@Documented @Target(value=TYPE) @Retention(value=RUNTIME) @Inherited public @interface Restricted
Marks the usage of a component as restricted to users with elevated privileges.
A Restricted
component is one that can be used to execute arbitrary unsanitized
code provided by the operator through the NiFi REST API/UI or can be used to obtain
or alter data on the NiFi host system using the NiFi OS credentials. These components
could be used by an otherwise authorized NiFi user to go beyond the intended use of
the application, escalate privilege, or could expose data about the internals of the
NiFi process or the host system. All of these capabilities should be considered
privileged, and admins should be aware of these capabilities and explicitly enable
them for a subset of trusted users.
Modifier and Type | Optional Element and Description |
---|---|
Restriction[] |
restrictions
Provides a listing of specific Restrictions.
|
String |
value
Provides a description of why the component usage is restricted.
|
public abstract String value
public abstract Restriction[] restrictions
Copyright © 2024 Apache NiFi Project. All rights reserved.