extras/indexing/src/main/java/org/apache/rya/api/client/accumulo/AccumuloRemoveUser.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
package org.apache.rya.api.client.accumulo;

import static java.util.Objects.requireNonNull;

import java.util.List;

import org.apache.accumulo.core.client.AccumuloException;
import org.apache.accumulo.core.client.AccumuloSecurityException;
import org.apache.accumulo.core.client.Connector;
import org.apache.rya.accumulo.instance.AccumuloRyaInstanceDetailsRepository;
import org.apache.rya.accumulo.utils.RyaTableNames;
import org.apache.rya.accumulo.utils.TablePermissions;
import org.apache.rya.api.client.InstanceDoesNotExistException;
import org.apache.rya.api.client.RemoveUser;
import org.apache.rya.api.client.RyaClientException;
import org.apache.rya.api.instance.RyaDetails;
import org.apache.rya.api.instance.RyaDetailsRepository.RyaDetailsRepositoryException;
import org.apache.rya.api.instance.RyaDetailsUpdater;
import org.apache.rya.api.instance.RyaDetailsUpdater.RyaDetailsMutator.CouldNotApplyMutationException;
import org.apache.rya.indexing.pcj.storage.PrecomputedJoinStorage.PCJStorageException;

import edu.umd.cs.findbugs.annotations.DefaultAnnotation;
import edu.umd.cs.findbugs.annotations.NonNull;

/**
 * An Accumulo implementation of the {@link DeleteUser} command.
 */
@DefaultAnnotation(NonNull.class)
public class AccumuloRemoveUser extends AccumuloCommand implements RemoveUser {

    private static final TablePermissions TABLE_PERMISSIONS = new TablePermissions();

    /**
     * Constructs an instance of {@link AccumuloDeleteUser}.
     *
     * @param connectionDetails - Details about the values that were used to create
     *   the connector to the cluster. (not null)
     * @param connector - Provides programmatic access to the instance of Accumulo
     *   that hosts Rya instance. (not null)
     */
    public AccumuloRemoveUser(
            final AccumuloConnectionDetails connectionDetails,
            final Connector connector) {
        super(connectionDetails, connector);
    }

    @Override
    public void removeUser(final String instanceName, final String username) throws InstanceDoesNotExistException, RyaClientException {
        requireNonNull(instanceName);
        requireNonNull(username);

        // Update the instance details.
        final RyaDetailsUpdater updater = new RyaDetailsUpdater( new AccumuloRyaInstanceDetailsRepository(getConnector(), instanceName) );
        try {
            updater.update(originalDetails -> RyaDetails.builder( originalDetails ).removeUser(username).build());
        } catch (RyaDetailsRepositoryException | CouldNotApplyMutationException e) {
            throw new RyaClientException("Could not remove the user '" + username + "' from the Rya instance's details.", e);
        }

        // Revoke all access to all the instance's tables.
        try {
            // Build the list of tables that are present within the Rya instance.
            final List<String> tables = new RyaTableNames().getTableNames(instanceName, getConnector());

            // Update the user permissions for those tables.
            for(final String table : tables) {
                try {
                    TABLE_PERMISSIONS.revokeAllPermissions(username, table, getConnector());
                } catch (AccumuloException | AccumuloSecurityException e) {
                    throw new RyaClientException("Could not revoke access to table '" + table + "' from user '" + username + "'.", e);
                }
            }
        } catch (PCJStorageException | RyaDetailsRepositoryException e) {
            throw new RyaClientException("Could not determine which tables exist for the '" + instanceName + "' instance of Rya.", e);
        }
    }
}