Java ClientState.getUser方法代码示例

import org.apache.cassandra.service.ClientState; //导入方法依赖的package包/类
public void checkAccess(ClientState state) throws UnauthorizedException
{
    AuthenticatedUser user = state.getUser();

    boolean isSuper = user.isSuper();

    if (superuser != null && user.getName().equals(username))
        throw new UnauthorizedException("You aren't allowed to alter your own superuser status");

    if (superuser != null && !isSuper)
        throw new UnauthorizedException("Only superusers are allowed to alter superuser status");

    if (!user.isSuper() && !user.getName().equals(username))
        throw new UnauthorizedException("You aren't allowed to alter this user");

    if (!isSuper)
    {
        for (IAuthenticator.Option option : opts.getOptions().keySet())
        {
            if (!DatabaseDescriptor.getAuthenticator().alterableOptions().contains(option))
                throw new UnauthorizedException(String.format("You aren't allowed to alter %s option", option));
        }
    }
}
 

import org.apache.cassandra.service.ClientState; //导入方法依赖的package包/类
public void validate(ClientState state) throws RequestValidationException
{
    // validate login here before checkAccess to avoid leaking user existence to anonymous users.
    state.ensureNotAnonymous();

    if (!ifExists && !Auth.isExistingUser(username))
        throw new InvalidRequestException(String.format("User %s doesn't exist", username));

    AuthenticatedUser user = state.getUser();
    if (user != null && user.getName().equals(username))
        throw new InvalidRequestException("Users aren't allowed to DROP themselves");
}
 

import org.apache.cassandra.service.ClientState; //导入方法依赖的package包/类
public void validate(ClientState state) throws RequestValidationException
{
    // validate login here before checkAccess to avoid leaking user existence to anonymous users.
    state.ensureNotAnonymous();

    if (!Auth.isExistingUser(username))
        throw new InvalidRequestException(String.format("User %s doesn't exist", username));

    AuthenticatedUser user = state.getUser();
    if (user != null && user.getName().equals(username))
        throw new InvalidRequestException("Users aren't allowed to DROP themselves");
}
 

import org.apache.cassandra.service.ClientState; //导入方法依赖的package包/类
public void checkAccess(ClientState state) throws UnauthorizedException
{
    AuthenticatedUser user = state.getUser();
    boolean isSuper = user.isSuper();

    if (opts.getSuperuser().isPresent() && user.getRoles().contains(role))
        throw new UnauthorizedException("You aren't allowed to alter your own superuser " +
                                        "status or that of a role granted to you");

    if (opts.getSuperuser().isPresent() && !isSuper)
        throw new UnauthorizedException("Only superusers are allowed to alter superuser status");

    // superusers can do whatever else they like
    if (isSuper)
        return;

    // a role may only modify the subset of its own attributes as determined by IRoleManager#alterableOptions
    if (user.getName().equals(role.getRoleName()))
    {
        for (Option option : opts.getOptions().keySet())
        {
            if (!DatabaseDescriptor.getRoleManager().alterableOptions().contains(option))
                throw new UnauthorizedException(String.format("You aren't allowed to alter %s", option));
        }
    }
    else
    {
        // if not attempting to alter another role, ensure we have ALTER permissions on it
        super.checkPermission(state, Permission.ALTER, role);
    }
}
 

import org.apache.cassandra.service.ClientState; //导入方法依赖的package包/类
public void validate(ClientState state) throws RequestValidationException
{
    // validate login here before checkAccess to avoid leaking user existence to anonymous users.
    state.ensureNotAnonymous();

    if (!ifExists && !DatabaseDescriptor.getRoleManager().isExistingRole(role))
        throw new InvalidRequestException(String.format("%s doesn't exist", role.getRoleName()));

    AuthenticatedUser user = state.getUser();
    if (user != null && user.getName().equals(role.getRoleName()))
        throw new InvalidRequestException("Cannot DROP primary role for current login");
}