You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by gi...@apache.org on 2018/12/08 14:51:24 UTC
[10/29] hbase-site git commit: Published site at
79d90c87b5bc6d4aa50e6edc52a3f20da708ee29.
http://git-wip-us.apache.org/repos/asf/hbase-site/blob/3defc75b/devapidocs/src-html/org/apache/hadoop/hbase/security/access/CoprocessorWhitelistMasterObserver.html
----------------------------------------------------------------------
diff --git a/devapidocs/src-html/org/apache/hadoop/hbase/security/access/CoprocessorWhitelistMasterObserver.html b/devapidocs/src-html/org/apache/hadoop/hbase/security/access/CoprocessorWhitelistMasterObserver.html
index 0311ee8..7f2d68a 100644
--- a/devapidocs/src-html/org/apache/hadoop/hbase/security/access/CoprocessorWhitelistMasterObserver.html
+++ b/devapidocs/src-html/org/apache/hadoop/hbase/security/access/CoprocessorWhitelistMasterObserver.html
@@ -62,113 +62,114 @@
<span class="sourceLineNo">054</span> }<a name="line.54"></a>
<span class="sourceLineNo">055</span><a name="line.55"></a>
<span class="sourceLineNo">056</span> @Override<a name="line.56"></a>
-<span class="sourceLineNo">057</span> public void preModifyTable(ObserverContext<MasterCoprocessorEnvironment> ctx,<a name="line.57"></a>
+<span class="sourceLineNo">057</span> public TableDescriptor preModifyTable(ObserverContext<MasterCoprocessorEnvironment> ctx,<a name="line.57"></a>
<span class="sourceLineNo">058</span> TableName tableName, TableDescriptor currentDesc, TableDescriptor newDesc)<a name="line.58"></a>
-<span class="sourceLineNo">059</span> throws IOException {<a name="line.59"></a>
+<span class="sourceLineNo">059</span> throws IOException {<a name="line.59"></a>
<span class="sourceLineNo">060</span> verifyCoprocessors(ctx, newDesc);<a name="line.60"></a>
-<span class="sourceLineNo">061</span> }<a name="line.61"></a>
-<span class="sourceLineNo">062</span><a name="line.62"></a>
-<span class="sourceLineNo">063</span> @Override<a name="line.63"></a>
-<span class="sourceLineNo">064</span> public void preCreateTable(ObserverContext<MasterCoprocessorEnvironment> ctx,<a name="line.64"></a>
-<span class="sourceLineNo">065</span> TableDescriptor htd, RegionInfo[] regions) throws IOException {<a name="line.65"></a>
-<span class="sourceLineNo">066</span> verifyCoprocessors(ctx, htd);<a name="line.66"></a>
-<span class="sourceLineNo">067</span> }<a name="line.67"></a>
-<span class="sourceLineNo">068</span><a name="line.68"></a>
-<span class="sourceLineNo">069</span> /**<a name="line.69"></a>
-<span class="sourceLineNo">070</span> * Validates a single whitelist path against the coprocessor path<a name="line.70"></a>
-<span class="sourceLineNo">071</span> * @param coprocPath the path to the coprocessor including scheme<a name="line.71"></a>
-<span class="sourceLineNo">072</span> * @param wlPath can be:<a name="line.72"></a>
-<span class="sourceLineNo">073</span> * 1) a "*" to wildcard all coprocessor paths<a name="line.73"></a>
-<span class="sourceLineNo">074</span> * 2) a specific filesystem (e.g. hdfs://my-cluster/)<a name="line.74"></a>
-<span class="sourceLineNo">075</span> * 3) a wildcard path to be evaluated by<a name="line.75"></a>
-<span class="sourceLineNo">076</span> * {@link FilenameUtils#wildcardMatch(String, String)}<a name="line.76"></a>
-<span class="sourceLineNo">077</span> * path can specify scheme or not (e.g.<a name="line.77"></a>
-<span class="sourceLineNo">078</span> * "file:///usr/hbase/coprocessors" or for all<a name="line.78"></a>
