Package org.apache.solr.security

Class MultiAuthRuleBasedAuthorizationPlugin

java.lang.Object

org.apache.solr.security.RuleBasedAuthorizationPluginBase

org.apache.solr.security.MultiAuthRuleBasedAuthorizationPlugin

All Implemented Interfaces:

Closeable, AutoCloseable, SpecProvider, AuthorizationPlugin, ConfigEditablePlugin

public class MultiAuthRuleBasedAuthorizationPlugin
extends RuleBasedAuthorizationPluginBase

Authorization plugin designed to work with the MultiAuthPlugin to support different AuthorizationPlugin per scheme.

WARNING: This API is experimental and might change in incompatible ways in the next release.

Constructor Summary

Constructors

Constructor	Description
MultiAuthRuleBasedAuthorizationPlugin(CoreContainer cc)

Method Summary

Modifier and Type	Method	Description
Map<String,Object>	edit(Map<String,Object> latestConf, List<CommandOperation> commands)	Operate the commands on the latest conf and return a new conf object If there are errors in the commands , throw a SolrException.
Set<String>	getUserRoles(Principal principal)	Pulls roles from the Principal
void	init(Map<String,Object> initInfo)
protected void	initPluginForScheme(Map<String,Object> schemeMap)

Methods inherited from class org.apache.solr.security.RuleBasedAuthorizationPluginBase

authorize, close, doesUserHavePermission, getSpec, getUserRoles

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MultiAuthRuleBasedAuthorizationPlugin

public MultiAuthRuleBasedAuthorizationPlugin(CoreContainer cc)

Method Detail

init

public void init(Map<String,Object> initInfo)

Specified by:

init in interface AuthorizationPlugin

Overrides:

init in class RuleBasedAuthorizationPluginBase

initPluginForScheme

protected void initPluginForScheme(Map<String,Object> schemeMap)

getUserRoles

public Set<String> getUserRoles(Principal principal)

Pulls roles from the Principal

Specified by:

getUserRoles in class RuleBasedAuthorizationPluginBase

Parameters:

principal - the user Principal which should contain roles

Returns:

set of roles as strings

edit

public Map<String,Object> edit(Map<String,Object> latestConf,
                                     List<CommandOperation> commands)

Description copied from interface: ConfigEditablePlugin

Operate the commands on the latest conf and return a new conf object If there are errors in the commands , throw a SolrException. return a null if no changes are to be made as a result of this edit. It is the responsibility of the implementation to ensure that the returned config is valid . The framework does no validation of the data

Specified by:

edit in interface ConfigEditablePlugin

Overrides:

edit in class RuleBasedAuthorizationPluginBase