acelyc111 commented on code in PR #1379:
URL:
https://github.com/apache/incubator-pegasus/pull/1379#discussion_r1124147187
##########
src/runtime/security/access_controller.h:
##########
@@ -31,27 +33,41 @@ class access_controller
access_controller();
virtual ~access_controller() = 0;
- /**
- * update the access controller
- * acls - the new acls to update
- **/
- virtual void update(const std::string &acls){};
+ // Update the access controller.
+ // users - the new allowed users to update
+ virtual void update_allowed_users(const std::string &users) {}
+
+ // Check whether the Ranger ACL is enabled or not.
+ bool is_enable_ranger_acl();
+
+ // Check if the message received is allowd to access the system.
+ // msg - the message received
+ virtual bool allowed(message_ex *msg, dsn::ranger::access_type req_type) {
return false; }
- /**
- * check if the message received is allowd to do something.
- * msg - the message received
- **/
+ // Check if the message received is allowd to access the table.
+ // msg - the message received
+ // app_name - tables involved in ACL
+ virtual bool allowed(message_ex *msg, const std::string &app_name) {
return false; }
+
+ // (TODO:wanghao) : this method will be deleted in the next patch.
+ // check if the message received is allowd to do something.
+ // msg - the message received
virtual bool allowed(message_ex *msg) = 0;
protected:
+ // (TODO:wanghao) : this method will be deleted in the next patch.
Review Comment:
```suggestion
// TODO(wanghao): this method will be deleted in the next patch.
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