-<span class="sourceLineNo">079</span> * filesystems "/usr/hbase/coprocessors")<a name="line.79"></a>
-<span class="sourceLineNo">080</span> * @return if the path was found under the wlPath<a name="line.80"></a>
-<span class="sourceLineNo">081</span> */<a name="line.81"></a>
-<span class="sourceLineNo">082</span> private static boolean validatePath(Path coprocPath, Path wlPath) {<a name="line.82"></a>
-<span class="sourceLineNo">083</span> // verify if all are allowed<a name="line.83"></a>
-<span class="sourceLineNo">084</span> if (wlPath.toString().equals("*")) {<a name="line.84"></a>
-<span class="sourceLineNo">085</span> return(true);<a name="line.85"></a>
-<span class="sourceLineNo">086</span> }<a name="line.86"></a>
-<span class="sourceLineNo">087</span><a name="line.87"></a>
-<span class="sourceLineNo">088</span> // verify we are on the same filesystem if wlPath has a scheme<a name="line.88"></a>
-<span class="sourceLineNo">089</span> if (!wlPath.isAbsoluteAndSchemeAuthorityNull()) {<a name="line.89"></a>
-<span class="sourceLineNo">090</span> String wlPathScheme = wlPath.toUri().getScheme();<a name="line.90"></a>
-<span class="sourceLineNo">091</span> String coprocPathScheme = coprocPath.toUri().getScheme();<a name="line.91"></a>
-<span class="sourceLineNo">092</span> String wlPathHost = wlPath.toUri().getHost();<a name="line.92"></a>
-<span class="sourceLineNo">093</span> String coprocPathHost = coprocPath.toUri().getHost();<a name="line.93"></a>
-<span class="sourceLineNo">094</span> if (wlPathScheme != null) {<a name="line.94"></a>
-<span class="sourceLineNo">095</span> wlPathScheme = wlPathScheme.toString().toLowerCase();<a name="line.95"></a>
-<span class="sourceLineNo">096</span> } else {<a name="line.96"></a>
-<span class="sourceLineNo">097</span> wlPathScheme = "";<a name="line.97"></a>
-<span class="sourceLineNo">098</span> }<a name="line.98"></a>
-<span class="sourceLineNo">099</span> if (wlPathHost != null) {<a name="line.99"></a>
-<span class="sourceLineNo">100</span> wlPathHost = wlPathHost.toString().toLowerCase();<a name="line.100"></a>
-<span class="sourceLineNo">101</span> } else {<a name="line.101"></a>
-<span class="sourceLineNo">102</span> wlPathHost = "";<a name="line.102"></a>
-<span class="sourceLineNo">103</span> }<a name="line.103"></a>
-<span class="sourceLineNo">104</span> if (coprocPathScheme != null) {<a name="line.104"></a>
-<span class="sourceLineNo">105</span> coprocPathScheme = coprocPathScheme.toString().toLowerCase();<a name="line.105"></a>
-<span class="sourceLineNo">106</span> } else {<a name="line.106"></a>
-<span class="sourceLineNo">107</span> coprocPathScheme = "";<a name="line.107"></a>
-<span class="sourceLineNo">108</span> }<a name="line.108"></a>
-<span class="sourceLineNo">109</span> if (coprocPathHost != null) {<a name="line.109"></a>
-<span class="sourceLineNo">110</span> coprocPathHost = coprocPathHost.toString().toLowerCase();<a name="line.110"></a>
-<span class="sourceLineNo">111</span> } else {<a name="line.111"></a>
-<span class="sourceLineNo">112</span> coprocPathHost = "";<a name="line.112"></a>
-<span class="sourceLineNo">113</span> }<a name="line.113"></a>
-<span class="sourceLineNo">114</span> if (!wlPathScheme.equals(coprocPathScheme) || !wlPathHost.equals(coprocPathHost)) {<a name="line.114"></a>
-<span class="sourceLineNo">115</span> return(false);<a name="line.115"></a>
-<span class="sourceLineNo">116</span> }<a name="line.116"></a>
