org.apache.hadoop.hbase.security.access

Class ZKPermissionWatcher

java.lang.Object

org.apache.hadoop.hbase.zookeeper.ZKListener

org.apache.hadoop.hbase.security.access.ZKPermissionWatcher

All Implemented Interfaces:

Closeable, AutoCloseable

@InterfaceAudience.Private
public class ZKPermissionWatcher
extends ZKListener
implements Closeable

Handles synchronization of access control list entries and updates throughout all nodes in the cluster. The AccessController instance on the _acl_ table regions, creates a znode for each table as /hbase/acl/tablename, with the znode data containing a serialized list of the permissions granted for the table. The AccessController instances on all other cluster hosts watch the znodes for updates, which trigger updates in the TableAuthManager permission cache.

Field Summary

Fields inherited from class org.apache.hadoop.hbase.zookeeper.ZKListener

watcher

Constructor Summary

Constructors

Constructor and Description
ZKPermissionWatcher(ZKWatcher watcher, TableAuthManager authManager, org.apache.hadoop.conf.Configuration conf)

Method Summary

Modifier and Type	Method and Description
void	close()
void	deleteNamespaceACLNode(String namespace) Delete the acl notify node of namespace
void	deleteTableACLNode(TableName tableName) Delete the acl notify node of table
void	nodeChildrenChanged(String path) Called when an existing node has a child node added or removed.
void	nodeCreated(String path) Called when a new node has been created.
void	nodeDataChanged(String path) Called when an existing node has changed data.
void	nodeDeleted(String path) Called when a node has been deleted
void	start()
void	writeToZookeeper(byte[] entry, byte[] permsData) Write a table's access controls to the permissions mirror in zookeeper

Methods inherited from class org.apache.hadoop.hbase.zookeeper.ZKListener

getWatcher

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ZKPermissionWatcher

public ZKPermissionWatcher(ZKWatcher watcher,
                           TableAuthManager authManager,
                           org.apache.hadoop.conf.Configuration conf)

Method Detail

start

public void start()
           throws org.apache.zookeeper.KeeperException

Throws:

org.apache.zookeeper.KeeperException

close

public void close()

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

nodeCreated

public void nodeCreated(String path)

Description copied from class: ZKListener

Called when a new node has been created.

Overrides:

nodeCreated in class ZKListener

Parameters:

path - full path of the new node

nodeDeleted

public void nodeDeleted(String path)

Description copied from class: ZKListener

Called when a node has been deleted

Overrides:

nodeDeleted in class ZKListener

Parameters:

path - full path of the deleted node

nodeDataChanged

public void nodeDataChanged(String path)

Description copied from class: ZKListener

Called when an existing node has changed data.

Overrides:

nodeDataChanged in class ZKListener

Parameters:

path - full path of the updated node

nodeChildrenChanged

public void nodeChildrenChanged(String path)

Description copied from class: ZKListener

Called when an existing node has a child node added or removed.

Overrides:

nodeChildrenChanged in class ZKListener

Parameters:

path - full path of the node whose children have changed

writeToZookeeper

public void writeToZookeeper(byte[] entry,
                             byte[] permsData)

Write a table's access controls to the permissions mirror in zookeeper

Parameters:

entry -

permsData -

deleteTableACLNode

public void deleteTableACLNode(TableName tableName)

Delete the acl notify node of table

Parameters:

tableName -

deleteNamespaceACLNode

public void deleteNamespaceACLNode(String namespace)

Delete the acl notify node of namespace