and action objects should be instantiated depending on the specific endPoint where the check is being performed. Modeling Principal and specific way of performing authorization checks is entirely implementation dependent.

Parameters:

resource - information about resource that is being accessed

action - action to be performed on the resource

Returns:

a Access object having Access.allowed set to true if authorized otherwise set to false and optionally Access.message set to appropriate message