blob: c56c55f77e97ee14033ef13b51dbb024fed156cf [file] [log] [blame]
/*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.ranger.plugin.policyengine.gds;
import org.apache.ranger.plugin.model.RangerGds;
import org.apache.ranger.plugin.policyengine.RangerAccessRequest;
import org.apache.ranger.plugin.policyengine.RangerResourceACLs;
import org.apache.ranger.plugin.policyevaluator.RangerValidityScheduleEvaluator;
import org.apache.ranger.plugin.util.ServiceGdsInfo.DataShareInDatasetInfo;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.util.Set;
public class GdsDshidEvaluator {
private static final Logger LOG = LoggerFactory.getLogger(GdsDshidEvaluator.class);
private final DataShareInDatasetInfo dshid;
private final GdsDatasetEvaluator datasetEvaluator;;
private final RangerValidityScheduleEvaluator scheduleEvaluator;
public GdsDshidEvaluator(DataShareInDatasetInfo dshid, GdsDatasetEvaluator datasetEvaluator) {
this.dshid = dshid;
this.datasetEvaluator = datasetEvaluator;
if (dshid.getValiditySchedule() != null) {
scheduleEvaluator = new RangerValidityScheduleEvaluator(dshid.getValiditySchedule());
} else {
scheduleEvaluator = null;
}
}
public Long getDataShareId() {
return dshid.getDataShareId();
}
public Long getDatasetId() {
return dshid.getDatasetId();
}
public GdsDatasetEvaluator getDatasetEvaluator() {
return datasetEvaluator;
}
public boolean isAllowed(RangerAccessRequest request) {
boolean ret = isActive();
if (ret) {
// TODO:
}
return ret;
}
public void getResourceACLs(RangerAccessRequest request, RangerResourceACLs acls, boolean isConditional, Set<String> allowedAccessTypes) {
LOG.debug("==> GdsDshidEvaluator.getResourceACLs({}, {})", request, acls);
isConditional = isConditional || scheduleEvaluator != null;
datasetEvaluator.getResourceACLs(request, acls, isConditional, allowedAccessTypes);
LOG.debug("<== GdsDshidEvaluator.getResourceACLs({}, {})", request, acls);
}
private boolean isActive() {
boolean ret = dshid.getStatus() == RangerGds.GdsShareStatus.ACTIVE;
if (ret && scheduleEvaluator != null) {
ret = scheduleEvaluator.isApplicable(System.currentTimeMillis());
}
return ret;
}
}