com.hazelcast.internal.dynamicconfig

Class DynamicSecurityConfig

java.lang.Object

com.hazelcast.config.SecurityConfig

com.hazelcast.internal.dynamicconfig.DynamicSecurityConfig

public class DynamicSecurityConfig
extends SecurityConfig

SecurityConfig wrapper that supports dynamically updating client permissions.

See Also:

setClientPermissionConfigs(Set)

Constructor Summary

Constructors

Constructor and Description
DynamicSecurityConfig(SecurityConfig staticSecurityConfig, SecurityService securityService)

Method Summary

Modifier and Type	Method and Description
SecurityConfig	addClientLoginModuleConfig(LoginModuleConfig loginModuleConfig)
SecurityConfig	addClientPermissionConfig(PermissionConfig permissionConfig)
SecurityConfig	addMemberLoginModuleConfig(LoginModuleConfig loginModuleConfig)
SecurityConfig	addSecurityInterceptorConfig(SecurityInterceptorConfig interceptorConfig)
boolean	equals(Object o)
boolean	getClientBlockUnmappedActions()
List<LoginModuleConfig>	getClientLoginModuleConfigs()
Set<PermissionConfig>	getClientPermissionConfigs() Returns existing client permissions as an unmodifiable Set.
PermissionPolicyConfig	getClientPolicyConfig()
CredentialsFactoryConfig	getMemberCredentialsConfig()
List<LoginModuleConfig>	getMemberLoginModuleConfigs()
OnJoinPermissionOperationName	getOnJoinPermissionOperation()
List<SecurityInterceptorConfig>	getSecurityInterceptorConfigs()
int	hashCode()
boolean	isEnabled()
SecurityConfig	setClientBlockUnmappedActions(boolean clientBlockUnmappedActions) Block or allow actions, submitted as tasks in an Executor from clients and have no permission mappings.
SecurityConfig	setClientLoginModuleConfigs(List<LoginModuleConfig> loginModuleConfigs)
SecurityConfig	setClientPermissionConfigs(Set<PermissionConfig> permissions) Updates client permission configuration cluster-wide.
SecurityConfig	setClientPolicyConfig(PermissionPolicyConfig policyConfig)
SecurityConfig	setEnabled(boolean enabled)
SecurityConfig	setMemberCredentialsConfig(CredentialsFactoryConfig credentialsFactoryConfig)
SecurityConfig	setMemberLoginModuleConfigs(List<LoginModuleConfig> memberLoginModuleConfigs)
SecurityConfig	setOnJoinPermissionOperation(OnJoinPermissionOperationName onJoinPermissionOperation)
void	setSecurityInterceptorConfigs(List<SecurityInterceptorConfig> securityInterceptorConfigs)

Methods inherited from class com.hazelcast.config.SecurityConfig

toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

DynamicSecurityConfig

public DynamicSecurityConfig(SecurityConfig staticSecurityConfig,
                             SecurityService securityService)

Method Detail

addSecurityInterceptorConfig

public SecurityConfig addSecurityInterceptorConfig(SecurityInterceptorConfig interceptorConfig)

Overrides:

addSecurityInterceptorConfig in class SecurityConfig

getSecurityInterceptorConfigs

public List<SecurityInterceptorConfig> getSecurityInterceptorConfigs()

Overrides:

getSecurityInterceptorConfigs in class SecurityConfig

setSecurityInterceptorConfigs

public void setSecurityInterceptorConfigs(List<SecurityInterceptorConfig> securityInterceptorConfigs)

Overrides:

setSecurityInterceptorConfigs in class SecurityConfig

isEnabled

public boolean isEnabled()

Overrides:

isEnabled in class SecurityConfig

setEnabled

public SecurityConfig setEnabled(boolean enabled)

Overrides:

setEnabled in class SecurityConfig

addMemberLoginModuleConfig

public SecurityConfig addMemberLoginModuleConfig(LoginModuleConfig loginModuleConfig)

