How to use

authorizeResourceAction

method

in

org.apache.druid.server.security.AuthorizationUtils

Access accessResult = AuthorizationUtils.authorizeResourceAction(
  req,
  new ResourceAction(

Access accessResult = AuthorizationUtils.authorizeResourceAction(
  req,
  new ResourceAction(

 @Override
 public ContainerRequest filter(ContainerRequest request)
 {
  final ResourceAction resourceAction = new ResourceAction(
    new Resource(SECURITY_RESOURCE_NAME, ResourceType.CONFIG),
    getAction(request)
  );

  final Access authResult = AuthorizationUtils.authorizeResourceAction(
    getReq(),
    resourceAction,
    getAuthorizerMapper()
  );

  if (!authResult.isAllowed()) {
   throw new WebApplicationException(
     Response.status(Response.Status.FORBIDDEN)
         .entity(StringUtils.format("Access-Check-Result: %s", authResult.toString()))
         .build()
   );
  }

  return request;
 }
}

);
Access authResult = AuthorizationUtils.authorizeResourceAction(
  req,
  resourceAction,

);
final Access authResult = AuthorizationUtils.authorizeResourceAction(
  getReq(),
  resourceAction,

  Action.READ
);
final Access authResult = AuthorizationUtils.authorizeResourceAction(
  req,
  resourceAction,

/**
 * Authorizes action to be performed on a task's datasource
 *
 * @return authorization result
 */
public static Access datasourceAuthorizationCheck(
  final HttpServletRequest req,
  Action action,
  String datasource,
  AuthorizerMapper authorizerMapper
)
{
 ResourceAction resourceAction = new ResourceAction(
   new Resource(datasource, ResourceType.DATASOURCE),
   action
 );
 Access access = AuthorizationUtils.authorizeResourceAction(req, resourceAction, authorizerMapper);
 if (!access.isAllowed()) {
  throw new ForbiddenException(access.toString());
 }
 return access;
}

 /**
  * Check authorization for the given action and dataSource.
  *
  * @return authorization result
  */
 public static Access authorizationCheck(
   HttpServletRequest req,
   Action action,
   String dataSource,
   AuthorizerMapper authorizerMapper
 )
 {
  ResourceAction resourceAction = new ResourceAction(
    new Resource(dataSource, ResourceType.DATASOURCE),
    action
  );

  Access access = AuthorizationUtils.authorizeResourceAction(req, resourceAction, authorizerMapper);
  if (!access.isAllowed()) {
   throw new ForbiddenException(access.toString());
  }

  return access;
 }
}

 @Override
 public ContainerRequest filter(ContainerRequest request)
 {
  final ResourceAction resourceAction = new ResourceAction(
    new Resource("STATE", ResourceType.STATE),
    getAction(request)
  );

  final Access authResult = AuthorizationUtils.authorizeResourceAction(
    getReq(),
    resourceAction,
    getAuthorizerMapper()
  );

  if (!authResult.isAllowed()) {
   throw new ForbiddenException(authResult.toString());
  }

  return request;
 }
}

);
final Access authResult = AuthorizationUtils.authorizeResourceAction(
  getReq(),
  resourceAction,

 @Override
 public ContainerRequest filter(ContainerRequest request)
 {
  final ResourceAction resourceAction = new ResourceAction(
    new Resource("CONFIG", ResourceType.CONFIG),
    getAction(request)
  );

  final Access authResult = AuthorizationUtils.authorizeResourceAction(
    getReq(),
    resourceAction,
    getAuthorizerMapper()
  );

  if (!authResult.isAllowed()) {
   throw new ForbiddenException(authResult.toString());
  }

  return request;
 }
}

@Override
public ContainerRequest filter(ContainerRequest request)
{
 final ResourceAction resourceAction = new ResourceAction(
   new Resource(getRequestDatasourceName(request), ResourceType.DATASOURCE),
   getAction(request)
 );
 final Access authResult = AuthorizationUtils.authorizeResourceAction(
   getReq(),
   resourceAction,
   getAuthorizerMapper()
 );
 if (!authResult.isAllowed()) {
  throw new ForbiddenException(authResult.toString());
 }
 return request;
}

Access accessResult = AuthorizationUtils.authorizeResourceAction(
  req,
  new ResourceAction(

@Override
public ContainerRequest filter(ContainerRequest request)
{
 final ResourceAction resourceAction = new ResourceAction(
   new Resource(SECURITY_RESOURCE_NAME, ResourceType.CONFIG),
   getAction(request)
 );
 final Access authResult = AuthorizationUtils.authorizeResourceAction(
   getReq(),
   resourceAction,
   getAuthorizerMapper()
 );
 if (!authResult.isAllowed()) {
  throw new WebApplicationException(
    Response.status(Response.Status.FORBIDDEN)
        .entity(StringUtils.format("Access-Check-Result: %s", authResult.toString()))
        .build()
  );
 }
 return request;
}

 /**
  * Check authorization for the given action and dataSource.
  *
  * @return authorization result
  */
 public static Access authorizationCheck(
   HttpServletRequest req,
   Action action,
   String dataSource,
   AuthorizerMapper authorizerMapper
 )
 {
  ResourceAction resourceAction = new ResourceAction(
    new Resource(dataSource, ResourceType.DATASOURCE),
    action
  );

  Access access = AuthorizationUtils.authorizeResourceAction(req, resourceAction, authorizerMapper);
  if (!access.isAllowed()) {
   throw new ForbiddenException(access.toString());
  }

  return access;
 }
}

/**
 * Authorizes action to be performed on a task's datasource
 *
 * @return authorization result
 */
public static Access datasourceAuthorizationCheck(
  final HttpServletRequest req,
  Action action,
  String datasource,
  AuthorizerMapper authorizerMapper
)
{
 ResourceAction resourceAction = new ResourceAction(
   new Resource(datasource, ResourceType.DATASOURCE),
   action
 );
 Access access = AuthorizationUtils.authorizeResourceAction(req, resourceAction, authorizerMapper);
 if (!access.isAllowed()) {
  throw new ForbiddenException(access.toString());
 }
 return access;
}

@Override
public ContainerRequest filter(ContainerRequest request)
{
 final ResourceAction resourceAction = new ResourceAction(
   new Resource("STATE", ResourceType.STATE),
   getAction(request)
 );
 final Access authResult = AuthorizationUtils.authorizeResourceAction(
   getReq(),
   resourceAction,
   getAuthorizerMapper()
 );
 if (!authResult.isAllowed()) {
  throw new ForbiddenException(authResult.toString());
 }
 return request;
}

@Override
public ContainerRequest filter(ContainerRequest request)
{
 final ResourceAction resourceAction = new ResourceAction(
   new Resource("CONFIG", ResourceType.CONFIG),
   getAction(request)
 );
 final Access authResult = AuthorizationUtils.authorizeResourceAction(
   getReq(),
   resourceAction,
   getAuthorizerMapper()
 );
 if (!authResult.isAllowed()) {
  throw new ForbiddenException(authResult.toString());
 }
 return request;
}

);
final Access authResult = AuthorizationUtils.authorizeResourceAction(
  getReq(),
  resourceAction,

@Override
public ContainerRequest filter(ContainerRequest request)
{
 final ResourceAction resourceAction = new ResourceAction(
   new Resource(getRequestDatasourceName(request), ResourceType.DATASOURCE),
   getAction(request)
 );
 final Access authResult = AuthorizationUtils.authorizeResourceAction(
   getReq(),
   resourceAction,
   getAuthorizerMapper()
 );
 if (!authResult.isAllowed()) {
  throw new ForbiddenException(authResult.toString());
 }
 return request;
}