http://git-wip-us.apache.org/repos/asf/hbase-site/blob/9943f14f/devapidocs/src-html/org/apache/hadoop/hbase/security/access/ZKPermissionWatcher.html ---------------------------------------------------------------------- diff --git a/devapidocs/src-html/org/apache/hadoop/hbase/security/access/ZKPermissionWatcher.html b/devapidocs/src-html/org/apache/hadoop/hbase/security/access/ZKPermissionWatcher.html index 5bd3e3e..a17d99d 100644 --- a/devapidocs/src-html/org/apache/hadoop/hbase/security/access/ZKPermissionWatcher.html +++ b/devapidocs/src-html/org/apache/hadoop/hbase/security/access/ZKPermissionWatcher.html @@ -46,279 +46,276 @@ <span class="sourceLineNo">038</span>import java.util.concurrent.ExecutionException;<a name="line.38"></a> <span class="sourceLineNo">039</span>import java.util.concurrent.ExecutorService;<a name="line.39"></a> <span class="sourceLineNo">040</span>import java.util.concurrent.Executors;<a name="line.40"></a> -<span class="sourceLineNo">041</span>import java.util.concurrent.RejectedExecutionException;<a name="line.41"></a> -<span class="sourceLineNo">042</span>import java.util.concurrent.atomic.AtomicReference;<a name="line.42"></a> -<span class="sourceLineNo">043</span><a name="line.43"></a> -<span class="sourceLineNo">044</span>/**<a name="line.44"></a> -<span class="sourceLineNo">045</span> * Handles synchronization of access control list entries and updates<a name="line.45"></a> -<span class="sourceLineNo">046</span> * throughout all nodes in the cluster. The {@link AccessController} instance<a name="line.46"></a> -<span class="sourceLineNo">047</span> * on the {@code _acl_} table regions, creates a znode for each table as<a name="line.47"></a> -<span class="sourceLineNo">048</span> * {@code /hbase/acl/tablename}, with the znode data containing a serialized<a name="line.48"></a> -<span class="sourceLineNo">049</span> * list of the permissions granted for the table. The {@code AccessController}<a name="line.49"></a> -<span class="sourceLineNo">050</span> * instances on all other cluster hosts watch the znodes for updates, which<a name="line.50"></a> -<span class="sourceLineNo">051</span> * trigger updates in the {@link TableAuthManager} permission cache.<a name="line.51"></a> -<span class="sourceLineNo">052</span> */<a name="line.52"></a> -<span class="sourceLineNo">053</span>@InterfaceAudience.Private<a name="line.53"></a> -<span class="sourceLineNo">054</span>public class ZKPermissionWatcher extends ZooKeeperListener implements Closeable {<a name="line.54"></a> -<span class="sourceLineNo">055</span> private static final Log LOG = LogFactory.getLog(ZKPermissionWatcher.class);<a name="line.55"></a> -<span class="sourceLineNo">056</span> // parent node for permissions lists<a name="line.56"></a> -<span class="sourceLineNo">057</span> static final String ACL_NODE = "acl";<a name="line.57"></a> -<span class="sourceLineNo">058</span> TableAuthManager authManager;<a name="line.58"></a> -<span class="sourceLineNo">059</span> String aclZNode;<a name="line.59"></a> -<span class="sourceLineNo">060</span> CountDownLatch initialized = new CountDownLatch(1);<a name="line.60"></a> -<span class="sourceLineNo">061</span> AtomicReference<List<ZKUtil.NodeAndData>> nodes = new AtomicReference<>(null);<a name="line.61"></a> -<span class="sourceLineNo">062</span> ExecutorService executor;<a name="line.62"></a> -<span class="sourceLineNo">063</span><a name="line.63"></a> -<span class="sourceLineNo">064</span> public ZKPermissionWatcher(ZooKeeperWatcher watcher,<a name="line.64"></a> -<span class="sourceLineNo">065</span> TableAuthManager authManager, Configuration conf) {<a name="line.65"></a> -<span class="sourceLineNo">066</span> super(watcher);<a name="line.66"></a> -<span class="sourceLineNo">067</span> this.authManager = authManager;<a name="line.67"></a> -<span class="sourceLineNo">068</span> String aclZnodeParent = conf.get("zookeeper.znode.acl.parent", ACL_NODE);<a name="line.68"></a> -<span class="sourceLineNo">069</span> this.aclZNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, aclZnodeParent);<a name="line.69"></a> -<span class="sourceLineNo">070</span> executor = Executors.newSingleThreadExecutor(<a name="line.70"></a> -<span class="sourceLineNo">071</span> new DaemonThreadFactory("zk-permission-watcher"));<a name="line.71"></a> -<span class="sourceLineNo">072</span> }<a name="line.72"></a> -<span class="sourceLineNo">073</span><a name="line.73"></a> -<span class="sourceLineNo">074</span> public void start() throws KeeperException {<a name="line.74"></a> -<span class="sourceLineNo">075</span> try {<a name="line.75"></a> -<span class="sourceLineNo">076</span> watcher.registerListener(this);<a name="line.76"></a> -<span class="sourceLineNo">077</span> if (ZKUtil.watchAndCheckExists(watcher, aclZNode)) {<a name="line.77"></a> -<span class="sourceLineNo">078</span> try {<a name="line.78"></a> -<span class="sourceLineNo">079</span> executor.submit(new Callable<Void>() {<a name="line.79"></a> -<span class="sourceLineNo">080</span> @Override<a name="line.80"></a> -<span class="sourceLineNo">081</span> public Void call() throws KeeperException {<a name="line.81"></a> -<span class="sourceLineNo">082</span> List<ZKUtil.NodeAndData> existing =<a name="line.82"></a> -<span class="sourceLineNo">083</span> ZKUtil.getChildDataAndWatchForNewChildren(watcher, aclZNode);<a name="line.83"></a> -<span class="sourceLineNo">084</span> if (existing != null) {<a name="line.84"></a> -<span class="sourceLineNo">085</span> refreshNodes(existing, null);<a name="line.85"></a> -<span class="sourceLineNo">086</span> }<a name="line.86"></a> -<span class="sourceLineNo">087</span> return null;<a name="line.87"></a> -<span class="sourceLineNo">088</span> }<a name="line.88"></a> -<span class="sourceLineNo">089</span> }).get();<a name="line.89"></a> -<span class="sourceLineNo">090</span> } catch (ExecutionException ex) {<a name="line.90"></a> -<span class="sourceLineNo">091</span> if (ex.getCause() instanceof KeeperException) {<a name="line.91"></a> -<span class="sourceLineNo">092</span> throw (KeeperException)ex.getCause();<a name="line.92"></a> -<span class="sourceLineNo">093</span> } else {<a name="line.93"></a> -<span class="sourceLineNo">094</span> throw new RuntimeException(ex.getCause());<a name="line.94"></a> -<span class="sourceLineNo">095</span> }<a name="line.95"></a> -<span