Module org.elasticsearch.security

Package org.elasticsearch.xpack.security.authz.interceptor

Class ViewDlsFlsRequestInterceptor

java.lang.Object

org.elasticsearch.xpack.security.authz.interceptor.ViewDlsFlsRequestInterceptor

All Implemented Interfaces:

RequestInterceptor

public class ViewDlsFlsRequestInterceptor
extends Object
implements RequestInterceptor

An interceptor which checks if the requested View has any DLS or FLS permissions applied. If so, then the request is rejected, because Views are not compatible with DLS or FLS.

Constructor Summary

Constructors

Constructor	Description
ViewDlsFlsRequestInterceptor(ThreadContext threadContext, Supplier<ProjectMetadata> projectMetadataSupplier)

Method Summary

Modifier and Type	Method	Description
SubscribableListener<Void>	intercept(AuthorizationEngine.RequestInfo requestInfo, AuthorizationEngine authorizationEngine, AuthorizationEngine.AuthorizationInfo authorizationInfo)	This interceptor will introspect the request and potentially modify it.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ViewDlsFlsRequestInterceptor

public ViewDlsFlsRequestInterceptor(ThreadContext threadContext,
 Supplier<ProjectMetadata> projectMetadataSupplier)

Method Details

intercept

public SubscribableListener<Void> intercept(AuthorizationEngine.RequestInfo requestInfo,
 AuthorizationEngine authorizationEngine,
 AuthorizationEngine.AuthorizationInfo authorizationInfo)

Description copied from interface: RequestInterceptor

This interceptor will introspect the request and potentially modify it. If the interceptor does not apply to the request then the request will not be modified.

Specified by:

intercept in interface RequestInterceptor