Uses of Class
org.apache.cassandra.auth.RoleResource

Packages that use RoleResource

Package	Description
org.apache.cassandra.auth
org.apache.cassandra.auth.jmx
org.apache.cassandra.cql3.statements

Uses of RoleResource in org.apache.cassandra.auth

Fields in org.apache.cassandra.auth declared as RoleResource

Modifier and Type	Field	Description
final RoleResource	Role.resource	Represents a user or group in the auth subsystem.

Methods in org.apache.cassandra.auth that return RoleResource

Modifier and Type	Method	Description
static RoleResource	RoleResource.fromName(String name)	Parses a role resource name into a RoleResource instance.
RoleResource	AuthenticatedUser.getPrimaryRole()
static RoleResource	RoleResource.role(String name)	Creates a RoleResource representing an individual Role.
static RoleResource	RoleResource.root()

Methods in org.apache.cassandra.auth that return types with arguments of type RoleResource

Modifier and Type	Method	Description
Supplier<Map<RoleResource,DCPermissions>>	CassandraNetworkAuthorizer.bulkLoader()
Supplier<Map<RoleResource,Set<Role>>>	CassandraRoleManager.bulkLoader()
Supplier<Map<RoleResource,CIDRPermissions>>	CIDRPermissionsManager.bulkLoader()	Function to bulk load role to cidr permissions cache This gets called when cache warmup is enabled in the config
Set<RoleResource>	CassandraRoleManager.getAllRoles()	We hard-code this query to Quorum regardless of the role or auth credentials of the queryer given the nature of this query: we expect to know *all* roles across the entire cluster when we query this, not just local quorum or on a single node.
Set<RoleResource>	IRoleManager.getAllRoles()	Called during the execution of an unqualified LIST ROLES query.
static Set<RoleResource>	Roles.getAllRoles()	Enumerate all the roles in the system, preferably these will be fetched from the cache, which in turn may have been warmed during startup.
Set<RoleResource>	AuthenticatedUser.getRoles()	Get the roles that have been granted to the user via the IRoleManager
Set<RoleResource>	CassandraRoleManager.getRoles(RoleResource grantee, boolean includeInherited)
Set<RoleResource>	IRoleManager.getRoles(RoleResource grantee, boolean includeInherited)	Called during execution of a LIST ROLES query.
static Set<RoleResource>	Roles.getRoles(RoleResource primaryRole)	Identify all roles granted to the supplied Role, including both directly granted and inherited roles.