class="sourceLineNo">096</span> } catch (InterruptedException ex) {<a name="line.96"></a> -<span class="sourceLineNo">097</span> Thread.currentThread().interrupt();<a name="line.97"></a> -<span class="sourceLineNo">098</span> }<a name="line.98"></a> -<span class="sourceLineNo">099</span> }<a name="line.99"></a> -<span class="sourceLineNo">100</span> } finally {<a name="line.100"></a> -<span class="sourceLineNo">101</span> initialized.countDown();<a name="line.101"></a> -<span class="sourceLineNo">102</span> }<a name="line.102"></a> -<span class="sourceLineNo">103</span> }<a name="line.103"></a> -<span class="sourceLineNo">104</span><a name="line.104"></a> -<span class="sourceLineNo">105</span> @Override<a name="line.105"></a> -<span class="sourceLineNo">106</span> public void close() {<a name="line.106"></a> -<span class="sourceLineNo">107</span> executor.shutdown();<a name="line.107"></a> -<span class="sourceLineNo">108</span> }<a name="line.108"></a> -<span class="sourceLineNo">109</span><a name="line.109"></a> -<span class="sourceLineNo">110</span> private void waitUntilStarted() {<a name="line.110"></a> -<span class="sourceLineNo">111</span> try {<a name="line.111"></a> -<span class="sourceLineNo">112</span> initialized.await();<a name="line.112"></a> -<span class="sourceLineNo">113</span> } catch (InterruptedException e) {<a name="line.113"></a> -<span class="sourceLineNo">114</span> LOG.warn("Interrupted while waiting for start", e);<a name="line.114"></a> -<span class="sourceLineNo">115</span> Thread.currentThread().interrupt();<a name="line.115"></a> -<span class="sourceLineNo">116</span> }<a name="line.116"></a> -<span class="sourceLineNo">117</span> }<a name="line.117"></a> -<span class="sourceLineNo">118</span><a name="line.118"></a> -<span class="sourceLineNo">119</span> @Override<a name="line.119"></a> -<span class="sourceLineNo">120</span> public void nodeCreated(String path) {<a name="line.120"></a> -<span class="sourceLineNo">121</span> waitUntilStarted();<a name="line.121"></a> -<span class="sourceLineNo">122</span> if (path.equals(aclZNode)) {<a name="line.122"></a> -<span class="sourceLineNo">123</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.123"></a> -<span class="sourceLineNo">124</span> @Override<a name="line.124"></a> -<span class="sourceLineNo">125</span> public void run() {<a name="line.125"></a> -<span class="sourceLineNo">126</span> try {<a name="line.126"></a> -<span class="sourceLineNo">127</span> List<ZKUtil.NodeAndData> nodes =<a name="line.127"></a> -<span class="sourceLineNo">128</span> ZKUtil.getChildDataAndWatchForNewChildren(watcher, aclZNode);<a name="line.128"></a> -<span class="sourceLineNo">129</span> refreshNodes(nodes, null);<a name="line.129"></a> -<span class="sourceLineNo">130</span> } catch (KeeperException ke) {<a name="line.130"></a> -<span class="sourceLineNo">131</span> LOG.error("Error reading data from zookeeper", ke);<a name="line.131"></a> -<span class="sourceLineNo">132</span> // only option is to abort<a name="line.132"></a> -<span class="sourceLineNo">133</span> watcher.abort("ZooKeeper error obtaining acl node children", ke);<a name="line.133"></a> -<span class="sourceLineNo">134</span> }<a name="line.134"></a> -<span class="sourceLineNo">135</span> }<a name="line.135"></a> -<span class="sourceLineNo">136</span> });<a name="line.136"></a> -<span class="sourceLineNo">137</span> }<a name="line.137"></a> -<span class="sourceLineNo">138</span> }<a name="line.138"></a> -<span class="sourceLineNo">139</span><a name="line.139"></a> -<span class="sourceLineNo">140</span> @Override<a name="line.140"></a> -<span class="sourceLineNo">141</span> public void nodeDeleted(final String path) {<a name="line.141"></a> -<span class="sourceLineNo">142</span> waitUntilStarted();<a name="line.142"></a> -<span class="sourceLineNo">143</span> if (aclZNode.equals(ZKUtil.getParent(path))) {<a name="line.143"></a> -<span class="sourceLineNo">144</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.144"></a> -<span class="sourceLineNo">145</span> @Override<a name="line.145"></a> -<span class="sourceLineNo">146</span> public void run() {<a name="line.146"></a> -<span class="sourceLineNo">147</span> String table = ZKUtil.getNodeName(path);<a name="line.147"></a> -<span class="sourceLineNo">148</span> if(AccessControlLists.isNamespaceEntry(table)) {<a name="line.148"></a> -<span class="sourceLineNo">149</span> authManager.removeNamespace(Bytes.toBytes(table));<a name="line.149"></a> -<span class="sourceLineNo">150</span> } else {<a name="line.150"></a> -<span class="sourceLineNo">151</span> authManager.removeTable(TableName.valueOf(table));<a name="line.151"></a> -<span class="sourceLineNo">152</span> }<a name="line.152"></a> -<span class="sourceLineNo">153</span> }<a name="line.153"></a> -<span class="sourceLineNo">154</span> });<a name="line.154"></a> -<span class="sourceLineNo">155</span> }<a name="line.155"></a> -<span class="sourceLineNo">156</span> }<a name="line.156"></a> -<span class="sourceLineNo">157</span><a name="line.157"></a> -<span class="sourceLineNo">158</span> @Override<a name="line.158"></a> -<span class="sourceLineNo">159</span> public void nodeDataChanged(final String path) {<a name="line.159"></a> -<span class="sourceLineNo">160</span> waitUntilStarted();<a name="line.160"></a> -<span class="sourceLineNo">161</span> if (aclZNode.equals(ZKUtil.getParent(path))) {<a name="line.161"></a> -<span class="sourceLineNo">162</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.162"></a> -<span class="sourceLineNo">163</span> @Override<a name="line.163"></a> -<span class="sourceLineNo">164</span> public void run() {<a name="line.164"></a> -<span class="sourceLineNo">165</span> // update cache on an existing table node<a name="line.165"></a> -<span class="sourceLineNo">166</span> String entry = ZKUtil.getNodeName(path);<a name="line.166"></a> -<span class="sourceLineNo">167</span> try {<a name="line.167"></a> -<span class="sourceLineNo">168</span> byte[] data = ZKUtil.getDataAndWatch(watcher, path);<a name="line.168"></a> -<span class="sourceLineNo">169</span> refreshAuthManager(entry, data);<a name="line.169"></a> -<span class="sourceLineNo">170</span> } catch (KeeperException ke) {<a name="line.170"></a> -<span class="sourceLineNo">171</span> LOG.error("Error reading data from zookeeper for node " + entry, ke);<a name="line.171"></a> -<span