Package org.apache.pinot.broker.api

Interface AccessControl

  • @Public
@Stable
public interface AccessControl

    • Method Summary

      Modifier and Type Method Description
      default boolean hasAccess​(RequesterIdentity requesterIdentity)
      First-step access control when processing broker requests.
      boolean hasAccess​(RequesterIdentity requesterIdentity, org.apache.pinot.common.request.BrokerRequest brokerRequest)
      Fine-grained access control on parsed broker request.

    • Method Detail

      • hasAccess

        default boolean hasAccess​(RequesterIdentity requesterIdentity)
        First-step access control when processing broker requests. Decides whether request is allowed to acquire resources for further processing. Request may still be rejected at table-level later on.
        Parameters:
        requesterIdentity - requester identity
        Returns:
        true if authorized, false otherwise

      • hasAccess

        boolean hasAccess​(RequesterIdentity requesterIdentity,
                  org.apache.pinot.common.request.BrokerRequest brokerRequest)
        Fine-grained access control on parsed broker request. May check table, column, permissions, etc.
        Parameters:
        requesterIdentity - requester identity
        brokerRequest - broker request (incl query)
        Returns:
        true if authorized, false otherwise