Package com.linkedin.venice.acl

Interface StaticAccessController

All Superinterfaces:

AccessController

public interface StaticAccessController
extends AccessController

A StaticAccessController is an AccessController with an immutable resource list.

Method Summary

Modifier and Type	Method	Description
boolean	hasAccess(X509Certificate clientCert, String resource, String method)	Check if client has permission to access a particular resource.

Methods inherited from interface com.linkedin.venice.acl.AccessController

getPrincipalId, hasAccessToAdminOperation, hasAccessToTopic, isAllowlistUsers

Method Details

hasAccess

boolean hasAccess(X509Certificate clientCert,
 String resource,
 String method)

Check if client has permission to access a particular resource. This method is invoked by every single request, therefore minimized execution time will result the best latency and throughput.

Specified by:

hasAccess in interface AccessController

Parameters:

clientCert - the X509Certificate submitted by client

resource - the resource being requested

method - the operation (GET, POST, ...) to perform against the resource

Returns:

true if client has permission to access, otherwise false.