Class CompositeRolesStore
java.lang.Object
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore
A composite roles store that can retrieve roles from multiple sources.
- See Also:
-
Constructor Summary
ConstructorsConstructorDescriptionCompositeRolesStore(org.elasticsearch.common.settings.Settings settings, RoleProviders roleProviders, NativePrivilegeStore privilegeStore, org.elasticsearch.common.util.concurrent.ThreadContext threadContext, org.elasticsearch.license.XPackLicenseState licenseState, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, ApiKeyService apiKeyService, ServiceAccountService serviceAccountService, org.elasticsearch.xpack.core.security.authz.accesscontrol.DocumentSubsetBitsetCache dlsBitsetCache, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, Consumer<Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>> effectiveRoleDescriptorsConsumer) -
Method Summary
Modifier and TypeMethodDescriptionstatic voidbuildRoleFromDescriptors(Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> roleDescriptors, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, NativePrivilegeStore privilegeStore, org.apache.lucene.util.automaton.Automaton restrictedIndicesAutomaton, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> listener) voidbuildRoleFromRoleReference(org.elasticsearch.xpack.core.security.authz.store.RoleReference roleReference, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener) voidgetRole(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener) voidgetRoleDescriptorsList(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<Collection<Set<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>>> listener) voidgetRoles(org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.action.ActionListener<org.elasticsearch.core.Tuple<org.elasticsearch.xpack.core.security.authz.permission.Role, org.elasticsearch.xpack.core.security.authz.permission.Role>> roleActionListener) static List<org.elasticsearch.common.settings.Setting<?>>voidinvalidate(String role) voidinvalidate(Set<String> roles) voidvoidonSecurityIndexStateChange(SecurityIndexManager.State previousState, SecurityIndexManager.State currentState) voidusageStats(org.elasticsearch.action.ActionListener<Map<String, Object>> listener)
-
Constructor Details
-
CompositeRolesStore
public CompositeRolesStore(org.elasticsearch.common.settings.Settings settings, RoleProviders roleProviders, NativePrivilegeStore privilegeStore, org.elasticsearch.common.util.concurrent.ThreadContext threadContext, org.elasticsearch.license.XPackLicenseState licenseState, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, ApiKeyService apiKeyService, ServiceAccountService serviceAccountService, org.elasticsearch.xpack.core.security.authz.accesscontrol.DocumentSubsetBitsetCache dlsBitsetCache, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, Consumer<Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>> effectiveRoleDescriptorsConsumer)
-
-
Method Details
-
getRoles
public void getRoles(org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.action.ActionListener<org.elasticsearch.core.Tuple<org.elasticsearch.xpack.core.security.authz.permission.Role, org.elasticsearch.xpack.core.security.authz.permission.Role>> roleActionListener) -
getRole
public void getRole(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener) -
buildRoleFromRoleReference
public void buildRoleFromRoleReference(org.elasticsearch.xpack.core.security.authz.store.RoleReference roleReference, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> roleActionListener) -
getRoleDescriptorsList
public void getRoleDescriptorsList(org.elasticsearch.xpack.core.security.authc.Subject subject, org.elasticsearch.action.ActionListener<Collection<Set<org.elasticsearch.xpack.core.security.authz.RoleDescriptor>>> listener) -
buildRoleFromDescriptors
public static void buildRoleFromDescriptors(Collection<org.elasticsearch.xpack.core.security.authz.RoleDescriptor> roleDescriptors, org.elasticsearch.xpack.core.security.authz.permission.FieldPermissionsCache fieldPermissionsCache, NativePrivilegeStore privilegeStore, org.apache.lucene.util.automaton.Automaton restrictedIndicesAutomaton, org.elasticsearch.action.ActionListener<org.elasticsearch.xpack.core.security.authz.permission.Role> listener) -
invalidateAll
public void invalidateAll() -
invalidate
-
invalidate
-
usageStats
-
onSecurityIndexStateChange
public void onSecurityIndexStateChange(SecurityIndexManager.State previousState, SecurityIndexManager.State currentState) -
getSettings
-