Class CompositeRolesStore

java.lang.Object
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore

public class CompositeRolesStore extends Object
A composite roles store that can retrieve roles from multiple sources.
See Also:
  • Constructor Summary

    Constructors
    Constructor
    Description
    CompositeRolesStore(org.elasticsearch.common.settings.Settings settings, RoleProviders roleProviders, NativePrivilegeStore privilegeStore, org.elasticsearch.common.util.concurrent.ThreadContext threadContext, org.elasticsearch.license.XPackLicenseState licenseState, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, ApiKeyService apiKeyService, ServiceAccountService serviceAccountService, org.elasticsearch.xpack.core.security.authz.accesscontrol.DocumentSubsetBitsetCache dlsBitsetCache, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, Consumer<Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>> effectiveRoleDescriptorsConsumer)
     
  • Method Summary

    Modifier and Type
    Method
    Description
    static void
    buildRoleFromDescriptors(Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> roleDescriptors, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, NativePrivilegeStore privilegeStore, org.apache.lucene.util.automaton.Automaton restrictedIndicesAutomaton, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> listener)
     
    void
    buildRoleFromRoleReference(org.elasticsearch.xpack.core.security.authz.store.RoleReference roleReference, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener)
     
    void
    getRole(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener)
     
    void
    getRoleDescriptorsList(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<Collection<Set<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>>> listener)
     
    void
    getRoles(org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.action.ActionListener<org.elasticsearch.core.Tuple<org.elasticsearch.xpack.core.security.authz.permission.Role,org.elasticsearch.xpack.core.security.authz.permission.Role>> roleActionListener)
     
    static List<org.elasticsearch.common.settings.Setting<?>>
     
    void
     
    void
     
    void
     
    void
     
    void
    usageStats(org.elasticsearch.action.ActionListener<Map<String,Object>> listener)
     

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
  • Constructor Details

    • CompositeRolesStore

      public CompositeRolesStore(org.elasticsearch.common.settings.Settings settings, RoleProviders roleProviders, NativePrivilegeStore privilegeStore, org.elasticsearch.common.util.concurrent.ThreadContext threadContext, org.elasticsearch.license.XPackLicenseState licenseState, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, ApiKeyService apiKeyService, ServiceAccountService serviceAccountService, org.elasticsearch.xpack.core.security.authz.accesscontrol.DocumentSubsetBitsetCache dlsBitsetCache, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, Consumer<Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>> effectiveRoleDescriptorsConsumer)
  • Method Details

    • getRoles

      public void getRoles(org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.action.ActionListener<org.elasticsearch.core.Tuple<org.elasticsearch.xpack.core.security.authz.permission.Role,org.elasticsearch.xpack.core.security.authz.permission.Role>> roleActionListener)
    • getRole

      public void getRole(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener)
    • buildRoleFromRoleReference

      public void buildRoleFromRoleReference(org.elasticsearch.xpack.core.security.authz.store.RoleReference roleReference, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener)
    • getRoleDescriptorsList

      public void getRoleDescriptorsList(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<Collection<Set<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>>> listener)
    • buildRoleFromDescriptors

      public static void buildRoleFromDescriptors(Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> roleDescriptors, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, NativePrivilegeStore privilegeStore, org.apache.lucene.util.automaton.Automaton restrictedIndicesAutomaton, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> listener)
    • invalidateAll

      public void invalidateAll()
    • invalidate

      public void invalidate(String role)
    • invalidate

      public void invalidate(Set<String> roles)
    • usageStats

      public void usageStats(org.elasticsearch.action.ActionListener<Map<String,Object>> listener)
    • onSecurityIndexStateChange

      public void onSecurityIndexStateChange(SecurityIndexManager.State previousState, SecurityIndexManager.State currentState)
    • getSettings

      public static List<org.elasticsearch.common.settings.Setting<?>> getSettings()