Methods in org.apache.cassandra.auth with parameters of type RoleResource

Modifier and Type	Method	Description
void	CassandraRoleManager.alterRole(AuthenticatedUser performer, RoleResource role, RoleOptions options)
void	IRoleManager.alterRole(AuthenticatedUser performer, RoleResource role, RoleOptions options)	Called during execution of ALTER ROLE statement.
DCPermissions	AllowAllNetworkAuthorizer.authorize(RoleResource role)
DCPermissions	CassandraNetworkAuthorizer.authorize(RoleResource role)
DCPermissions	INetworkAuthorizer.authorize(RoleResource role)	Returns the dc permissions associated with the given role
boolean	CassandraRoleManager.canLogin(RoleResource role)
boolean	IRoleManager.canLogin(RoleResource role)	Return true if there exists a Role with the given name which has login privileges.
static boolean	Roles.canLogin(RoleResource role)	Returns true if the supplied role has the login privilege.
int	RoleResource.compareTo(RoleResource o)
void	CassandraRoleManager.createRole(AuthenticatedUser performer, RoleResource role, RoleOptions options)
void	IRoleManager.createRole(AuthenticatedUser performer, RoleResource role, RoleOptions options)	Called during execution of a CREATE ROLE statement.
void	AllowAllNetworkAuthorizer.drop(RoleResource role)
void	CassandraNetworkAuthorizer.drop(RoleResource role)
void	CIDRPermissionsManager.drop(RoleResource role)	Drop CIDR permissions of a role, i.e, delete corresponding row from the table
void	INetworkAuthorizer.drop(RoleResource role)	Called when a role is deleted, so any corresponding network permissions data can also be cleaned up
void	AbstractCIDRAuthorizer.dropCidrPermissionsForRole(RoleResource role)
void	ICIDRAuthorizer.dropCidrPermissionsForRole(RoleResource role)	Drop CIDR permissions of a role
void	CassandraRoleManager.dropRole(AuthenticatedUser performer, RoleResource role)
void	IRoleManager.dropRole(AuthenticatedUser performer, RoleResource role)	Called during execution of DROP ROLE statement, as well we removing any main record of the role from the system this implies that we want to revoke this role from all other roles that it has been granted to.
static Role	Roles.fromRoleResource(RoleResource resource, IRoleManager roleManager)	Constructs a Role object from a RoleResource, using the methods of the supplied IRoleManager.
CIDRPermissions	CIDRPermissionsManager.getCidrPermissionsForRole(RoleResource role)	Get CIDR permissions of a role
Map<String,String>	CassandraRoleManager.getCustomOptions(RoleResource role)
Map<String,String>	IRoleManager.getCustomOptions(RoleResource role)	Where an implementation supports OPTIONS in CREATE and ALTER operations this method should return the Map<String, String> representing the custom options associated with the role, as supplied to CREATE or ALTER.
static Map<String,String>	Roles.getOptions(RoleResource role)	Returns the map of custom options for the named role.
Set<Role>	CassandraRoleManager.getRoleDetails(RoleResource grantee)
default Set<Role>	IRoleManager.getRoleDetails(RoleResource grantee)	Used to retrieve detailed role info on the full set of roles granted to a grantee.
static Set<Role>	Roles.getRoleDetails(RoleResource primaryRole)	Get detailed info on all the roles granted to the role identified by the supplied RoleResource.
Set<RoleResource>	CassandraRoleManager.getRoles(RoleResource grantee, boolean includeInherited)
Set<RoleResource>	IRoleManager.getRoles(RoleResource grantee, boolean includeInherited)	Called during execution of a LIST ROLES query.
static Set<RoleResource>	Roles.getRoles(RoleResource primaryRole)	Identify all roles granted to the supplied Role, including both directly granted and inherited roles.
Set<Permission>	AllowAllAuthorizer.grant(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource to)
Set<Permission>	CassandraAuthorizer.grant(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource grantee)
Set<Permission>	IAuthorizer.grant(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource grantee)	Grants a set of permissions on a resource to a role.
void	CassandraRoleManager.grantRole(AuthenticatedUser performer, RoleResource role, RoleResource grantee)
void	IRoleManager.grantRole(AuthenticatedUser performer, RoleResource role, RoleResource grantee)	Called during execution of GRANT ROLE query.
boolean	AllowAllCIDRAuthorizer.hasAccessFromIp(RoleResource role, InetAddress ipAddress)
boolean	CassandraCIDRAuthorizer.hasAccessFromIp(RoleResource role, InetAddress ipAddress)
boolean	ICIDRAuthorizer.hasAccessFromIp(RoleResource role, InetAddress ipAddress)	Determines does the given role has access from CIDR groups associated with given IP
static boolean	Roles.hasSuperuserStatus(RoleResource role)	Returns true if the supplied role or any other role granted to it (directly or indirectly) has superuser status.
boolean	CassandraRoleManager.isExistingRole(RoleResource role)
boolean	IRoleManager.isExistingRole(RoleResource role)	Return true is a Role with the given name exists in the system.
boolean	CassandraRoleManager.isSuper(RoleResource role)
boolean	IRoleManager.isSuper(RoleResource role)	Return true if there exists a Role with the given name that also has superuser status.
Set<PermissionDetails>	AllowAllAuthorizer.list(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource of)
Set<PermissionDetails>	CassandraAuthorizer.list(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource grantee)
Set<PermissionDetails>	IAuthorizer.list(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource grantee)	Returns a list of permissions on a resource granted to a role.
Set<Permission>	AllowAllAuthorizer.revoke(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource from)
Set<Permission>	CassandraAuthorizer.revoke(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource revokee)
Set<Permission>	IAuthorizer.revoke(AuthenticatedUser performer, Set<Permission> permissions, IResource resource, RoleResource revokee)	Revokes a set of permissions on a resource from a user.
void	AllowAllAuthorizer.revokeAllFrom(RoleResource droppedRole)
void	CassandraAuthorizer.revokeAllFrom(RoleResource revokee)
void	IAuthorizer.revokeAllFrom(RoleResource revokee)	Called before deleting a role with DROP ROLE statement (or the alias provided for compatibility, DROP USER) so that a new role with the same name wouldn't inherit permissions of the deleted one in the future.
void	CassandraRoleManager.revokeRole(AuthenticatedUser performer, RoleResource role, RoleResource revokee)
void	IRoleManager.revokeRole(AuthenticatedUser performer, RoleResource role, RoleResource revokee)	Called during the execution of a REVOKE ROLE query.
void	AbstractCIDRAuthorizer.setCidrGroupsForRole(RoleResource role, CIDRPermissions cidrPermissions)
void	CIDRPermissionsManager.setCidrGroupsForRole(RoleResource role, CIDRPermissions cidrPermissions)	Set CIDR permissions for a given role
void	ICIDRAuthorizer.setCidrGroupsForRole(RoleResource role, CIDRPermissions cidrPermissions)	Set CIDR permissions for a given role
void	AllowAllNetworkAuthorizer.setRoleDatacenters(RoleResource role, DCPermissions permissions)
void	CassandraNetworkAuthorizer.setRoleDatacenters(RoleResource role, DCPermissions permissions)
void	INetworkAuthorizer.setRoleDatacenters(RoleResource role, DCPermissions permissions)