class="sourceLineNo">172</span> // only option is to abort<a name="line.172"></a> -<span class="sourceLineNo">173</span> watcher.abort("ZooKeeper error getting data for node " + entry, ke);<a name="line.173"></a> -<span class="sourceLineNo">174</span> } catch (IOException ioe) {<a name="line.174"></a> -<span class="sourceLineNo">175</span> LOG.error("Error reading permissions writables", ioe);<a name="line.175"></a> -<span class="sourceLineNo">176</span> }<a name="line.176"></a> -<span class="sourceLineNo">177</span> }<a name="line.177"></a> -<span class="sourceLineNo">178</span> });<a name="line.178"></a> -<span class="sourceLineNo">179</span> }<a name="line.179"></a> -<span class="sourceLineNo">180</span> }<a name="line.180"></a> -<span class="sourceLineNo">181</span><a name="line.181"></a> -<span class="sourceLineNo">182</span> @Override<a name="line.182"></a> -<span class="sourceLineNo">183</span> public void nodeChildrenChanged(final String path) {<a name="line.183"></a> -<span class="sourceLineNo">184</span> waitUntilStarted();<a name="line.184"></a> -<span class="sourceLineNo">185</span> if (path.equals(aclZNode)) {<a name="line.185"></a> -<span class="sourceLineNo">186</span> try {<a name="line.186"></a> -<span class="sourceLineNo">187</span> List<ZKUtil.NodeAndData> nodeList =<a name="line.187"></a> -<span class="sourceLineNo">188</span> ZKUtil.getChildDataAndWatchForNewChildren(watcher, aclZNode);<a name="line.188"></a> -<span class="sourceLineNo">189</span> while (!nodes.compareAndSet(null, nodeList)) {<a name="line.189"></a> -<span class="sourceLineNo">190</span> try {<a name="line.190"></a> -<span class="sourceLineNo">191</span> Thread.sleep(20);<a name="line.191"></a> -<span class="sourceLineNo">192</span> } catch (InterruptedException e) {<a name="line.192"></a> -<span class="sourceLineNo">193</span> LOG.warn("Interrupted while setting node list", e);<a name="line.193"></a> -<span class="sourceLineNo">194</span> Thread.currentThread().interrupt();<a name="line.194"></a> -<span class="sourceLineNo">195</span> }<a name="line.195"></a> -<span class="sourceLineNo">196</span> }<a name="line.196"></a> -<span class="sourceLineNo">197</span> } catch (KeeperException ke) {<a name="line.197"></a> -<span class="sourceLineNo">198</span> LOG.error("Error reading data from zookeeper for path "+path, ke);<a name="line.198"></a> -<span class="sourceLineNo">199</span> watcher.abort("ZooKeeper error get node children for path "+path, ke);<a name="line.199"></a> -<span class="sourceLineNo">200</span> }<a name="line.200"></a> -<span class="sourceLineNo">201</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.201"></a> -<span class="sourceLineNo">202</span> // allows subsequent nodeChildrenChanged event to preempt current processing of<a name="line.202"></a> -<span class="sourceLineNo">203</span> // nodeChildrenChanged event<a name="line.203"></a> -<span class="sourceLineNo">204</span> @Override<a name="line.204"></a> -<span class="sourceLineNo">205</span> public void run() {<a name="line.205"></a> -<span class="sourceLineNo">206</span> List<ZKUtil.NodeAndData> nodeList = nodes.get();<a name="line.206"></a> -<span class="sourceLineNo">207</span> nodes.set(null);<a name="line.207"></a> -<span class="sourceLineNo">208</span> refreshNodes(nodeList, nodes);<a name="line.208"></a> -<span class="sourceLineNo">209</span> }<a name="line.209"></a> -<span class="sourceLineNo">210</span> });<a name="line.210"></a> -<span class="sourceLineNo">211</span> }<a name="line.211"></a> -<span class="sourceLineNo">212</span> }<a name="line.212"></a> -<span class="sourceLineNo">213</span><a name="line.213"></a> -<span class="sourceLineNo">214</span> private void asyncProcessNodeUpdate(Runnable runnable) {<a name="line.214"></a> -<span class="sourceLineNo">215</span> if (!executor.isShutdown()) {<a name="line.215"></a> -<span class="sourceLineNo">216</span> try {<a name="line.216"></a> -<span class="sourceLineNo">217</span> executor.submit(runnable);<a name="line.217"></a> -<span class="sourceLineNo">218</span> } catch (RejectedExecutionException e) {<a name="line.218"></a> -<span class="sourceLineNo">219</span> if (executor.isShutdown()) {<a name="line.219"></a> -<span class="sourceLineNo">220</span> LOG.warn("aclZNode changed after ZKPermissionWatcher was shutdown");<a name="line.220"></a> -<span class="sourceLineNo">221</span> } else {<a name="line.221"></a> -<span class="sourceLineNo">222</span> throw e;<a name="line.222"></a> -<span class="sourceLineNo">223</span> }<a name="line.223"></a> -<span class="sourceLineNo">224</span> }<a name="line.224"></a> -<span class="sourceLineNo">225</span> }<a name="line.225"></a> -<span class="sourceLineNo">226</span> }<a name="line.226"></a> -<span class="sourceLineNo">227</span><a name="line.227"></a> -<span class="sourceLineNo">228</span> private void refreshNodes(List<ZKUtil.NodeAndData> nodes, AtomicReference ref) {<a name="line.228"></a> -<span class="sourceLineNo">229</span> for (ZKUtil.NodeAndData n : nodes) {<a name="line.229"></a> -<span class="sourceLineNo">230</span> if (ref != null && ref.get() != null) {<a name="line.230"></a> -<span class="sourceLineNo">231</span> // there is a newer list<a name="line.231"></a> -<span class="sourceLineNo">232</span> break;<a name="line.232"></a> -<span class="sourceLineNo">233</span> }<a name="line.233"></a> -<span class="sourceLineNo">234</span> if (n.isEmpty()) continue;<a name="line.234"></a> -<span class="sourceLineNo">235</span> String path = n.getNode();<a name="line.235"></a> -<span class="sourceLineNo">236</span> String entry = (ZKUtil.getNodeName(path));<a name="line.236"></a> -<span class="sourceLineNo">237</span> try {<a name="line.237"></a> -<span class="sourceLineNo">238</span> refreshAuthManager(entry, n.getData());<a name="line.238"></a> -<span class="sourceLineNo">239</span> } catch (IOException ioe) {<a name="line.239"></a> -<span class="sourceLineNo">240</span> LOG.error("Failed parsing permissions for table '" + entry +<a name="line.240"></a> -<span class="sourceLineNo">241</span> "' from zk", ioe);<a name="line.241"></a> -<span class="sourceLineNo">242</span> }<a name="line.242"></a> -<span class="sourceLineNo">243</span> }<a name="line.243"></a> -<span class="sourceLineNo">244</span> }<a name="line.244"></a> -<span class="sourceLineNo">245</span><a name="line.245"></a> -<span