1 /* 2 * Licensed to the Apache Software Foundation (ASF) under one 3 * or more contributor license agreements. See the NOTICE file 4 * distributed with this work for additional information 5 * regarding copyright ownership. The ASF licenses this file 6 * to you under the Apache License, Version 2.0 (the 7 * "License"); you may not use this file except in compliance 8 * with the License. You may obtain a copy of the License at 9 * 10 * http://www.apache.org/licenses/LICENSE-2.0 11 * 12 * Unless required by applicable law or agreed to in writing, software 13 * distributed under the License is distributed on an "AS IS" BASIS, 14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 * See the License for the specific language governing permissions and 16 * limitations under the License. 17 */ 18 19 package org.apache.hadoop.hbase.security.access; 20 21 import org.apache.hadoop.hbase.classification.InterfaceAudience; 22 import org.apache.hadoop.hbase.classification.InterfaceStability; 23 24 @InterfaceAudience.Public 25 @InterfaceStability.Evolving 26 public interface AccessControlConstants { 27 28 /** 29 * Configuration option that toggles whether EXEC permission checking is 30 * performed during coprocessor endpoint invocations. 31 */ 32 public static final String EXEC_PERMISSION_CHECKS_KEY = "hbase.security.exec.permission.checks"; 33 /** Default setting for hbase.security.exec.permission.checks; false */ 34 public static final boolean DEFAULT_EXEC_PERMISSION_CHECKS = false; 35 36 /** 37 * Configuration or CF schema option for early termination of access checks 38 * if table or CF permissions grant access. Pre-0.98 compatible behavior 39 */ 40 public static final String CF_ATTRIBUTE_EARLY_OUT = "hbase.security.access.early_out"; 41 /** Default setting for hbase.security.access.early_out */ 42 public static final boolean DEFAULT_ATTRIBUTE_EARLY_OUT = true; 43 44 // Operation attributes for cell level security 45 46 /** Cell level ACL */ 47 public static final String OP_ATTRIBUTE_ACL = "acl"; 48 /** Cell level ACL evaluation strategy */ 49 public static final String OP_ATTRIBUTE_ACL_STRATEGY = "acl.strategy"; 50 /** Default cell ACL evaluation strategy: Table and CF first, then ACL */ 51 public static final byte[] OP_ATTRIBUTE_ACL_STRATEGY_DEFAULT = new byte[] { 0 }; 52 /** Alternate cell ACL evaluation strategy: Cell ACL first, then table and CF */ 53 public static final byte[] OP_ATTRIBUTE_ACL_STRATEGY_CELL_FIRST = new byte[] { 1 }; 54 55 } 56