Constructor parameters in org.apache.cassandra.auth with type arguments of type RoleResource

Modifier	Constructor	Description
	CIDRPermissionsCache(Function<RoleResource,CIDRPermissions> loadFunction, Supplier<Map<RoleResource,CIDRPermissions>> bulkLoadFunction, BooleanSupplier cacheEnabledDelegate)
	CIDRPermissionsCache(Function<RoleResource,CIDRPermissions> loadFunction, Supplier<Map<RoleResource,CIDRPermissions>> bulkLoadFunction, BooleanSupplier cacheEnabledDelegate)

Uses of RoleResource in org.apache.cassandra.auth.jmx

Fields in org.apache.cassandra.auth.jmx with type parameters of type RoleResource

Modifier and Type	Field	Description
protected Function<RoleResource,Set<PermissionDetails>>	AuthorizationProxy.getPermissions
protected Predicate<RoleResource>	AuthorizationProxy.isSuperuser

Uses of RoleResource in org.apache.cassandra.cql3.statements

Fields in org.apache.cassandra.cql3.statements declared as RoleResource

Modifier and Type	Field	Description
protected final RoleResource	PermissionsManagementStatement.grantee
protected final RoleResource	RoleManagementStatement.grantee
protected final RoleResource	RoleManagementStatement.role

Methods in org.apache.cassandra.cql3.statements with parameters of type RoleResource

Modifier and Type	Method	Description
void	AuthenticationStatement.checkPermission(ClientState state, Permission required, RoleResource resource)

Method parameters in org.apache.cassandra.cql3.statements with type arguments of type RoleResource

Modifier and Type	Method	Description
protected ResultMessage	ListRolesStatement.formatResults(List<RoleResource> sortedRoles)
protected ResultMessage	ListUsersStatement.formatResults(List<RoleResource> sortedRoles)