class="sourceLineNo">246</span> private void refreshAuthManager(String entry, byte[] nodeData) throws IOException {<a name="line.246"></a> -<span class="sourceLineNo">247</span> if (LOG.isDebugEnabled()) {<a name="line.247"></a> -<span class="sourceLineNo">248</span> LOG.debug("Updating permissions cache from node "+entry+" with data: "+<a name="line.248"></a> -<span class="sourceLineNo">249</span> Bytes.toStringBinary(nodeData));<a name="line.249"></a> -<span class="sourceLineNo">250</span> }<a name="line.250"></a> -<span class="sourceLineNo">251</span> if(AccessControlLists.isNamespaceEntry(entry)) {<a name="line.251"></a> -<span class="sourceLineNo">252</span> authManager.refreshNamespaceCacheFromWritable(<a name="line.252"></a> -<span class="sourceLineNo">253</span> AccessControlLists.fromNamespaceEntry(entry), nodeData);<a name="line.253"></a> -<span class="sourceLineNo">254</span> } else {<a name="line.254"></a> -<span class="sourceLineNo">255</span> authManager.refreshTableCacheFromWritable(TableName.valueOf(entry), nodeData);<a name="line.255"></a> -<span class="sourceLineNo">256</span> }<a name="line.256"></a> -<span class="sourceLineNo">257</span> }<a name="line.257"></a> -<span class="sourceLineNo">258</span><a name="line.258"></a> -<span class="sourceLineNo">259</span> /***<a name="line.259"></a> -<span class="sourceLineNo">260</span> * Write a table's access controls to the permissions mirror in zookeeper<a name="line.260"></a> -<span class="sourceLineNo">261</span> * @param entry<a name="line.261"></a> -<span class="sourceLineNo">262</span> * @param permsData<a name="line.262"></a> -<span class="sourceLineNo">263</span> */<a name="line.263"></a> -<span class="sourceLineNo">264</span> public void writeToZookeeper(byte[] entry, byte[] permsData) {<a name="line.264"></a> -<span class="sourceLineNo">265</span> String entryName = Bytes.toString(entry);<a name="line.265"></a> -<span class="sourceLineNo">266</span> String zkNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, ACL_NODE);<a name="line.266"></a> -<span class="sourceLineNo">267</span> zkNode = ZKUtil.joinZNode(zkNode, entryName);<a name="line.267"></a> -<span class="sourceLineNo">268</span><a name="line.268"></a> -<span class="sourceLineNo">269</span> try {<a name="line.269"></a> -<span class="sourceLineNo">270</span> ZKUtil.createWithParents(watcher, zkNode);<a name="line.270"></a> -<span class="sourceLineNo">271</span> ZKUtil.updateExistingNodeData(watcher, zkNode, permsData, -1);<a name="line.271"></a> -<span class="sourceLineNo">272</span> } catch (KeeperException e) {<a name="line.272"></a> -<span class="sourceLineNo">273</span> LOG.error("Failed updating permissions for entry '" +<a name="line.273"></a> -<span class="sourceLineNo">274</span> entryName + "'", e);<a name="line.274"></a> -<span class="sourceLineNo">275</span> watcher.abort("Failed writing node "+zkNode+" to zookeeper", e);<a name="line.275"></a> -<span class="sourceLineNo">276</span> }<a name="line.276"></a> -<span class="sourceLineNo">277</span> }<a name="line.277"></a> -<span class="sourceLineNo">278</span><a name="line.278"></a> -<span class="sourceLineNo">279</span> /***<a name="line.279"></a> -<span class="sourceLineNo">280</span> * Delete the acl notify node of table<a name="line.280"></a> -<span class="sourceLineNo">281</span> * @param tableName<a name="line.281"></a> -<span class="sourceLineNo">282</span> */<a name="line.282"></a> -<span class="sourceLineNo">283</span> public void deleteTableACLNode(final TableName tableName) {<a name="line.283"></a> -<span class="sourceLineNo">284</span> String zkNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, ACL_NODE);<a name="line.284"></a> -<span class="sourceLineNo">285</span> zkNode = ZKUtil.joinZNode(zkNode, tableName.getNameAsString());<a name="line.285"></a> -<span class="sourceLineNo">286</span><a name="line.286"></a> -<span class="sourceLineNo">287</span> try {<a name="line.287"></a> -<span class="sourceLineNo">288</span> ZKUtil.deleteNode(watcher, zkNode);<a name="line.288"></a> -<span class="sourceLineNo">289</span> } catch (KeeperException.NoNodeException e) {<a name="line.289"></a> -<span class="sourceLineNo">290</span> LOG.warn("No acl notify node of table '" + tableName + "'");<a name="line.290"></a> -<span class="sourceLineNo">291</span> } catch (KeeperException e) {<a name="line.291"></a> -<span class="sourceLineNo">292</span> LOG.error("Failed deleting acl node of table '" + tableName + "'", e);<a name="line.292"></a> -<span class="sourceLineNo">293</span> watcher.abort("Failed deleting node " + zkNode, e);<a name="line.293"></a> -<span class="sourceLineNo">294</span> }<a name="line.294"></a> -<span class="sourceLineNo">295</span> }<a name="line.295"></a> -<span class="sourceLineNo">296</span><a name="line.296"></a> -<span class="sourceLineNo">297</span> /***<a name="line.297"></a> -<span class="sourceLineNo">298</span> * Delete the acl notify node of namespace<a name="line.298"></a> -<span class="sourceLineNo">299</span> */<a name="line.299"></a> -<span class="sourceLineNo">300</span> public void deleteNamespaceACLNode(final String namespace) {<a name="line.300"></a> -<span class="sourceLineNo">301</span> String zkNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, ACL_NODE);<a name="line.301"></a> -<span class="sourceLineNo">302</span> zkNode = ZKUtil.joinZNode(zkNode, AccessControlLists.NAMESPACE_PREFIX + namespace);<a name="line.302"></a> -<span class="sourceLineNo">303</span><a name="line.303"></a> -<span class="sourceLineNo">304</span> try {<a name="line.304"></a> -<span class="sourceLineNo">305</span> ZKUtil.deleteNode(watcher, zkNode);<a name="line.305"></a> -<span class="sourceLineNo">306</span> } catch (KeeperException.NoNodeException e) {<a name="line.306"></a> -<span class="sourceLineNo">307</span> LOG.warn("No acl notify node of namespace '" + namespace + "'");<a name="line.307"></a> -<span class="sourceLineNo">308</span> } catch (KeeperException e) {<a name="line.308"></a> -<span class="sourceLineNo">309</span> LOG.error("Failed deleting acl node of namespace '" + namespace + "'", e);<a name="line.309"></a> -<span class="sourceLineNo">310</span> watcher.abort("Failed deleting node " + zkNode, e);<a name="line.310"></a> -<span class="sourceLineNo">311</span> }<a name="line.311"></a> -<span class="sourceLineNo">312</span> }<a name="line.312"></a> -<span class="sourceLineNo">313</span>}<a