sentry-provider/sentry-provider-cache/src/test/java/org/apache/sentry/provider/cache/PrivilegeCacheTestImpl.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.apache.sentry.provider.cache;

import com.google.common.collect.ImmutableSet;
import java.io.File;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.util.Set;

import java.util.stream.Collectors;
import org.apache.commons.io.FileUtils;
import org.apache.hadoop.conf.Configuration;
import org.apache.sentry.core.common.ActiveRoleSet;
import org.apache.sentry.core.common.Authorizable;
import org.apache.sentry.policy.common.Privilege;
import org.apache.sentry.policy.common.PrivilegeFactory;
import org.apache.sentry.provider.common.ProviderBackendContext;
import org.apache.sentry.core.common.utils.PolicyFiles;
import org.apache.sentry.provider.file.SimpleFileProviderBackend;

import com.google.common.io.Files;

/**
 * Test cache provider that is a wrapper on top of File based provider
 */
public class PrivilegeCacheTestImpl implements FilteredPrivilegeCache {
  private static final String resourcePath = "test-authz-provider-local-group-mapping.ini";

  private SimpleFileProviderBackend backend;
  private File baseDir;
  private PrivilegeFactory privilegeFactory;

  public PrivilegeCacheTestImpl() throws FileNotFoundException, IOException {
    baseDir = Files.createTempDir();
    PolicyFiles.copyToDir(baseDir, resourcePath);
    backend = new SimpleFileProviderBackend(new Configuration(), new File(baseDir, resourcePath)
      .toString());
    backend.initialize(new ProviderBackendContext());
  }

  @Override
  public Set<String> listPrivileges(Set<String> groups, ActiveRoleSet roleSet) {
    return backend.getPrivileges(groups, roleSet);
  }

  @Override
  public void close() {
    backend.close();
    if (baseDir != null) {
      FileUtils.deleteQuietly(baseDir);
    }
  }

  @Override
  public Set<String> listPrivileges(Set<String> groups, Set<String> users, ActiveRoleSet roleSet) {
    return backend.getPrivileges(groups, users, roleSet);
  }

  @Override
  public Set<String> listPrivileges(Set<String> groups, Set<String> users, ActiveRoleSet roleSet,
      Authorizable... authorizationhierarchy) {
    return backend.getPrivileges(groups, users, roleSet, authorizationhierarchy);
  }

  @Override
  public Set<Privilege> listPrivilegeObjects(Set<String> groups, Set<String> users, ActiveRoleSet roleSet,
      Authorizable... authorizationHierarchy) {
    if (privilegeFactory == null) {
      return ImmutableSet.of();
    }

    Set<String> privilegeStrings = listPrivileges(groups, users, roleSet, authorizationHierarchy);

    return privilegeStrings.stream()
        .filter(priString -> priString != null)
        .map(priString -> privilegeFactory.createPrivilege(priString))
        .collect(Collectors.toSet());
  }
}