|
Apache Mesos
|
#include <authorizer.hpp>
Public Member Functions | |
| virtual | ~LocalAuthorizer () |
| virtual process::Future< bool > | authorized (const authorization::Request &request) |
Checks with the identity server back end whether request is allowed by the policies of the identity server, i.e. More... | |
| virtual process::Future < process::Owned < ObjectApprover > > | getObjectApprover (const Option< authorization::Subject > &subject, const authorization::Action &action) |
Creates an ObjectApprover which can synchronously check authorization on an object. More... | |
Public Member Functions inherited from mesos::Authorizer | |
| virtual | ~Authorizer () |
Static Public Member Functions | |
| static Try< Authorizer * > | create (const ACLs &acls) |
| static Try< Authorizer * > | create (const Parameters ¶meters) |
Static Public Member Functions inherited from mesos::Authorizer | |
| static Try< Authorizer * > | create (const std::string &name) |
Factory method used to create instances of authorizer which are loaded from the ModuleManager. More... | |
| static Try< Authorizer * > | create (const ACLs &acls) |
| Factory method used to create instances of the default 'local' authorizer. More... | |
Additional Inherited Members | |
Protected Member Functions inherited from mesos::Authorizer | |
| Authorizer () | |
|
virtual |
|
virtual |
Checks with the identity server back end whether request is allowed by the policies of the identity server, i.e.
request.subject can perform request.action with request.object. For details on how the request is built and what its parts are, refer to "authorizer.proto".
| request | authorization::Request instance packing all the parameters needed to verify whether a subject can perform a given action with an object. |
true if the action is allowed, the future is set to true, otherwise false. A failed future indicates a problem processing the request, and it might be retried in the future. Implements mesos::Authorizer.
|
static |
|
static |
|
virtual |
Creates an ObjectApprover which can synchronously check authorization on an object.
| subject | authorization::Subject subject for which the ObjectApprover should be created. |
| action | authorization::Action action for which the ObjectApprover should be created. |
ObjectApprover for the given subject and action. Implements mesos::Authorizer.
1.8.5