Package org.graylog2.shared.security

Class RestPermissions

java.lang.Object

org.graylog2.shared.security.RestPermissions

All Implemented Interfaces:

PluginPermissions

public class RestPermissions
extends Object
implements PluginPermissions

Field Summary

Fields

Modifier and Type	Field	Description
static final String	AUTH_HTTP_HEADER_CONFIG_EDIT	These should all be in the form of "group:action", because Permissions.allPermissionsMap() below depends on it.
static final String	AUTH_HTTP_HEADER_CONFIG_READ
static final String	AUTH_SERVICE_BACKEND_CREATE
static final String	AUTH_SERVICE_BACKEND_DELETE
static final String	AUTH_SERVICE_BACKEND_EDIT
static final String	AUTH_SERVICE_BACKEND_READ
static final String	AUTH_SERVICE_GLOBAL_CONFIG_EDIT
static final String	AUTH_SERVICE_GLOBAL_CONFIG_READ
static final String	AUTH_SERVICE_TEST_BACKEND_EXECUTE
static final String	BUFFERS_READ
protected static final com.google.common.collect.ImmutableSet<BuiltinRole>	BUILTIN_ROLES
static final String	CATALOG_LIST
static final String	CATALOG_RESOLVE
static final String	CLUSTER_CONFIG_ENTRY_CREATE
static final String	CLUSTER_CONFIG_ENTRY_DELETE
static final String	CLUSTER_CONFIG_ENTRY_EDIT
static final String	CLUSTER_CONFIG_ENTRY_READ
static final String	CONTENT_PACK_CREATE
static final String	CONTENT_PACK_DELETE
static final String	CONTENT_PACK_INSTALL
static final String	CONTENT_PACK_READ
static final String	CONTENT_PACK_UNINSTALL
static final String	DASHBOARDS_CREATE
static final String	DASHBOARDS_EDIT
static final String	DASHBOARDS_READ
static final String	DECORATORS_CREATE
static final String	DECORATORS_EDIT
static final String	DECORATORS_READ
static final String	DEFLECTOR_CYCLE
static final String	DEFLECTOR_READ
static final String	ENTITY_OWN
static final String	EVENT_DEFINITIONS_CREATE
static final String	EVENT_DEFINITIONS_DELETE
static final String	EVENT_DEFINITIONS_EDIT
static final String	EVENT_DEFINITIONS_EXECUTE
static final String	EVENT_DEFINITIONS_READ
static final String	EVENT_NOTIFICATIONS_CREATE
static final String	EVENT_NOTIFICATIONS_DELETE
static final String	EVENT_NOTIFICATIONS_EDIT
static final String	EVENT_NOTIFICATIONS_READ
static final String	FIELDNAMES_READ
static final String	GRANTS_OVERVIEW_READ
static final String	INDEXERCLUSTER_READ
static final String	INDEXRANGES_READ
static final String	INDEXRANGES_REBUILD
static final String	INDEXSETS_CREATE
static final String	INDEXSETS_DELETE
static final String	INDEXSETS_EDIT
static final String	INDEXSETS_READ
static final String	INDICES_CHANGESTATE
static final String	INDICES_DELETE
static final String	INDICES_FAILURES
static final String	INDICES_READ
static final String	INPUTS_CHANGESTATE
static final String	INPUTS_CREATE
static final String	INPUTS_EDIT
static final String	INPUTS_READ
static final String	INPUTS_TERMINATE
static final String	JOURNAL_EDIT
static final String	JOURNAL_READ