-<span class="sourceLineNo">117</span> }<a name="line.117"></a>
-<span class="sourceLineNo">118</span><a name="line.118"></a>
-<span class="sourceLineNo">119</span> // allow any on this file-system (file systems were verified to be the same above)<a name="line.119"></a>
-<span class="sourceLineNo">120</span> if (wlPath.isRoot()) {<a name="line.120"></a>
-<span class="sourceLineNo">121</span> return(true);<a name="line.121"></a>
-<span class="sourceLineNo">122</span> }<a name="line.122"></a>
-<span class="sourceLineNo">123</span><a name="line.123"></a>
-<span class="sourceLineNo">124</span> // allow "loose" matches stripping scheme<a name="line.124"></a>
-<span class="sourceLineNo">125</span> if (FilenameUtils.wildcardMatch(<a name="line.125"></a>
-<span class="sourceLineNo">126</span> Path.getPathWithoutSchemeAndAuthority(coprocPath).toString(),<a name="line.126"></a>
-<span class="sourceLineNo">127</span> Path.getPathWithoutSchemeAndAuthority(wlPath).toString())) {<a name="line.127"></a>
-<span class="sourceLineNo">128</span> return(true);<a name="line.128"></a>
-<span class="sourceLineNo">129</span> }<a name="line.129"></a>
-<span class="sourceLineNo">130</span> return(false);<a name="line.130"></a>
-<span class="sourceLineNo">131</span> }<a name="line.131"></a>
-<span class="sourceLineNo">132</span><a name="line.132"></a>
-<span class="sourceLineNo">133</span> /**<a name="line.133"></a>
-<span class="sourceLineNo">134</span> * Perform the validation checks for a coprocessor to determine if the path<a name="line.134"></a>
-<span class="sourceLineNo">135</span> * is white listed or not.<a name="line.135"></a>
-<span class="sourceLineNo">136</span> * @throws IOException if path is not included in whitelist or a failure<a name="line.136"></a>
-<span class="sourceLineNo">137</span> * occurs in processing<a name="line.137"></a>
-<span class="sourceLineNo">138</span> * @param ctx as passed in from the coprocessor<a name="line.138"></a>
-<span class="sourceLineNo">139</span> * @param htd as passed in from the coprocessor<a name="line.139"></a>
-<span class="sourceLineNo">140</span> */<a name="line.140"></a>
-<span class="sourceLineNo">141</span> private static void verifyCoprocessors(ObserverContext<MasterCoprocessorEnvironment> ctx,<a name="line.141"></a>
-<span class="sourceLineNo">142</span> TableDescriptor htd) throws IOException {<a name="line.142"></a>
-<span class="sourceLineNo">143</span> Collection<String> paths =<a name="line.143"></a>
-<span class="sourceLineNo">144</span> ctx.getEnvironment().getConfiguration().getStringCollection(<a name="line.144"></a>
-<span class="sourceLineNo">145</span> CP_COPROCESSOR_WHITELIST_PATHS_KEY);<a name="line.145"></a>
-<span class="sourceLineNo">146</span> for (CoprocessorDescriptor cp : htd.getCoprocessorDescriptors()) {<a name="line.146"></a>
-<span class="sourceLineNo">147</span> if (cp.getJarPath().isPresent()) {<a name="line.147"></a>
-<span class="sourceLineNo">148</span> if (paths.stream().noneMatch(p -> {<a name="line.148"></a>
-<span class="sourceLineNo">149</span> Path wlPath = new Path(p);<a name="line.149"></a>
-<span class="sourceLineNo">150</span> if (validatePath(new Path(cp.getJarPath().get()), wlPath)) {<a name="line.150"></a>
-<span class="sourceLineNo">151</span> LOG.debug(String.format("Coprocessor %s found in directory %s",<a name="line.151"></a>
-<span class="sourceLineNo">152</span> cp.getClassName(), p));<a name="line.152"></a>