Overrides:

addMemberLoginModuleConfig in class SecurityConfig

addClientLoginModuleConfig

public SecurityConfig addClientLoginModuleConfig(LoginModuleConfig loginModuleConfig)

Overrides:

addClientLoginModuleConfig in class SecurityConfig

addClientPermissionConfig

public SecurityConfig addClientPermissionConfig(PermissionConfig permissionConfig)

Overrides:

addClientPermissionConfig in class SecurityConfig

getClientLoginModuleConfigs

public List<LoginModuleConfig> getClientLoginModuleConfigs()

Overrides:

getClientLoginModuleConfigs in class SecurityConfig

setClientLoginModuleConfigs

public SecurityConfig setClientLoginModuleConfigs(List<LoginModuleConfig> loginModuleConfigs)

Overrides:

setClientLoginModuleConfigs in class SecurityConfig

getMemberLoginModuleConfigs

public List<LoginModuleConfig> getMemberLoginModuleConfigs()

Overrides:

getMemberLoginModuleConfigs in class SecurityConfig

setMemberLoginModuleConfigs

public SecurityConfig setMemberLoginModuleConfigs(List<LoginModuleConfig> memberLoginModuleConfigs)

Overrides:

setMemberLoginModuleConfigs in class SecurityConfig

getClientPolicyConfig

public PermissionPolicyConfig getClientPolicyConfig()

Overrides:

getClientPolicyConfig in class SecurityConfig

setClientPolicyConfig

public SecurityConfig setClientPolicyConfig(PermissionPolicyConfig policyConfig)

Overrides:

setClientPolicyConfig in class SecurityConfig

setClientBlockUnmappedActions

public SecurityConfig setClientBlockUnmappedActions(boolean clientBlockUnmappedActions)

Description copied from class: SecurityConfig

Block or allow actions, submitted as tasks in an Executor from clients and have no permission mappings.

Executors:

• IExecutorService
• IScheduledExecutorService
• DurableExecutorService

Overrides:

setClientBlockUnmappedActions in class SecurityConfig

Parameters:

clientBlockUnmappedActions -

True: Blocks all actions that have no permission mapping

False: Allows all actions that have no permission mapping

getClientPermissionConfigs

public Set<PermissionConfig> getClientPermissionConfigs()

Returns existing client permissions as an unmodifiable Set. You may use this set to create your client permissions set and pass it setClientPermissionConfigs(Set) to update client permissions.

Overrides:

getClientPermissionConfigs in class SecurityConfig

getClientBlockUnmappedActions

public boolean getClientBlockUnmappedActions()

Overrides:

getClientBlockUnmappedActions in class SecurityConfig

Returns:

a boolean flag indicating whether actions, submitted as tasks in an Executor from clients and have no permission mappings, are blocked or allowed.

Executors:

• IExecutorService
• IScheduledExecutorService
• DurableExecutorService

setClientPermissionConfigs

public SecurityConfig setClientPermissionConfigs(Set<PermissionConfig> permissions)

Updates client permission configuration cluster-wide.

Overrides:

setClientPermissionConfigs in class SecurityConfig

getMemberCredentialsConfig

public CredentialsFactoryConfig getMemberCredentialsConfig()

Overrides:

getMemberCredentialsConfig in class SecurityConfig

setMemberCredentialsConfig

public SecurityConfig setMemberCredentialsConfig(CredentialsFactoryConfig credentialsFactoryConfig)

Overrides:

setMemberCredentialsConfig in class SecurityConfig

getOnJoinPermissionOperation

public OnJoinPermissionOperationName getOnJoinPermissionOperation()

Overrides:

getOnJoinPermissionOperation in class SecurityConfig

setOnJoinPermissionOperation

public SecurityConfig setOnJoinPermissionOperation(OnJoinPermissionOperationName onJoinPermissionOperation)

Overrides:

setOnJoinPermissionOperation in class SecurityConfig

equals

public boolean equals(Object o)

Overrides:

equals in class SecurityConfig

hashCode

public int hashCode()

Overrides:

hashCode in class SecurityConfig