static final String	JVMSTATS_READ
static final String	LBSTATUS_CHANGE
static final String	LICENSEINFOS_READ
static final String	LOGGERS_EDIT
static final String	LOGGERS_EDITSUBSYSTEM
static final String	LOGGERS_READ
static final String	LOGGERS_READSUBSYSTEM
static final String	LOGGERSMESSAGES_READ
static final String	LOOKUP_TABLES_CREATE
static final String	LOOKUP_TABLES_DELETE
static final String	LOOKUP_TABLES_EDIT
static final String	LOOKUP_TABLES_READ
static final String	MESSAGECOUNT_READ
static final String	MESSAGES_ANALYZE
static final String	MESSAGES_READ
static final String	METRICS_ALLKEYS
static final String	METRICS_READ
static final String	METRICS_READALL
static final String	METRICS_READHISTORY
static final String	NODE_SHUTDOWN	Deprecated.
static final String	NOTIFICATIONS_DELETE
static final String	NOTIFICATIONS_READ
static final String	OUTPUTS_CREATE
static final String	OUTPUTS_EDIT
static final String	OUTPUTS_READ
static final String	OUTPUTS_TERMINATE
protected static final com.google.common.collect.ImmutableSet<Permission>	PERMISSIONS
static final String	PROCESSBUFFER_DUMP
static final String	PROCESSING_CHANGESTATE
protected static final com.google.common.collect.ImmutableSet<String>	READER_BASE_PERMISSION_SELECTION
protected static final Set<Permission>	READER_BASE_PERMISSIONS
static final String	ROLES_CREATE
static final String	ROLES_DELETE
static final String	ROLES_EDIT
static final String	ROLES_READ
static final String	SEARCH_FILTERS_DELETE
static final String	SEARCH_FILTERS_EDIT
static final String	SEARCH_FILTERS_READ
static final String	SEARCHES_ABSOLUTE
static final String	SEARCHES_KEYWORD
static final String	SEARCHES_RELATIVE
static final String	SOURCES_READ
static final String	STREAM_OUTPUTS_CREATE
static final String	STREAM_OUTPUTS_DELETE
static final String	STREAM_OUTPUTS_READ
static final String	STREAMS_CHANGESTATE
static final String	STREAMS_CREATE
static final String	STREAMS_EDIT
static final String	STREAMS_READ
static final String	SUPPORTBUNDLE_CREATE
static final String	SUPPORTBUNDLE_READ
static final String	SYSTEM_READ
static final String	SYSTEMJOBS_CREATE
static final String	SYSTEMJOBS_DELETE
static final String	SYSTEMJOBS_READ
static final String	SYSTEMMESSAGES_READ
static final String	THREADS_DUMP
static final String	THROUGHPUT_READ
static final String	TYPE_MAPPINGS_CREATE
static final String	TYPE_MAPPINGS_DELETE
static final String	TYPE_MAPPINGS_EDIT
static final String	TYPE_MAPPINGS_READ
static final String	URL_WHITELIST_READ
static final String	URL_WHITELIST_WRITE
static final String	USERS_CREATE
static final String	USERS_EDIT
static final String	USERS_LIST
static final String	USERS_PASSWORDCHANGE
static final String	USERS_PERMISSIONSEDIT
static final String	USERS_READ
static final String	USERS_ROLESEDIT
static final String	USERS_TOKENCREATE
static final String	USERS_TOKENLIST
static final String	USERS_TOKENREMOVE