-<span class="sourceLineNo">153</span> return true;<a name="line.153"></a>
-<span class="sourceLineNo">154</span> }<a name="line.154"></a>
-<span class="sourceLineNo">155</span> return false;<a name="line.155"></a>
-<span class="sourceLineNo">156</span> })) {<a name="line.156"></a>
-<span class="sourceLineNo">157</span> throw new IOException(String.format("Loading %s DENIED in %s",<a name="line.157"></a>
-<span class="sourceLineNo">158</span> cp.getClassName(), CP_COPROCESSOR_WHITELIST_PATHS_KEY));<a name="line.158"></a>
-<span class="sourceLineNo">159</span> }<a name="line.159"></a>
-<span class="sourceLineNo">160</span> }<a name="line.160"></a>
-<span class="sourceLineNo">161</span> }<a name="line.161"></a>
-<span class="sourceLineNo">162</span> }<a name="line.162"></a>
-<span class="sourceLineNo">163</span>}<a name="line.163"></a>
+<span class="sourceLineNo">061</span> return newDesc;<a name="line.61"></a>
+<span class="sourceLineNo">062</span> }<a name="line.62"></a>
+<span class="sourceLineNo">063</span><a name="line.63"></a>
+<span class="sourceLineNo">064</span> @Override<a name="line.64"></a>
+<span class="sourceLineNo">065</span> public void preCreateTable(ObserverContext<MasterCoprocessorEnvironment> ctx,<a name="line.65"></a>
+<span class="sourceLineNo">066</span> TableDescriptor htd, RegionInfo[] regions) throws IOException {<a name="line.66"></a>
+<span class="sourceLineNo">067</span> verifyCoprocessors(ctx, htd);<a name="line.67"></a>
+<span class="sourceLineNo">068</span> }<a name="line.68"></a>
+<span class="sourceLineNo">069</span><a name="line.69"></a>
+<span class="sourceLineNo">070</span> /**<a name="line.70"></a>
+<span class="sourceLineNo">071</span> * Validates a single whitelist path against the coprocessor path<a name="line.71"></a>
+<span class="sourceLineNo">072</span> * @param coprocPath the path to the coprocessor including scheme<a name="line.72"></a>
+<span class="sourceLineNo">073</span> * @param wlPath can be:<a name="line.73"></a>
+<span class="sourceLineNo">074</span> * 1) a "*" to wildcard all coprocessor paths<a name="line.74"></a>
+<span class="sourceLineNo">075</span> * 2) a specific filesystem (e.g. hdfs://my-cluster/)<a name="line.75"></a>
+<span class="sourceLineNo">076</span> * 3) a wildcard path to be evaluated by<a name="line.76"></a>
+<span class="sourceLineNo">077</span> * {@link FilenameUtils#wildcardMatch(String, String)}<a name="line.77"></a>
+<span class="sourceLineNo">078</span> * path can specify scheme or not (e.g.<a name="line.78"></a>
+<span class="sourceLineNo">079</span> * "file:///usr/hbase/coprocessors" or for all<a name="line.79"></a>
+<span class="sourceLineNo">080</span> * filesystems "/usr/hbase/coprocessors")<a name="line.80"></a>
+<span class="sourceLineNo">081</span> * @return if the path was found under the wlPath<a name="line.81"></a>
+<span class="sourceLineNo">082</span> */<a name="line.82"></a>
+<span class="sourceLineNo">083</span> private static boolean validatePath(Path coprocPath, Path wlPath) {<a name="line.83"></a>
+<span class="sourceLineNo">084</span> // verify if all are allowed<a name="line.84"></a>
+<span class="sourceLineNo">085</span> if (wlPath.toString().equals("*")) {<a name="line.85"></a>
+<span class="sourceLineNo">086</span> return(true);<a name="line.86"></a>
+<span class="sourceLineNo">087</span> }<a name="line.87"></a>
+<span class="sourceLineNo">088</span><a name="line.88"></a>