name="line.313"></a> +<span class="sourceLineNo">041</span>import java.util.concurrent.Future;<a name="line.41"></a> +<span class="sourceLineNo">042</span>import java.util.concurrent.RejectedExecutionException;<a name="line.42"></a> +<span class="sourceLineNo">043</span>import java.util.concurrent.atomic.AtomicReference;<a name="line.43"></a> +<span class="sourceLineNo">044</span><a name="line.44"></a> +<span class="sourceLineNo">045</span>/**<a name="line.45"></a> +<span class="sourceLineNo">046</span> * Handles synchronization of access control list entries and updates<a name="line.46"></a> +<span class="sourceLineNo">047</span> * throughout all nodes in the cluster. The {@link AccessController} instance<a name="line.47"></a> +<span class="sourceLineNo">048</span> * on the {@code _acl_} table regions, creates a znode for each table as<a name="line.48"></a> +<span class="sourceLineNo">049</span> * {@code /hbase/acl/tablename}, with the znode data containing a serialized<a name="line.49"></a> +<span class="sourceLineNo">050</span> * list of the permissions granted for the table. The {@code AccessController}<a name="line.50"></a> +<span class="sourceLineNo">051</span> * instances on all other cluster hosts watch the znodes for updates, which<a name="line.51"></a> +<span class="sourceLineNo">052</span> * trigger updates in the {@link TableAuthManager} permission cache.<a name="line.52"></a> +<span class="sourceLineNo">053</span> */<a name="line.53"></a> +<span class="sourceLineNo">054</span>@InterfaceAudience.Private<a name="line.54"></a> +<span class="sourceLineNo">055</span>public class ZKPermissionWatcher extends ZooKeeperListener implements Closeable {<a name="line.55"></a> +<span class="sourceLineNo">056</span> private static final Log LOG = LogFactory.getLog(ZKPermissionWatcher.class);<a name="line.56"></a> +<span class="sourceLineNo">057</span> // parent node for permissions lists<a name="line.57"></a> +<span class="sourceLineNo">058</span> static final String ACL_NODE = "acl";<a name="line.58"></a> +<span class="sourceLineNo">059</span> private final TableAuthManager authManager;<a name="line.59"></a> +<span class="sourceLineNo">060</span> private final String aclZNode;<a name="line.60"></a> +<span class="sourceLineNo">061</span> private final CountDownLatch initialized = new CountDownLatch(1);<a name="line.61"></a> +<span class="sourceLineNo">062</span> private final ExecutorService executor;<a name="line.62"></a> +<span class="sourceLineNo">063</span> private Future<?> childrenChangedFuture;<a name="line.63"></a> +<span class="sourceLineNo">064</span><a name="line.64"></a> +<span class="sourceLineNo">065</span> public ZKPermissionWatcher(ZooKeeperWatcher watcher,<a name="line.65"></a> +<span class="sourceLineNo">066</span> TableAuthManager authManager, Configuration conf) {<a name="line.66"></a> +<span class="sourceLineNo">067</span> super(watcher);<a name="line.67"></a> +<span class="sourceLineNo">068</span> this.authManager = authManager;<a name="line.68"></a> +<span class="sourceLineNo">069</span> String aclZnodeParent = conf.get("zookeeper.znode.acl.parent", ACL_NODE);<a name="line.69"></a> +<span class="sourceLineNo">070</span> this.aclZNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, aclZnodeParent);<a name="line.70"></a> +<span class="sourceLineNo">071</span> executor = Executors.newSingleThreadExecutor(<a name="line.71"></a> +<span class="sourceLineNo">072</span> new DaemonThreadFactory("zk-permission-watcher"));<a name="line.72"></a> +<span class="sourceLineNo">073</span> }<a name="line.73"></a> +<span class="sourceLineNo">074</span><a name="line.74"></a> +<span class="sourceLineNo">075</span> public void start() throws KeeperException {<a name="line.75"></a> +<span class="sourceLineNo">076</span> try {<a name="line.76"></a> +<span class="sourceLineNo">077</span> watcher.registerListener(this);<a name="line.77"></a> +<span class="sourceLineNo">078</span> if (ZKUtil.watchAndCheckExists(watcher, aclZNode)) {<a name="line.78"></a> +<span class="sourceLineNo">079</span> try {<a name="line.79"></a> +<span class="sourceLineNo">080</span> executor.submit(new Callable<Void>() {<a name="line.80"></a> +<span class="sourceLineNo">081</span> @Override<a name="line.81"></a> +<span class="sourceLineNo">082</span> public Void call() throws KeeperException {<a name="line.82"></a> +<span class="sourceLineNo">083</span> List<ZKUtil.NodeAndData> existing =<a name="line.83"></a> +<span class="sourceLineNo">084</span> ZKUtil.getChildDataAndWatchForNewChildren(watcher, aclZNode);<a name="line.84"></a> +<span class="sourceLineNo">085</span> if (existing != null) {<a name="line.85"></a> +<span class="sourceLineNo">086</span> refreshNodes(existing);<a name="line.86"></a> +<span class="sourceLineNo">087</span> }<a name="line.87"></a> +<span class="sourceLineNo">088</span> return null;<a name="line.88"></a> +<span class="sourceLineNo">089</span> }<a name="line.89"></a> +<span class="sourceLineNo">090</span> }).get();<a name="line.90"></a> +<span class="sourceLineNo">091</span> } catch (ExecutionException ex) {<a name="line.91"></a> +<span class="sourceLineNo">092</span> if (ex.getCause() instanceof KeeperException) {<a name="line.92"></a> +<span class="sourceLineNo">093</span> throw (KeeperException)ex.getCause();<a name="line.93"></a> +<span class="sourceLineNo">094</span> } else {<a name="line.94"></a> +<span class="sourceLineNo">095</span> throw new RuntimeException(ex.getCause());<a name="line.95"></a> +<span class="sourceLineNo">096</span> }<a name="line.96"></a> +<span class="sourceLineNo">097</span> } catch (InterruptedException ex) {<a name="line.97"></a> +<span class="sourceLineNo">098</span> Thread.currentThread().interrupt();<a name="line.98"></a> +<span class="sourceLineNo">099</span> }<a name="line.99"></a> +<span class="sourceLineNo">100</span> }<a name="line.100"></a> +<span class="sourceLineNo">101</span> } finally {<a name="line.101"></a> +<span class="sourceLineNo">102</span> initialized.countDown();<a name="line.102"></a> +<span class="sourceLineNo">103</span> }<a name="line.103"></a> +<span class="sourceLineNo">104</span> }<a name="line.104"></a> +<span class="sourceLineNo">105</span><a name="line.105"></a> +<span class="sourceLineNo">106</span> @Override<a name="line.106"></a> +<span class="sourceLineNo">107</span> public void close() {<a