Module org.elasticsearch.security

Package org.elasticsearch.xpack.security.authz.interceptor

Class ViewAndDatasetDlsFlsRequestInterceptor

java.lang.Object

org.elasticsearch.xpack.security.authz.interceptor.ViewAndDatasetDlsFlsRequestInterceptor

All Implemented Interfaces:

RequestInterceptor

public class ViewAndDatasetDlsFlsRequestInterceptor
extends Object
implements RequestInterceptor

An interceptor which checks if the requested views or datasets have any DLS or FLS permissions applied. If so, then the request is rejected, because views and datasets are not compatible with DLS or FLS.

Constructor Summary

Constructors

Constructor	Description
ViewAndDatasetDlsFlsRequestInterceptor(ThreadContext threadContext, Supplier<ProjectMetadata> projectMetadataSupplier)

Method Summary

Modifier and Type	Method	Description
SubscribableListener<Void>	intercept(AuthorizationEngine.RequestInfo requestInfo, AuthorizationEngine authorizationEngine, AuthorizationEngine.AuthorizationInfo authorizationInfo)	This interceptor will introspect the request and potentially modify it.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ViewAndDatasetDlsFlsRequestInterceptor

public ViewAndDatasetDlsFlsRequestInterceptor(ThreadContext threadContext,
 Supplier<ProjectMetadata> projectMetadataSupplier)

Method Details

intercept

public SubscribableListener<Void> intercept(AuthorizationEngine.RequestInfo requestInfo,
 AuthorizationEngine authorizationEngine,
 AuthorizationEngine.AuthorizationInfo authorizationInfo)

Description copied from interface: RequestInterceptor

This interceptor will introspect the request and potentially modify it. If the interceptor does not apply to the request then the request will not be modified.

Specified by:

intercept in interface RequestInterceptor