+<span class="sourceLineNo">089</span> // verify we are on the same filesystem if wlPath has a scheme<a name="line.89"></a>
+<span class="sourceLineNo">090</span> if (!wlPath.isAbsoluteAndSchemeAuthorityNull()) {<a name="line.90"></a>
+<span class="sourceLineNo">091</span> String wlPathScheme = wlPath.toUri().getScheme();<a name="line.91"></a>
+<span class="sourceLineNo">092</span> String coprocPathScheme = coprocPath.toUri().getScheme();<a name="line.92"></a>
+<span class="sourceLineNo">093</span> String wlPathHost = wlPath.toUri().getHost();<a name="line.93"></a>
+<span class="sourceLineNo">094</span> String coprocPathHost = coprocPath.toUri().getHost();<a name="line.94"></a>
+<span class="sourceLineNo">095</span> if (wlPathScheme != null) {<a name="line.95"></a>
+<span class="sourceLineNo">096</span> wlPathScheme = wlPathScheme.toString().toLowerCase();<a name="line.96"></a>
+<span class="sourceLineNo">097</span> } else {<a name="line.97"></a>
+<span class="sourceLineNo">098</span> wlPathScheme = "";<a name="line.98"></a>
+<span class="sourceLineNo">099</span> }<a name="line.99"></a>
+<span class="sourceLineNo">100</span> if (wlPathHost != null) {<a name="line.100"></a>
+<span class="sourceLineNo">101</span> wlPathHost = wlPathHost.toString().toLowerCase();<a name="line.101"></a>
+<span class="sourceLineNo">102</span> } else {<a name="line.102"></a>
+<span class="sourceLineNo">103</span> wlPathHost = "";<a name="line.103"></a>
+<span class="sourceLineNo">104</span> }<a name="line.104"></a>
+<span class="sourceLineNo">105</span> if (coprocPathScheme != null) {<a name="line.105"></a>
+<span class="sourceLineNo">106</span> coprocPathScheme = coprocPathScheme.toString().toLowerCase();<a name="line.106"></a>
+<span class="sourceLineNo">107</span> } else {<a name="line.107"></a>
+<span class="sourceLineNo">108</span> coprocPathScheme = "";<a name="line.108"></a>
+<span class="sourceLineNo">109</span> }<a name="line.109"></a>
+<span class="sourceLineNo">110</span> if (coprocPathHost != null) {<a name="line.110"></a>
+<span class="sourceLineNo">111</span> coprocPathHost = coprocPathHost.toString().toLowerCase();<a name="line.111"></a>
+<span class="sourceLineNo">112</span> } else {<a name="line.112"></a>
+<span class="sourceLineNo">113</span> coprocPathHost = "";<a name="line.113"></a>
+<span class="sourceLineNo">114</span> }<a name="line.114"></a>
+<span class="sourceLineNo">115</span> if (!wlPathScheme.equals(coprocPathScheme) || !wlPathHost.equals(coprocPathHost)) {<a name="line.115"></a>
+<span class="sourceLineNo">116</span> return(false);<a name="line.116"></a>
+<span class="sourceLineNo">117</span> }<a name="line.117"></a>
+<span class="sourceLineNo">118</span> }<a name="line.118"></a>
+<span class="sourceLineNo">119</span><a name="line.119"></a>
+<span class="sourceLineNo">120</span> // allow any on this file-system (file systems were verified to be the same above)<a name="line.120"></a>
+<span class="sourceLineNo">121</span> if (wlPath.isRoot()) {<a name="line.121"></a>
+<span class="sourceLineNo">122</span> return(true);<a name="line.122"></a>
+<span class="sourceLineNo">123</span> }<a name="line.123"></a>
+<span class="sourceLineNo">124</span><a name="line.124"></a>
+<span class="sourceLineNo">125</span> // allow "loose" matches stripping scheme<a name="line.125"></a>
+<span class="sourceLineNo">126</span> if (FilenameUtils.wildcardMatch(<a name="line.126"></a>
+<span class="sourceLineNo">127</span> Path.getPathWithoutSchemeAndAuthority(coprocPath).toString(),<a name="line.127"></a>