name="line.107"></a> +<span class="sourceLineNo">108</span> executor.shutdown();<a name="line.108"></a> +<span class="sourceLineNo">109</span> }<a name="line.109"></a> +<span class="sourceLineNo">110</span><a name="line.110"></a> +<span class="sourceLineNo">111</span> private void waitUntilStarted() {<a name="line.111"></a> +<span class="sourceLineNo">112</span> try {<a name="line.112"></a> +<span class="sourceLineNo">113</span> initialized.await();<a name="line.113"></a> +<span class="sourceLineNo">114</span> } catch (InterruptedException e) {<a name="line.114"></a> +<span class="sourceLineNo">115</span> LOG.warn("Interrupted while waiting for start", e);<a name="line.115"></a> +<span class="sourceLineNo">116</span> Thread.currentThread().interrupt();<a name="line.116"></a> +<span class="sourceLineNo">117</span> }<a name="line.117"></a> +<span class="sourceLineNo">118</span> }<a name="line.118"></a> +<span class="sourceLineNo">119</span><a name="line.119"></a> +<span class="sourceLineNo">120</span> @Override<a name="line.120"></a> +<span class="sourceLineNo">121</span> public void nodeCreated(String path) {<a name="line.121"></a> +<span class="sourceLineNo">122</span> waitUntilStarted();<a name="line.122"></a> +<span class="sourceLineNo">123</span> if (path.equals(aclZNode)) {<a name="line.123"></a> +<span class="sourceLineNo">124</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.124"></a> +<span class="sourceLineNo">125</span> @Override<a name="line.125"></a> +<span class="sourceLineNo">126</span> public void run() {<a name="line.126"></a> +<span class="sourceLineNo">127</span> try {<a name="line.127"></a> +<span class="sourceLineNo">128</span> List<ZKUtil.NodeAndData> nodes =<a name="line.128"></a> +<span class="sourceLineNo">129</span> ZKUtil.getChildDataAndWatchForNewChildren(watcher, aclZNode);<a name="line.129"></a> +<span class="sourceLineNo">130</span> refreshNodes(nodes);<a name="line.130"></a> +<span class="sourceLineNo">131</span> } catch (KeeperException ke) {<a name="line.131"></a> +<span class="sourceLineNo">132</span> LOG.error("Error reading data from zookeeper", ke);<a name="line.132"></a> +<span class="sourceLineNo">133</span> // only option is to abort<a name="line.133"></a> +<span class="sourceLineNo">134</span> watcher.abort("ZooKeeper error obtaining acl node children", ke);<a name="line.134"></a> +<span class="sourceLineNo">135</span> }<a name="line.135"></a> +<span class="sourceLineNo">136</span> }<a name="line.136"></a> +<span class="sourceLineNo">137</span> });<a name="line.137"></a> +<span class="sourceLineNo">138</span> }<a name="line.138"></a> +<span class="sourceLineNo">139</span> }<a name="line.139"></a> +<span class="sourceLineNo">140</span><a name="line.140"></a> +<span class="sourceLineNo">141</span> @Override<a name="line.141"></a> +<span class="sourceLineNo">142</span> public void nodeDeleted(final String path) {<a name="line.142"></a> +<span class="sourceLineNo">143</span> waitUntilStarted();<a name="line.143"></a> +<span class="sourceLineNo">144</span> if (aclZNode.equals(ZKUtil.getParent(path))) {<a name="line.144"></a> +<span class="sourceLineNo">145</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.145"></a> +<span class="sourceLineNo">146</span> @Override<a name="line.146"></a> +<span class="sourceLineNo">147</span> public void run() {<a name="line.147"></a> +<span class="sourceLineNo">148</span> String table = ZKUtil.getNodeName(path);<a name="line.148"></a> +<span class="sourceLineNo">149</span> if(AccessControlLists.isNamespaceEntry(table)) {<a name="line.149"></a> +<span class="sourceLineNo">150</span> authManager.removeNamespace(Bytes.toBytes(table));<a name="line.150"></a> +<span class="sourceLineNo">151</span> } else {<a name="line.151"></a> +<span class="sourceLineNo">152</span> authManager.removeTable(TableName.valueOf(table));<a name="line.152"></a> +<span class="sourceLineNo">153</span> }<a name="line.153"></a> +<span class="sourceLineNo">154</span> }<a name="line.154"></a> +<span class="sourceLineNo">155</span> });<a name="line.155"></a> +<span class="sourceLineNo">156</span> }<a name="line.156"></a> +<span class="sourceLineNo">157</span> }<a name="line.157"></a> +<span class="sourceLineNo">158</span><a name="line.158"></a> +<span class="sourceLineNo">159</span> @Override<a name="line.159"></a> +<span class="sourceLineNo">160</span> public void nodeDataChanged(final String path) {<a name="line.160"></a> +<span class="sourceLineNo">161</span> waitUntilStarted();<a name="line.161"></a> +<span class="sourceLineNo">162</span> if (aclZNode.equals(ZKUtil.getParent(path))) {<a name="line.162"></a> +<span class="sourceLineNo">163</span> asyncProcessNodeUpdate(new Runnable() {<a name="line.163"></a> +<span class="sourceLineNo">164</span> @Override<a name="line.164"></a> +<span class="sourceLineNo">165</span> public void run() {<a name="line.165"></a> +<span class="sourceLineNo">166</span> // update cache on an existing table node<a name="line.166"></a> +<span class="sourceLineNo">167</span> String entry = ZKUtil.getNodeName(path);<a name="line.167"></a> +<span class="sourceLineNo">168</span> try {<a name="line.168"></a> +<span class="sourceLineNo">169</span> byte[] data = ZKUtil.getDataAndWatch(watcher, path);<a name="line.169"></a> +<span class="sourceLineNo">170</span> refreshAuthManager(entry, data);<a name="line.170"></a> +<span class="sourceLineNo">171</span> } catch (KeeperException ke) {<a name="line.171"></a> +<span class="sourceLineNo">172</span> LOG.error("Error reading data from zookeeper for node " + entry, ke);<a name="line.172"></a> +<span class="sourceLineNo">173</span> // only option is to abort<a name="line.173"></a> +<span class="sourceLineNo">174</span> watcher.abort("ZooKeeper error getting data for node " + entry, ke);<a name="line.174"></a> +<span class="sourceLineNo">175</span> } catch (IOException ioe) {<a name="line.175"></a> +<span class="sourceLineNo">176</span> LOG.error("Error reading permissions writables", ioe);<a name="line.176"></a> +<span class="sourceLineNo">177</span> }<a name="line.177"></a> +<span class="sourceLineNo">178</span> }<a name="line.178"></a> +<span class="sourceLineNo">179</span> });<a name="line.179"></a> +<span class="sourceLineNo">180</span> }<a name="line.180"></a> +<span class="sourceLineNo">181</span> }<a name="line.181"></a> +<span class="sourceLineNo">182</span><a name="line.182"></a> +<span