Package com.illumon.iris.db.v2.permissions
package com.illumon.iris.db.v2.permissions
-
ClassDescriptionPerforms automatic updating of the ACL database server.A tool for exporting all, or parts, of the ACL database to a file that can be re-imported using
AclImporterCollector of both row and column ACL filter generators.This purely static class centralizes the logic around table row/column ACL application.AclHelper.FilterFactory<FILTER,ACL_DEF> A utility class for importing ACLS from an XML file generated byAclExporterThe mode for importingClass to migrate ACLs from MySQL/mariadb to Etcd.Porter as in Importer/Exporter.Raised when the underlying ACL store is invalid, inconsistent, reports an error, or throws an Exception.ContextAwareRemoteQuery responsible for getting all the users, groups, strategies, and system-user mappingsA version of a group provider that delegates calls to an inner grouping provider; and saves the results.A complete definition of a users Column ACLs, by group, and column.Interface for objects that collect column-level ACL filters and filter generators for various ACL groups.A Filter generator that provides a means to apply separateFilterGeneratorsets based on a users groups.The type of combination that will be applied to the entire set of group/filter listsClasses that implement this interface must be guaranteed to implement the DnDAclFilterGeneratorclass.FilterGeneratorfor combining the results of multipleFilterGenerators conjunctively, i.e.Generates a CopyFilter, which will emulate the filters present on some other table.interface that defines the various get methods that an Acl Provider should supportClass to centralize selection of DbAclProvider implementationsThe AclClient used for Acl Editor in SwingUI and forIrisDbUserModThis interface is used to manage Iris users, groups, account mappings, ACLs and input table editors.Simple server that takes commands from an ACL editor and turns them into SQL updates.FilterGeneratorfor combining the results of multipleFilterGenerators disjunctively, i.e.Lets you make a table visible to everyone.Provides an empty filter for all users, so that a table is always visible.Fixes etcd ACLs that break after upgrading to partial URL encodings in 1.20231218.116 and/or 1.20231218.132, such as e.g.Implementation class ofDbAclGuiHelperthat uses etcd as Acl storeAccess to the Etcd ACL database.Filter Generators define ACLs.The FilterGeneratorFactory gets the filter code from the ACL table (or an addFilter function in a persistent query), and turns the text representation of the filter into a FilterGenerator using the CompilerTools.ATableFilterProviderthat generates ACLs based on a set ofFilterGenerators attached to specific groups.An in-memory PermissionFilterProvider that allows calling classes to set the applicable filters directly.Implementation of an IrisGroupProvider that uses a DbAclProviderVery simple implementation of an IrisGroupProvider that users the users files from a class path.Mysql implementation class that implementsDbAclGuiHelpermethod which help in retrieving Acls stored in MySql storeAccess to the MySQL ACL database.NullFilterGenerator() provides no access to a table, it only useful to override a less-specific ACL for a group.Serializable data object that includes details of the group, acl and associated collection of filters.This interface defines classes which provides group and account information for users, and also provides information about Table, Column, and System level ACLsA super simple dummy implementation of a user context, where you just assert what the user is, and then there are some hardcoded rules for testing.A super simple dummy implementation of a user context, where you just assert what the user is, and then there are some hardcoded rules for testing.Although we are a refreshing filter, we do not need to implement dependency; because we are only ever refreshed at the root of the tree (as a live table) without interaction from other tables.Filter rows that belong to this worker, using the QueryPerformanceLog as the bridge from WorkerName to RequestId.AContextAwareRemoteQuerythat retrieves a single ACL.Interface for objects that collect row-level ACL filters and filter generators for various ACL groups.Deprecated.This should no longer be used.AFilterGeneratorimplementation that applies a set of SelectFilter groups using Disjunctive Normal Form.AFilterGeneratorthat produces filters on group membership, without refreshing.This interface defines the requirements for a class that provides both Row based, and Column based ACLS.This interface defines a means to createTableFilterProviders, as well as a simple means to make a table accessible to all users, without any specific ACL.Restricted interface for inquiring only about the allusers group.A super simple dummy implementation of a unauthenticated context.A super simple dummy implementation of a unauthenticated context.AnUncheckedPermissionExceptionthat indicates an issue with Acl store requests.The UserArrayFilterGenerator is suitable for use when you have a column in your table that contains an array of user names, and you would like to show only rows where the username is contained within that array.The UserCollectionFilterGenerator is suitable for use when you have a column in your table that contains a Collection of user names, and you would like to show only rows where the username is contained within that set.The UserGroupArrayFilterGenerator is suitable for use when you have a column in your table that contains an array of user names or groups, and you would like to show only rows where the username or user groups is contained within that array.Helper query that returns an array of users mapped to group, if no mapping exists an empty array will be returned.The UserStringFilterGenerator is suitable for use when you have a column in your table that contains a String of user names, and you would like to show only rows where the username is contained within that String.A filter generator that specifies a set table, and a list of match expressions (FilteredColumn=SetColumn), to apply a whereIn operation to the filtered table.Filter tables to just your own workerName.