+<span class="sourceLineNo">128</span> Path.getPathWithoutSchemeAndAuthority(wlPath).toString())) {<a name="line.128"></a>
+<span class="sourceLineNo">129</span> return(true);<a name="line.129"></a>
+<span class="sourceLineNo">130</span> }<a name="line.130"></a>
+<span class="sourceLineNo">131</span> return(false);<a name="line.131"></a>
+<span class="sourceLineNo">132</span> }<a name="line.132"></a>
+<span class="sourceLineNo">133</span><a name="line.133"></a>
+<span class="sourceLineNo">134</span> /**<a name="line.134"></a>
+<span class="sourceLineNo">135</span> * Perform the validation checks for a coprocessor to determine if the path<a name="line.135"></a>
+<span class="sourceLineNo">136</span> * is white listed or not.<a name="line.136"></a>
+<span class="sourceLineNo">137</span> * @throws IOException if path is not included in whitelist or a failure<a name="line.137"></a>
+<span class="sourceLineNo">138</span> * occurs in processing<a name="line.138"></a>
+<span class="sourceLineNo">139</span> * @param ctx as passed in from the coprocessor<a name="line.139"></a>
+<span class="sourceLineNo">140</span> * @param htd as passed in from the coprocessor<a name="line.140"></a>
+<span class="sourceLineNo">141</span> */<a name="line.141"></a>
+<span class="sourceLineNo">142</span> private static void verifyCoprocessors(ObserverContext<MasterCoprocessorEnvironment> ctx,<a name="line.142"></a>
+<span class="sourceLineNo">143</span> TableDescriptor htd) throws IOException {<a name="line.143"></a>
+<span class="sourceLineNo">144</span> Collection<String> paths =<a name="line.144"></a>
+<span class="sourceLineNo">145</span> ctx.getEnvironment().getConfiguration().getStringCollection(<a name="line.145"></a>
+<span class="sourceLineNo">146</span> CP_COPROCESSOR_WHITELIST_PATHS_KEY);<a name="line.146"></a>
+<span class="sourceLineNo">147</span> for (CoprocessorDescriptor cp : htd.getCoprocessorDescriptors()) {<a name="line.147"></a>
+<span class="sourceLineNo">148</span> if (cp.getJarPath().isPresent()) {<a name="line.148"></a>
+<span class="sourceLineNo">149</span> if (paths.stream().noneMatch(p -> {<a name="line.149"></a>
+<span class="sourceLineNo">150</span> Path wlPath = new Path(p);<a name="line.150"></a>
+<span class="sourceLineNo">151</span> if (validatePath(new Path(cp.getJarPath().get()), wlPath)) {<a name="line.151"></a>
+<span class="sourceLineNo">152</span> LOG.debug(String.format("Coprocessor %s found in directory %s",<a name="line.152"></a>
+<span class="sourceLineNo">153</span> cp.getClassName(), p));<a name="line.153"></a>
+<span class="sourceLineNo">154</span> return true;<a name="line.154"></a>
+<span class="sourceLineNo">155</span> }<a name="line.155"></a>
+<span class="sourceLineNo">156</span> return false;<a name="line.156"></a>
+<span class="sourceLineNo">157</span> })) {<a name="line.157"></a>
+<span class="sourceLineNo">158</span> throw new IOException(String.format("Loading %s DENIED in %s",<a name="line.158"></a>
+<span class="sourceLineNo">159</span> cp.getClassName(), CP_COPROCESSOR_WHITELIST_PATHS_KEY));<a name="line.159"></a>
+<span class="sourceLineNo">160</span> }<a name="line.160"></a>
+<span class="sourceLineNo">161</span> }<a name="line.161"></a>
+<span class="sourceLineNo">162</span> }<a name="line.162"></a>
+<span class="sourceLineNo">163</span> }<a name="line.163"></a>
+<span class="sourceLineNo">164</span>}<a name="line.164"></a>