Examples with Group org.apache.nifi.registry.security.authorization.Group used on opensource projects

Example 11 with Group

use of org.apache.nifi.registry.security.authorization.Group in project nifi-registry by apache.

the class UserGroupHolder method createGroupsByUserIdentityMap.

/**
 * Creates a Map from user identity to the set of Groups for that identity.
 *
 * @param groups all groups
 * @param users all users
 * @return a Map from User identity to the set of Groups for that identity
 */
private Map<String, Set<Group>> createGroupsByUserIdentityMap(final Set<Group> groups, final Set<User> users) {
    Map<String, Set<Group>> groupsByUserIdentity = new HashMap<>();
    for (User user : users) {
        Set<Group> userGroups = new HashSet<>();
        for (Group group : groups) {
            for (String groupUser : group.getUsers()) {
                if (groupUser.equals(user.getIdentifier())) {
                    userGroups.add(group);
                }
            }
        }
        groupsByUserIdentity.put(user.getIdentity(), userGroups);
    }
    return groupsByUserIdentity;
}

Example 12 with Group

use of org.apache.nifi.registry.security.authorization.Group in project nifi-registry by apache.

the class TenantHolder method createGroupsByUserIdentityMap.

/**
 * Creates a Map from user identity to the set of Groups for that identity.
 *
 * @param groups all groups
 * @param users all users
 * @return a Map from User identity to the set of Groups for that identity
 */
private Map<String, Set<Group>> createGroupsByUserIdentityMap(final Set<Group> groups, final Set<User> users) {
    Map<String, Set<Group>> groupsByUserIdentity = new HashMap<>();
    for (User user : users) {
        Set<Group> userGroups = new HashSet<>();
        for (Group group : groups) {
            for (String groupUser : group.getUsers()) {
                if (groupUser.equals(user.getIdentifier())) {
                    userGroups.add(group);
                }
            }
        }
        groupsByUserIdentity.put(user.getIdentity(), userGroups);
    }
    return groupsByUserIdentity;
}

Example 13 with Group

use of org.apache.nifi.registry.security.authorization.Group in project nifi-registry by apache.

the class FileUserGroupProvider method parseGroup.

private Group parseGroup(final Element element) {
    final Group.Builder builder = new Group.Builder().identifier(element.getAttribute(IDENTIFIER_ATTR)).name(element.getAttribute(NAME_ATTR));
    NodeList groupUsers = element.getElementsByTagName(GROUP_USER_ELEMENT);
    for (int i = 0; i < groupUsers.getLength(); i++) {
        Element groupUserNode = (Element) groupUsers.item(i);
        builder.addUser(groupUserNode.getAttribute(IDENTIFIER_ATTR));
    }
    return builder.build();
}

Example 14 with Group

use of org.apache.nifi.registry.security.authorization.Group in project nifi-registry by apache.

the class FileUserGroupProvider method parseUsersAndGroups.

private UsersAndGroups parseUsersAndGroups(final String fingerprint) {
    final List<User> users = new ArrayList<>();
    final List<Group> groups = new ArrayList<>();
    final byte[] fingerprintBytes = fingerprint.getBytes(StandardCharsets.UTF_8);
    try (final ByteArrayInputStream in = new ByteArrayInputStream(fingerprintBytes)) {
        final DocumentBuilder docBuilder = DOCUMENT_BUILDER_FACTORY.newDocumentBuilder();
        final Document document = docBuilder.parse(in);
        final Element rootElement = document.getDocumentElement();
        // parse all the users and add them to the current user group provider
        NodeList userNodes = rootElement.getElementsByTagName(USER_ELEMENT);
        for (int i = 0; i < userNodes.getLength(); i++) {
            Node userNode = userNodes.item(i);
            users.add(parseUser((Element) userNode));
        }
        // parse all the groups and add them to the current user group provider
        NodeList groupNodes = rootElement.getElementsByTagName(GROUP_ELEMENT);
        for (int i = 0; i < groupNodes.getLength(); i++) {
            Node groupNode = groupNodes.item(i);
            groups.add(parseGroup((Element) groupNode));
        }
    } catch (SAXException | ParserConfigurationException | IOException e) {
        throw new AuthorizationAccessException("Unable to parse fingerprint", e);
    }
    return new UsersAndGroups(users, groups);
}

Example 15 with Group

use of org.apache.nifi.registry.security.authorization.Group in project nifi-registry by apache.

the class FileUserGroupProvider method getUserAndGroups.

@Override
public UserAndGroups getUserAndGroups(final String identity) throws AuthorizationAccessException {
    final UserGroupHolder holder = userGroupHolder.get();
    final User user = holder.getUser(identity);
    final Set<Group> groups = holder.getGroups(identity);
    return new UserAndGroups() {

        @Override
        public User getUser() {
            return user;
        }

        @Override
        public Set<Group> getGroups() {
            return groups;
        }
    };
}