Uploaded image for project: 'Accumulo'
  1. Accumulo
  2. ACCUMULO-1681

Adjust Authorizor Interface to validate auths instead of retrieving a list

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.6.0
    • tserver
    • None

    Description

      Currently the Authorizor interface is used to request a set of authorizations which then get checked against the authorizations a user is attempting to use. However, some security systems only support the ability to validate authorizations/permissions/roles and not provide a list. That makes these systems (entirely) incompatible with Accumulo when they don't have to be.

      We should switch the behavior of Accumulo to ask the Authorizor (via SecurityOperations) if the auths are valid. The existing getAuths functionality will still use that call and would have potentially limited support, similar to the potentially limited support of any of the set operations.

      Attachments

        1. ACCUMULO-1681.patch
          7 kB
          John Vines
        2. ACCUMULO-1681.v2.patch
          16 kB
          John Vines

        Activity

          People

            vines John Vines
            vines John Vines
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: