Package com.illumon.iris.db.v2.permissions

Class MysqlDbAclGuiHelper

java.lang.Object

com.illumon.iris.db.v2.permissions.MysqlDbAclProvider

com.illumon.iris.db.v2.permissions.MysqlDbAclGuiHelper

All Implemented Interfaces:

com.illumon.iris.auth.AuthModule, DbAclGuiHelper, DbAclProvider, DbAclWriter, Closeable, AutoCloseable

public class MysqlDbAclGuiHelper
extends MysqlDbAclProvider
implements DbAclGuiHelper

Nested Class Summary

Nested classes/interfaces inherited from class com.illumon.iris.db.v2.permissions.MysqlDbAclProvider

MysqlDbAclProvider.NamedPreparedStatement, MysqlDbAclProvider.SQLFunction<R>, MysqlDbAclProvider.SQLProcedure

Field Summary

Fields inherited from class com.illumon.iris.db.v2.permissions.MysqlDbAclProvider

mysqlConnection, PASSWORD_ENV

Method Summary

Modifier and Type	Method	Description
Table	getColumnAclTable()	Retrieves a Table of all column ACLs, sorted by Groupname, Namespace, Tablename, Columns, and Filter
Table	getExternalAuthOnlyUsers(String[] invalidHashes)	Retrieves a Table with one column, listing users whose passwords indicate external authentication.
Table	getGroupStrategyTable()	Retrieves a Table of all groups and associated strategies, sorted by Groupname and Strategy
Table	getPublicKeyTable(String user)	Retrieves a Table of users, base64-encoded public keys, and the comment associated with the key when added.
Table	getStrategyAccountTable()	Retrieves a Table of all strategies and associated accounts, sorted by Strategy and Account
Table	getSystemUserAclTable()	Retrieves a Table of all users and matching systemuser mappings, sorted by user
Table	getSystemUserAclTable(String userGroup)	Retrieves a Table of users and matching systemuser mappings for members of the specified group, sorted by user
Table	getTableAclTable()	Retrieves a Table of all table ACLs, sorted by Groupname, Namespace, Tablename, and Filter
Table	getTableEditorTable()	Retrieves a Table of all input table editor permissions, sorted by Groupname, Namespace, and Tablename
Table	getUsersAndGroupsTable()	Retrieves a Table of all users and their groups, sorted by User and Groupname
String	retrieveOneAcl(String group, String namespace, String tableName)	Retrieves a single table ACL filter.
String	retrieveOneColumnAcl(String group, String namespace, String tableName, String columns)	Retrieves a single column ACL filter Wildcards are not considered, so only highest priority (specific namespace and tableName) ACLs are returned, and, if there is no specifically assigned ACL, null is returned.
Boolean	retrieveOneEditable(String group, String namespace, String tableName)	Retrieves a single input table editor permission Wildcards are not considered, so only highest priority (specific namespace and tableName) ACLs are returned, and, if there is no specifically assigned ACL, null is returned.

Methods inherited from class com.illumon.iris.db.v2.permissions.MysqlDbAclProvider

addAcl, addColumnAcl, addGroupStrategy, addInputTableEditor, addMembership, addOrUpdateSystemUserAcl, addPublicKeyForUser, addStrategyAccount, addUser, canAnyoneEditInputTable, canEditInputTable, changePassword, close, deleteAcls, deleteAllAclData, deleteColumnAcls, deleteGroup, deleteGroupStrategy, deleteInputTableEditor, deletePublicKeyForUser, deleteStrategyAccount, deleteSystemUserAcl, deleteUser, getAccountsForGroup, getAccountsForStrategy, getAccountsForUser, getAllAccounts, getAllGroups, getAllStrategies, getAllUsers, getEncodedPassword, getFilterDetailsForUser, getGroupsForUser, getPasswdsForMigration, getPublicKeys, getPublicKeys, getRunAsUser, getRunAsUserMap, getStrategiesForGroup, getStrategiesForUser, getStrategyForAccount, getSystemUsers, getUserByPublicKey, getUsersForGroup, groupStrategyExists, isUserPassValid, removeMembership, retrieveColumnAcls, retrieveRowAcls, runFunctionWithSqlRetry, runProcedureWithSqlRetry, updateAcl, updateColumnAcl, updateInputTableEditor, userExists

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.illumon.iris.auth.AuthModule

getNameFromExternal

Methods inherited from interface com.illumon.iris.db.v2.permissions.DbAclProvider

canAnyoneEditInputTable, canEditInputTable, changePassword, close, getAccountsForGroup, getAccountsForStrategy, getAccountsForUser, getAllAccounts, getAllGroups, getAllStrategies, getAllUsers, getFilterDetailsForUser, getGroupsForUser, getPasswdsForMigration, getPublicKeys, getPublicKeys, getRunAsUser, getRunAsUserMap, getStrategiesForGroup, getStrategiesForUser, getStrategyForAccount, getSystemUsers, getUsersForGroup, groupStrategyExists, retrieveColumnAcls, retrieveRowAcls

Method Details

getUsersAndGroupsTable

public Table getUsersAndGroupsTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all users and their groups, sorted by User and Groupname

Specified by:

getUsersAndGroupsTable in interface DbAclGuiHelper

Returns:

A Table all users and their groups

getExternalAuthOnlyUsers

public Table getExternalAuthOnlyUsers(@NotNull
 String[] invalidHashes)

Description copied from interface: DbAclGuiHelper

Retrieves a Table with one column, listing users whose passwords indicate external authentication.