class="sourceLineNo">183</span><a name="line.183"></a> +<span class="sourceLineNo">184</span> @Override<a name="line.184"></a> +<span class="sourceLineNo">185</span> public void nodeChildrenChanged(final String path) {<a name="line.185"></a> +<span class="sourceLineNo">186</span> waitUntilStarted();<a name="line.186"></a> +<span class="sourceLineNo">187</span> if (path.equals(aclZNode)) {<a name="line.187"></a> +<span class="sourceLineNo">188</span> try {<a name="line.188"></a> +<span class="sourceLineNo">189</span> final List<ZKUtil.NodeAndData> nodeList =<a name="line.189"></a> +<span class="sourceLineNo">190</span> ZKUtil.getChildDataAndWatchForNewChildren(watcher, aclZNode);<a name="line.190"></a> +<span class="sourceLineNo">191</span> // preempt any existing nodeChildrenChanged event processing<a name="line.191"></a> +<span class="sourceLineNo">192</span> if (childrenChangedFuture != null && !childrenChangedFuture.isDone()) {<a name="line.192"></a> +<span class="sourceLineNo">193</span> boolean cancelled = childrenChangedFuture.cancel(true);<a name="line.193"></a> +<span class="sourceLineNo">194</span> if (!cancelled) {<a name="line.194"></a> +<span class="sourceLineNo">195</span> // task may have finished between our check and attempted cancel, this is fine.<a name="line.195"></a> +<span class="sourceLineNo">196</span> if (! childrenChangedFuture.isDone()) {<a name="line.196"></a> +<span class="sourceLineNo">197</span> LOG.warn("Could not cancel processing node children changed event, " +<a name="line.197"></a> +<span class="sourceLineNo">198</span> "please file a JIRA and attach logs if possible.");<a name="line.198"></a> +<span class="sourceLineNo">199</span> }<a name="line.199"></a> +<span class="sourceLineNo">200</span> }<a name="line.200"></a> +<span class="sourceLineNo">201</span> }<a name="line.201"></a> +<span class="sourceLineNo">202</span> childrenChangedFuture = asyncProcessNodeUpdate(() -> refreshNodes(nodeList));<a name="line.202"></a> +<span class="sourceLineNo">203</span> } catch (KeeperException ke) {<a name="line.203"></a> +<span class="sourceLineNo">204</span> LOG.error("Error reading data from zookeeper for path "+path, ke);<a name="line.204"></a> +<span class="sourceLineNo">205</span> watcher.abort("ZooKeeper error get node children for path "+path, ke);<a name="line.205"></a> +<span class="sourceLineNo">206</span> }<a name="line.206"></a> +<span class="sourceLineNo">207</span> }<a name="line.207"></a> +<span class="sourceLineNo">208</span> }<a name="line.208"></a> +<span class="sourceLineNo">209</span><a name="line.209"></a> +<span class="sourceLineNo">210</span> private Future<?> asyncProcessNodeUpdate(Runnable runnable) {<a name="line.210"></a> +<span class="sourceLineNo">211</span> if (!executor.isShutdown()) {<a name="line.211"></a> +<span class="sourceLineNo">212</span> try {<a name="line.212"></a> +<span class="sourceLineNo">213</span> return executor.submit(runnable);<a name="line.213"></a> +<span class="sourceLineNo">214</span> } catch (RejectedExecutionException e) {<a name="line.214"></a> +<span class="sourceLineNo">215</span> if (executor.isShutdown()) {<a name="line.215"></a> +<span class="sourceLineNo">216</span> LOG.warn("aclZNode changed after ZKPermissionWatcher was shutdown");<a name="line.216"></a> +<span class="sourceLineNo">217</span> } else {<a name="line.217"></a> +<span class="sourceLineNo">218</span> throw e;<a name="line.218"></a> +<span class="sourceLineNo">219</span> }<a name="line.219"></a> +<span class="sourceLineNo">220</span> }<a name="line.220"></a> +<span class="sourceLineNo">221</span> }<a name="line.221"></a> +<span class="sourceLineNo">222</span> return null; // No task launched so there will be nothing to cancel later<a name="line.222"></a> +<span class="sourceLineNo">223</span> }<a name="line.223"></a> +<span class="sourceLineNo">224</span><a name="line.224"></a> +<span class="sourceLineNo">225</span> private void refreshNodes(List<ZKUtil.NodeAndData> nodes) {<a name="line.225"></a> +<span class="sourceLineNo">226</span> for (ZKUtil.NodeAndData n : nodes) {<a name="line.226"></a> +<span class="sourceLineNo">227</span> if (Thread.interrupted()) {<a name="line.227"></a> +<span class="sourceLineNo">228</span> // Use Thread.interrupted so that we clear interrupt status<a name="line.228"></a> +<span class="sourceLineNo">229</span> break;<a name="line.229"></a> +<span class="sourceLineNo">230</span> }<a name="line.230"></a> +<span class="sourceLineNo">231</span> if (n.isEmpty()) continue;<a name="line.231"></a> +<span class="sourceLineNo">232</span> String path = n.getNode();<a name="line.232"></a> +<span class="sourceLineNo">233</span> String entry = (ZKUtil.getNodeName(path));<a name="line.233"></a> +<span class="sourceLineNo">234</span> try {<a name="line.234"></a> +<span class="sourceLineNo">235</span> refreshAuthManager(entry, n.getData());<a name="line.235"></a> +<span class="sourceLineNo">236</span> } catch (IOException ioe) {<a name="line.236"></a> +<span class="sourceLineNo">237</span> LOG.error("Failed parsing permissions for table '" + entry +<a name="line.237"></a> +<span class="sourceLineNo">238</span> "' from zk", ioe);<a name="line.238"></a> +<span class="sourceLineNo">239</span> }<a name="line.239"></a> +<span class="sourceLineNo">240</span> }<a name="line.240"></a> +<span class="sourceLineNo">241</span> }<a name="line.241"></a> +<span class="sourceLineNo">242</span><a name="line.242"></a> +<span class="sourceLineNo">243</span> private void refreshAuthManager(String entry, byte[] nodeData) throws IOException {<a name="line.243"></a> +<span class="sourceLineNo">244</span> if (LOG.isDebugEnabled()) {<a name="line.244"></a> +<span class="sourceLineNo">245</span> LOG.debug("Updating permissions cache from node "+entry+" with data: "+<a name="line.245"></a> +<span class="sourceLineNo">246</span> Bytes.toStringBinary(nodeData));<a name="line.246"></a> +<span class="sourceLineNo">247</span> }<a name="line.247"></a> +<span class="sourceLineNo">248</span> if(AccessControlLists.isNamespaceEntry(entry)) {<a name="line.248"></a> +<span class="sourceLineNo">249</span> authManager.refreshNamespaceCacheFromWritable(<a name="line.249"></a> +<span class="sourceLineNo">250</span> AccessControlLists.fromNamespaceEntry(entry), nodeData);<a name="line.250"></a> +<span class="sourceLineNo">251</span> } else {<a