| /* |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| package org.apache.hadoop.ozone.web.ozShell.keys; |
| |
| import org.apache.hadoop.ozone.OzoneAcl; |
| import org.apache.hadoop.ozone.client.OzoneClient; |
| import org.apache.hadoop.ozone.security.acl.OzoneObj; |
| import org.apache.hadoop.ozone.security.acl.OzoneObjInfo; |
| import org.apache.hadoop.ozone.web.ozShell.Handler; |
| import org.apache.hadoop.ozone.web.ozShell.OzoneAddress; |
| import org.apache.hadoop.ozone.web.ozShell.Shell; |
| import picocli.CommandLine; |
| import picocli.CommandLine.Command; |
| import picocli.CommandLine.Parameters; |
| |
| import java.util.Objects; |
| |
| import static org.apache.hadoop.ozone.security.acl.OzoneObj.StoreType.OZONE; |
| |
| /** |
| * Set acl handler for Key. |
| */ |
| @Command(name = "setacl", |
| description = "Set one or more ACLs, replacing the existing ones.") |
| public class SetAclKeyHandler extends Handler { |
| |
| @Parameters(arity = "1..1", description = Shell.OZONE_BUCKET_URI_DESCRIPTION) |
| private String uri; |
| |
| @CommandLine.Option(names = {"--acls", "-al"}, |
| required = true, |
| description = "A comma separated list of ACLs to be set.\n" + |
| "Ex: user:user1:rw,user:user2:a,group:hadoop:a\n" + |
| "r = READ, " + |
| "w = WRITE, " + |
| "c = CREATE, " + |
| "d = DELETE, " + |
| "l = LIST, " + |
| "a = ALL, " + |
| "n = NONE, " + |
| "x = READ_ACL, " + |
| "y = WRITE_ACL.") |
| private String acls; |
| |
| @CommandLine.Option(names = {"--store", "-s"}, |
| required = false, |
| description = "Store type. i.e OZONE or S3") |
| private String storeType; |
| |
| /** |
| * Executes the Client Calls. |
| */ |
| @Override |
| public Void call() throws Exception { |
| Objects.requireNonNull(acls, |
| "You need to specify one or more ACLs to be set."); |
| OzoneAddress address = new OzoneAddress(uri); |
| address.ensureKeyAddress(); |
| try (OzoneClient client = |
| address.createClient(createOzoneConfiguration())) { |
| |
| String volumeName = address.getVolumeName(); |
| String bucketName = address.getBucketName(); |
| String keyName = address.getKeyName(); |
| |
| if (isVerbose()) { |
| System.out.printf("Volume Name : %s%n", volumeName); |
| System.out.printf("Bucket Name : %s%n", bucketName); |
| } |
| |
| OzoneObj obj = OzoneObjInfo.Builder.newBuilder() |
| .setBucketName(bucketName) |
| .setVolumeName(volumeName) |
| .setKeyName(keyName) |
| .setResType(OzoneObj.ResourceType.KEY) |
| .setStoreType(storeType == null ? OZONE : |
| OzoneObj.StoreType.valueOf(storeType)) |
| .build(); |
| |
| client.getObjectStore().setAcl(obj, OzoneAcl.parseAcls(acls)); |
| System.out.println("ACL(s) set successfully."); |
| } |
| |
| return null; |
| } |
| |
| } |