Specified by:

getExternalAuthOnlyUsers in interface DbAclGuiHelper

Parameters:

invalidHashes - A List of password hashes that are valid only for external authentication.

Returns:

A Table of users that are configured for external password authentication

getGroupStrategyTable

public Table getGroupStrategyTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all groups and associated strategies, sorted by Groupname and Strategy

Specified by:

getGroupStrategyTable in interface DbAclGuiHelper

Returns:

A Table of all groups and associated strategies

getStrategyAccountTable

public Table getStrategyAccountTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all strategies and associated accounts, sorted by Strategy and Account

Specified by:

getStrategyAccountTable in interface DbAclGuiHelper

Returns:

A Table of all strategies and associated accounts

getTableAclTable

public Table getTableAclTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all table ACLs, sorted by Groupname, Namespace, Tablename, and Filter

Specified by:

getTableAclTable in interface DbAclGuiHelper

Returns:

A Table of all table ACLs

getColumnAclTable

public Table getColumnAclTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all column ACLs, sorted by Groupname, Namespace, Tablename, Columns, and Filter

Specified by:

getColumnAclTable in interface DbAclGuiHelper

Returns:

A Table of all column ACLs

getSystemUserAclTable

public Table getSystemUserAclTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all users and matching systemuser mappings, sorted by user

Specified by:

getSystemUserAclTable in interface DbAclGuiHelper

Returns:

A Table all users and matching systemuser mappings

getSystemUserAclTable

public Table getSystemUserAclTable(String userGroup)

Description copied from interface: DbAclGuiHelper

Retrieves a Table of users and matching systemuser mappings for members of the specified group, sorted by user

Specified by:

getSystemUserAclTable in interface DbAclGuiHelper

Parameters:

userGroup - The group name for which to filter users and systemuser mappings by membership

Returns:

A Table users and matching systemuser mappings for members of the specified group

getTableEditorTable

public Table getTableEditorTable()

Description copied from interface: DbAclGuiHelper

Retrieves a Table of all input table editor permissions, sorted by Groupname, Namespace, and Tablename

Specified by:

getTableEditorTable in interface DbAclGuiHelper

Returns:

A Table all input table editor permissions

getPublicKeyTable

public Table getPublicKeyTable(String user)

Description copied from interface: DbAclGuiHelper

Retrieves a Table of users, base64-encoded public keys, and the comment associated with the key when added.

Specified by:

getPublicKeyTable in interface DbAclGuiHelper

Parameters:

user - The user for which to filter public keys. If null, all will be retrieved.

Returns:

A Table with 'user', 'keyval', 'comment' columns.

retrieveOneAcl

public String retrieveOneAcl(String group,
 String namespace,
 String tableName)
                      throws SQLException

Description copied from interface: DbAclGuiHelper

Retrieves a single table ACL filter. Wildcards are not considered, so only highest priority (specific namespace and tableName) ACLs are returned, and, if there is no specifically assigned ACL, null is returned.

Specified by:

retrieveOneAcl in interface DbAclGuiHelper

Parameters:

group - The specific groupname to match

namespace - The specific namespace to match

tableName - The specific tablename to match

Returns:

A String table ACL filter or null if no match

Throws:

SQLException - In the case of SQL implementations of this interface if something goes wrong

retrieveOneColumnAcl

public String retrieveOneColumnAcl(String group,
 String namespace,
 String tableName,
 String columns)
                            throws SQLException

Description copied from interface: DbAclGuiHelper

Retrieves a single column ACL filter Wildcards are not considered, so only highest priority (specific namespace and tableName) ACLs are returned, and, if there is no specifically assigned ACL, null is returned.

Specified by:

retrieveOneColumnAcl in interface DbAclGuiHelper

Parameters:

group - The specific groupname to match

namespace - The specific namespace to match

tableName - The specific tablename to match

columns - The specific columns string to match

Returns:

A String column ACL filter or null if no match

Throws:

SQLException - In the case of SQL implementations of this interface if something goes wrong

retrieveOneEditable

public Boolean retrieveOneEditable(String group,
 String namespace,
 String tableName)
                            throws SQLException

Description copied from interface: DbAclGuiHelper

Retrieves a single input table editor permission Wildcards are not considered, so only highest priority (specific namespace and tableName) ACLs are returned, and, if there is no specifically assigned ACL, null is returned.

Specified by:

retrieveOneEditable in interface DbAclGuiHelper

Parameters:

group - The specific groupname to match

namespace - The specific namespace to match

tableName - The specific tablename to match

Returns:

A Boolean input table editor permission, which is null if there is no match

Throws:

SQLException - In the case of SQL implementations of this interface if something goes wrong