name="line.251"></a> +<span class="sourceLineNo">252</span> authManager.refreshTableCacheFromWritable(TableName.valueOf(entry), nodeData);<a name="line.252"></a> +<span class="sourceLineNo">253</span> }<a name="line.253"></a> +<span class="sourceLineNo">254</span> }<a name="line.254"></a> +<span class="sourceLineNo">255</span><a name="line.255"></a> +<span class="sourceLineNo">256</span> /***<a name="line.256"></a> +<span class="sourceLineNo">257</span> * Write a table's access controls to the permissions mirror in zookeeper<a name="line.257"></a> +<span class="sourceLineNo">258</span> * @param entry<a name="line.258"></a> +<span class="sourceLineNo">259</span> * @param permsData<a name="line.259"></a> +<span class="sourceLineNo">260</span> */<a name="line.260"></a> +<span class="sourceLineNo">261</span> public void writeToZookeeper(byte[] entry, byte[] permsData) {<a name="line.261"></a> +<span class="sourceLineNo">262</span> String entryName = Bytes.toString(entry);<a name="line.262"></a> +<span class="sourceLineNo">263</span> String zkNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, ACL_NODE);<a name="line.263"></a> +<span class="sourceLineNo">264</span> zkNode = ZKUtil.joinZNode(zkNode, entryName);<a name="line.264"></a> +<span class="sourceLineNo">265</span><a name="line.265"></a> +<span class="sourceLineNo">266</span> try {<a name="line.266"></a> +<span class="sourceLineNo">267</span> ZKUtil.createWithParents(watcher, zkNode);<a name="line.267"></a> +<span class="sourceLineNo">268</span> ZKUtil.updateExistingNodeData(watcher, zkNode, permsData, -1);<a name="line.268"></a> +<span class="sourceLineNo">269</span> } catch (KeeperException e) {<a name="line.269"></a> +<span class="sourceLineNo">270</span> LOG.error("Failed updating permissions for entry '" +<a name="line.270"></a> +<span class="sourceLineNo">271</span> entryName + "'", e);<a name="line.271"></a> +<span class="sourceLineNo">272</span> watcher.abort("Failed writing node "+zkNode+" to zookeeper", e);<a name="line.272"></a> +<span class="sourceLineNo">273</span> }<a name="line.273"></a> +<span class="sourceLineNo">274</span> }<a name="line.274"></a> +<span class="sourceLineNo">275</span><a name="line.275"></a> +<span class="sourceLineNo">276</span> /***<a name="line.276"></a> +<span class="sourceLineNo">277</span> * Delete the acl notify node of table<a name="line.277"></a> +<span class="sourceLineNo">278</span> * @param tableName<a name="line.278"></a> +<span class="sourceLineNo">279</span> */<a name="line.279"></a> +<span class="sourceLineNo">280</span> public void deleteTableACLNode(final TableName tableName) {<a name="line.280"></a> +<span class="sourceLineNo">281</span> String zkNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, ACL_NODE);<a name="line.281"></a> +<span class="sourceLineNo">282</span> zkNode = ZKUtil.joinZNode(zkNode, tableName.getNameAsString());<a name="line.282"></a> +<span class="sourceLineNo">283</span><a name="line.283"></a> +<span class="sourceLineNo">284</span> try {<a name="line.284"></a> +<span class="sourceLineNo">285</span> ZKUtil.deleteNode(watcher, zkNode);<a name="line.285"></a> +<span class="sourceLineNo">286</span> } catch (KeeperException.NoNodeException e) {<a name="line.286"></a> +<span class="sourceLineNo">287</span> LOG.warn("No acl notify node of table '" + tableName + "'");<a name="line.287"></a> +<span class="sourceLineNo">288</span> } catch (KeeperException e) {<a name="line.288"></a> +<span class="sourceLineNo">289</span> LOG.error("Failed deleting acl node of table '" + tableName + "'", e);<a name="line.289"></a> +<span class="sourceLineNo">290</span> watcher.abort("Failed deleting node " + zkNode, e);<a name="line.290"></a> +<span class="sourceLineNo">291</span> }<a name="line.291"></a> +<span class="sourceLineNo">292</span> }<a name="line.292"></a> +<span class="sourceLineNo">293</span><a name="line.293"></a> +<span class="sourceLineNo">294</span> /***<a name="line.294"></a> +<span class="sourceLineNo">295</span> * Delete the acl notify node of namespace<a name="line.295"></a> +<span class="sourceLineNo">296</span> */<a name="line.296"></a> +<span class="sourceLineNo">297</span> public void deleteNamespaceACLNode(final String namespace) {<a name="line.297"></a> +<span class="sourceLineNo">298</span> String zkNode = ZKUtil.joinZNode(watcher.znodePaths.baseZNode, ACL_NODE);<a name="line.298"></a> +<span class="sourceLineNo">299</span> zkNode = ZKUtil.joinZNode(zkNode, AccessControlLists.NAMESPACE_PREFIX + namespace);<a name="line.299"></a> +<span class="sourceLineNo">300</span><a name="line.300"></a> +<span class="sourceLineNo">301</span> try {<a name="line.301"></a> +<span class="sourceLineNo">302</span> ZKUtil.deleteNode(watcher, zkNode);<a name="line.302"></a> +<span class="sourceLineNo">303</span> } catch (KeeperException.NoNodeException e) {<a name="line.303"></a> +<span class="sourceLineNo">304</span> LOG.warn("No acl notify node of namespace '" + namespace + "'");<a name="line.304"></a> +<span class="sourceLineNo">305</span> } catch (KeeperException e) {<a name="line.305"></a> +<span class="sourceLineNo">306</span> LOG.error("Failed deleting acl node of namespace '" + namespace + "'", e);<a name="line.306"></a> +<span class="sourceLineNo">307</span> watcher.abort("Failed deleting node " + zkNode, e);<a name="line.307"></a> +<span class="sourceLineNo">308</span> }<a name="line.308"></a> +<span class="sourceLineNo">309</span> }<a name="line.309"></a> +<span class="sourceLineNo">310</span>}<a name="line.310"></a>
http://git-wip-us.apache.org/repos/asf/hbase-site/blob/9943f14f/export_control.html ---------------------------------------------------------------------- diff --git a/export_control.html b/export_control.html index ac1d4fb..ded7987 100644 --- a/export_control.html +++ b/export_control.html @@ -7,7 +7,7 @@ <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> - <meta name="Date-Revision-yyyymmdd" content="20170822" /> + <meta name="Date-Revision-yyyymmdd" content="20170823" /> <meta http-equiv="Content-Language" content="en" /> <title>Apache HBase – Export Control @@ -336,7 +336,7 @@ for more details.</p> <a href="https://www.apache.org/";>The Apache Software Foundation</a>. All rights reserved. - <li id="publishDate" class="pull-right">Last Published: 2017-08-22</li> + <li id="publishDate" class="pull-right">Last Published: 2017-08-23</li> </p> </div>
