Examples with RangerSecurityZone org.apache.ranger.plugin.model.RangerSecurityZone used on opensource projects

Example 41 with RangerSecurityZone

use of org.apache.ranger.plugin.model.RangerSecurityZone in project ranger by apache.

the class UpdateUserAndGroupNamesInJson method updateRangerSecurityZoneJson.

// Update user and group name in security json
private void updateRangerSecurityZoneJson(Map<String, String> usersInDB, Map<String, String> groupsInDB) {
    SearchFilter filter = new SearchFilter();
    try {
        List<RangerSecurityZone> securityZones = securityZoneStore.getSecurityZones(filter);
        TransactionTemplate txTemplate = new TransactionTemplate(txManager);
        for (RangerSecurityZone securityZone : securityZones) {
            updateRangerSecurityZoneUsersAndGroups(securityZone.getAdminUserGroups(), groupsInDB);
            updateRangerSecurityZoneUsersAndGroups(securityZone.getAdminUsers(), usersInDB);
            updateRangerSecurityZoneUsersAndGroups(securityZone.getAuditUserGroups(), groupsInDB);
            updateRangerSecurityZoneUsersAndGroups(securityZone.getAuditUsers(), usersInDB);
            SecurityZoneUpdaterThread updaterThread = new SecurityZoneUpdaterThread(txTemplate, securityZone);
            updaterThread.setDaemon(true);
            updaterThread.start();
            updaterThread.join();
            String errorMsg = updaterThread.getErrorMsg();
            if (StringUtils.isNotEmpty(errorMsg)) {
                throw new Exception(errorMsg);
            }
        }
    } catch (Exception ex) {
        logger.error("Error in updateRangerSecurityZoneJson()", ex);
    }
}

Example 42 with RangerSecurityZone

use of org.apache.ranger.plugin.model.RangerSecurityZone in project ranger by apache.

the class SecurityZoneREST method getAllZones.

@GET
@Path("/zones")
public RangerSecurityZoneList getAllZones(@Context HttpServletRequest request) {
    if (LOG.isDebugEnabled()) {
        LOG.debug("==> getAllZones()");
    }
    if (!bizUtil.hasModuleAccess(RangerConstants.MODULE_SECURITY_ZONE)) {
        throw restErrorUtil.createRESTException(STR_USER_NOT_AUTHORIZED_TO_ACCESS_ZONE, MessageEnums.OPER_NO_PERMISSION);
    }
    RangerSecurityZoneList ret = new RangerSecurityZoneList();
    SearchFilter filter = searchUtil.getSearchFilter(request, securityZoneService.sortFields);
    try {
        List<RangerSecurityZone> securityZones = securityZoneStore.getSecurityZones(filter);
        ret.setSecurityZoneList(securityZones);
        if (securityZones != null) {
            ret.setTotalCount(securityZones.size());
            ret.setSortBy(filter.getSortBy());
            ret.setSortType(filter.getSortType());
            ret.setResultSize(securityZones.size());
        }
    } catch (WebApplicationException excp) {
        throw excp;
    } catch (Throwable excp) {
        LOG.error("getSecurityZones() failed", excp);
        throw restErrorUtil.createRESTException(excp.getMessage());
    }
    if (LOG.isDebugEnabled()) {
        LOG.debug("<== getAllZones():" + ret);
    }
    return ret;
}

Example 43 with RangerSecurityZone

use of org.apache.ranger.plugin.model.RangerSecurityZone in project ranger by apache.

the class SecurityZoneREST method createSecurityZone.

@POST
@Path("/zones")
public RangerSecurityZone createSecurityZone(RangerSecurityZone securityZone) {
    if (LOG.isDebugEnabled()) {
        LOG.debug("==> createSecurityZone(" + securityZone + ")");
    }
    RangerSecurityZone ret;
    try {
        ensureAdminAccess(securityZone);
        removeEmptyEntries(securityZone);
        RangerSecurityZoneValidator validator = validatorFactory.getSecurityZoneValidator(svcStore, securityZoneStore);
        validator.validate(securityZone, RangerValidator.Action.CREATE);
        ret = securityZoneStore.createSecurityZone(securityZone);
    } catch (WebApplicationException excp) {
        throw excp;
    } catch (Throwable excp) {
        LOG.error("createSecurityZone(" + securityZone + ") failed", excp);
        throw restErrorUtil.createRESTException(excp.getMessage());
    }
    if (LOG.isDebugEnabled()) {
        LOG.debug("<== createSecurityZone(" + securityZone + "):" + ret);
    }
    return ret;
}

Example 44 with RangerSecurityZone

use of org.apache.ranger.plugin.model.RangerSecurityZone in project ranger by apache.

the class SecurityZonePredicateUtil method addPredicateForServiceName.

private Predicate addPredicateForServiceName(final String serviceName, List<Predicate> predicates) {
    if (StringUtils.isEmpty(serviceName)) {
        return null;
    }
    Predicate ret = new Predicate() {

        @Override
        public boolean evaluate(Object object) {
            if (object == null) {
                return false;
            }
            boolean ret = false;
            if (object instanceof RangerSecurityZone) {
                RangerSecurityZone securityZone = (RangerSecurityZone) object;
                ret = securityZone.getServices().get(serviceName) != null;
            }
            return ret;
        }
    };
    if (predicates != null) {
        predicates.add(ret);
    }
    return ret;
}

Example 45 with RangerSecurityZone

use of org.apache.ranger.plugin.model.RangerSecurityZone in project ranger by apache.

the class RangerSecurityZoneValidatorTest method testValidateSecurityZoneWitoutRangerServiceDefForCreateThrowsError.

@Test
public void testValidateSecurityZoneWitoutRangerServiceDefForCreateThrowsError() throws Exception {
    RangerService rangerSvc = getRangerService();
    RangerSecurityZone suppliedSecurityZone = getRangerSecurityZone();
    Mockito.when(_store.getSecurityZone("MyZone")).thenReturn(null);
    Mockito.when(_store.getServiceByName("hdfsSvc")).thenReturn(rangerSvc);
    Mockito.when(_store.getServiceDefByName("1")).thenReturn(null);
    try {
        rangerSecurityZoneValidator.validate(suppliedSecurityZone, RangerValidator.Action.CREATE);
    } catch (Exception ex) {
        Assert.assertEquals(ex.getMessage(), "(0) Validation failure: error code[3041], reason[Invalid service-type [1]], field[security zone resource service-type], subfield[null], type[] ");
    }
}