Constructor Summary

Constructors

Constructor	Description
RestPermissions()

Method Summary

Modifier and Type	Method	Description
Set<BuiltinRole>	builtinRoles()	A set of built-in roles that should be added to every graylog setup.
Set<Permission>	permissions()
Set<Permission>	readerBasePermissions()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

AUTH_HTTP_HEADER_CONFIG_EDIT

public static final String AUTH_HTTP_HEADER_CONFIG_EDIT

These should all be in the form of "group:action", because Permissions.allPermissionsMap() below depends on it. Should this ever change, you need to adapt the code below, too.

See Also:

• Constant Field Values

AUTH_HTTP_HEADER_CONFIG_READ

public static final String AUTH_HTTP_HEADER_CONFIG_READ

See Also:

• Constant Field Values

AUTH_SERVICE_BACKEND_CREATE

public static final String AUTH_SERVICE_BACKEND_CREATE

See Also:

• Constant Field Values

AUTH_SERVICE_BACKEND_DELETE

public static final String AUTH_SERVICE_BACKEND_DELETE

See Also:

• Constant Field Values

AUTH_SERVICE_BACKEND_EDIT

public static final String AUTH_SERVICE_BACKEND_EDIT

See Also:

• Constant Field Values

AUTH_SERVICE_BACKEND_READ

public static final String AUTH_SERVICE_BACKEND_READ

See Also:

• Constant Field Values

AUTH_SERVICE_GLOBAL_CONFIG_READ

public static final String AUTH_SERVICE_GLOBAL_CONFIG_READ

See Also:

• Constant Field Values

AUTH_SERVICE_GLOBAL_CONFIG_EDIT

public static final String AUTH_SERVICE_GLOBAL_CONFIG_EDIT

See Also:

• Constant Field Values

AUTH_SERVICE_TEST_BACKEND_EXECUTE

public static final String AUTH_SERVICE_TEST_BACKEND_EXECUTE

See Also:

• Constant Field Values

BUFFERS_READ

public static final String BUFFERS_READ

See Also:

• Constant Field Values

CATALOG_LIST

public static final String CATALOG_LIST

See Also:

• Constant Field Values

CATALOG_RESOLVE

public static final String CATALOG_RESOLVE

See Also:

• Constant Field Values

CLUSTER_CONFIG_ENTRY_CREATE

public static final String CLUSTER_CONFIG_ENTRY_CREATE

See Also:

• Constant Field Values

CLUSTER_CONFIG_ENTRY_DELETE

public static final String CLUSTER_CONFIG_ENTRY_DELETE

See Also:

• Constant Field Values

CLUSTER_CONFIG_ENTRY_EDIT

public static final String CLUSTER_CONFIG_ENTRY_EDIT

See Also:

• Constant Field Values

CLUSTER_CONFIG_ENTRY_READ

public static final String CLUSTER_CONFIG_ENTRY_READ

See Also:

• Constant Field Values

CONTENT_PACK_CREATE

public static final String CONTENT_PACK_CREATE

See Also:

• Constant Field Values

CONTENT_PACK_DELETE

public static final String CONTENT_PACK_DELETE

See Also:

• Constant Field Values

CONTENT_PACK_READ

public static final String CONTENT_PACK_READ

See Also:

• Constant Field Values

CONTENT_PACK_INSTALL

public static final String CONTENT_PACK_INSTALL

See Also:

• Constant Field Values

CONTENT_PACK_UNINSTALL

public static final String CONTENT_PACK_UNINSTALL

See Also:

• Constant Field Values

DASHBOARDS_CREATE

public static final String DASHBOARDS_CREATE

See Also:

• Constant Field Values

DASHBOARDS_EDIT

public static final String DASHBOARDS_EDIT

See Also:

• Constant Field Values

DASHBOARDS_READ

public static final String DASHBOARDS_READ

See Also:

• Constant Field Values

DECORATORS_CREATE

public static final String DECORATORS_CREATE

See Also:

• Constant Field Values

DECORATORS_EDIT

public static final String DECORATORS_EDIT

See Also:

• Constant Field Values

DECORATORS_READ

public static final String DECORATORS_READ

See Also:

• Constant Field Values

DEFLECTOR_CYCLE

public static final String DEFLECTOR_CYCLE

See Also:

• Constant Field Values

DEFLECTOR_READ

public static final String DEFLECTOR_READ

See Also:

• Constant Field Values

LICENSEINFOS_READ

public static final String LICENSEINFOS_READ

See Also:

• Constant Field Values

EVENT_DEFINITIONS_CREATE

public static final String EVENT_DEFINITIONS_CREATE

See Also:

• Constant Field Values

EVENT_DEFINITIONS_DELETE

public static final String EVENT_DEFINITIONS_DELETE

See Also:

• Constant Field Values

EVENT_DEFINITIONS_EDIT

public static final String EVENT_DEFINITIONS_EDIT

See Also:

• Constant Field Values

EVENT_DEFINITIONS_EXECUTE

public static final String EVENT_DEFINITIONS_EXECUTE

See Also:

• Constant Field Values

EVENT_DEFINITIONS_READ

public static final String EVENT_DEFINITIONS_READ

See Also:

• Constant Field Values

EVENT_NOTIFICATIONS_CREATE

public static final String EVENT_NOTIFICATIONS_CREATE

See Also:

• Constant Field Values

EVENT_NOTIFICATIONS_DELETE

public static final String EVENT_NOTIFICATIONS_DELETE

See Also:

• Constant Field Values

EVENT_NOTIFICATIONS_EDIT

public static final String EVENT_NOTIFICATIONS_EDIT

See Also:

• Constant Field Values

EVENT_NOTIFICATIONS_READ

public static final String EVENT_NOTIFICATIONS_READ

See Also:

• Constant Field Values

FIELDNAMES_READ

public static final String FIELDNAMES_READ

See Also:

• Constant Field Values

GRANTS_OVERVIEW_READ

public static final String GRANTS_OVERVIEW_READ

See Also:

• Constant Field Values

INDEXERCLUSTER_READ

public static final String INDEXERCLUSTER_READ

See Also:

• Constant Field Values

INDEXRANGES_READ

public static final String INDEXRANGES_READ

See Also:

• Constant Field Values

INDEXRANGES_REBUILD

public static final String INDEXRANGES_REBUILD

See Also:

• Constant Field Values

INDEXSETS_CREATE

public static final String INDEXSETS_CREATE

See Also:

• Constant Field Values

INDEXSETS_DELETE

public static final String INDEXSETS_DELETE

See Also:

• Constant Field Values

INDEXSETS_EDIT

public static final String INDEXSETS_EDIT

See Also:

• Constant Field Values

INDEXSETS_READ

public static final String INDEXSETS_READ

See Also:

• Constant Field Values

INDICES_CHANGESTATE

public static final String INDICES_CHANGESTATE

See Also:

• Constant Field Values

INDICES_DELETE

public static final String INDICES_DELETE

See Also:

• Constant Field Values

INDICES_FAILURES

public static final String INDICES_FAILURES

See Also:

• Constant Field Values

INDICES_READ

public static final String INDICES_READ

See Also:

• Constant Field Values

INPUTS_CHANGESTATE

public static final String INPUTS_CHANGESTATE

See Also:

• Constant Field Values

INPUTS_CREATE

public static final String INPUTS_CREATE

See Also:

• Constant Field Values

INPUTS_EDIT

public static final String INPUTS_EDIT

See Also:

• Constant Field Values

INPUTS_READ

public static final String INPUTS_READ

See Also:

• Constant Field Values

INPUTS_TERMINATE

public static final String INPUTS_TERMINATE

See Also:

• Constant Field Values

JOURNAL_EDIT

public static final String JOURNAL_EDIT

See Also:

• Constant Field Values

JOURNAL_READ

public static final String JOURNAL_READ

See Also:

• Constant Field Values

JVMSTATS_READ

public static final String JVMSTATS_READ

See Also:

• Constant Field Values

LBSTATUS_CHANGE

public static final String LBSTATUS_CHANGE

See Also:

• Constant Field Values

LOOKUP_TABLES_CREATE

public static final String LOOKUP_TABLES_CREATE

See Also:

• Constant Field Values

LOOKUP_TABLES_DELETE

public static final String LOOKUP_TABLES_DELETE

See Also:

• Constant Field Values

LOOKUP_TABLES_EDIT

public static final String LOOKUP_TABLES_EDIT

See Also:

• Constant Field Values

LOOKUP_TABLES_READ

public static final String LOOKUP_TABLES_READ

See Also:

• Constant Field Values

LOGGERS_EDIT

public static final String LOGGERS_EDIT

See Also:

• Constant Field Values

LOGGERS_EDITSUBSYSTEM

public static final String LOGGERS_EDITSUBSYSTEM

See Also:

• Constant Field Values

LOGGERS_READ

public static final String LOGGERS_READ

See Also:

• Constant Field Values

LOGGERS_READSUBSYSTEM

public static final String LOGGERS_READSUBSYSTEM

See Also:

• Constant Field Values

LOGGERSMESSAGES_READ

public static final String LOGGERSMESSAGES_READ

See Also:

• Constant Field Values

MESSAGECOUNT_READ

public static final String MESSAGECOUNT_READ

See Also:

• Constant Field Values

MESSAGES_ANALYZE

public static final String MESSAGES_ANALYZE

See Also:

• Constant Field Values

MESSAGES_READ

public static final String MESSAGES_READ

See Also:

• Constant Field Values

METRICS_ALLKEYS

public static final String METRICS_ALLKEYS

See Also:

• Constant Field Values

METRICS_READ

public static final String METRICS_READ

See Also:

• Constant Field Values

METRICS_READALL

public static final String METRICS_READALL

See Also:

• Constant Field Values

METRICS_READHISTORY

public static final String METRICS_READHISTORY

See Also:

• Constant Field Values

NODE_SHUTDOWN

@Deprecated
public static final String NODE_SHUTDOWN

Deprecated.

See Also:

• Constant Field Values

NOTIFICATIONS_DELETE

public static final String NOTIFICATIONS_DELETE

See Also:

• Constant Field Values

NOTIFICATIONS_READ

public static final String NOTIFICATIONS_READ

See Also:

• Constant Field Values

OUTPUTS_CREATE

public static final String OUTPUTS_CREATE

See Also:

• Constant Field Values

OUTPUTS_EDIT

public static final String OUTPUTS_EDIT

See Also:

• Constant Field Values

OUTPUTS_READ

public static final String OUTPUTS_READ

See Also:

• Constant Field Values

OUTPUTS_TERMINATE

public static final String OUTPUTS_TERMINATE

See Also:

• Constant Field Values

PROCESSING_CHANGESTATE

public static final String PROCESSING_CHANGESTATE

See Also:

• Constant Field Values

ROLES_CREATE

public static final String ROLES_CREATE

See Also:

• Constant Field Values

ROLES_DELETE

public static final String ROLES_DELETE

See Also:

• Constant Field Values

ROLES_EDIT

public static final String ROLES_EDIT

See Also:

• Constant Field Values

ROLES_READ

public static final String ROLES_READ

See Also:

• Constant Field Values

SEARCHES_ABSOLUTE

public static final String SEARCHES_ABSOLUTE

See Also:

• Constant Field Values

SEARCHES_KEYWORD

public static final String SEARCHES_KEYWORD

See Also:

• Constant Field Values

SEARCHES_RELATIVE

public static final String SEARCHES_RELATIVE

See Also:

• Constant Field Values

SOURCES_READ

public static final String SOURCES_READ

See Also:

• Constant Field Values

STREAM_OUTPUTS_CREATE

public static final String STREAM_OUTPUTS_CREATE

See Also:

• Constant Field Values

STREAM_OUTPUTS_DELETE

public static final String STREAM_OUTPUTS_DELETE

See Also:

• Constant Field Values

STREAM_OUTPUTS_READ

public static final String STREAM_OUTPUTS_READ

See Also:

• Constant Field Values

STREAMS_CHANGESTATE

public static final String STREAMS_CHANGESTATE

See Also:

• Constant Field Values

STREAMS_CREATE

public static final String STREAMS_CREATE

See Also:

• Constant Field Values

STREAMS_EDIT

public static final String STREAMS_EDIT

See Also:

• Constant Field Values

STREAMS_READ

public static final String STREAMS_READ

See Also:

• Constant Field Values

SEARCH_FILTERS_READ

public static final String SEARCH_FILTERS_READ

See Also:

• Constant Field Values

SEARCH_FILTERS_EDIT

public static final String SEARCH_FILTERS_EDIT

See Also:

• Constant Field Values

SEARCH_FILTERS_DELETE

public static final String SEARCH_FILTERS_DELETE

See Also:

• Constant Field Values

SYSTEM_READ

public static final String SYSTEM_READ

See Also:

• Constant Field Values

SYSTEMJOBS_CREATE

public static final String SYSTEMJOBS_CREATE

See Also:

• Constant Field Values

SYSTEMJOBS_DELETE

public static final String SYSTEMJOBS_DELETE

See Also:

• Constant Field Values

SYSTEMJOBS_READ

public static final String SYSTEMJOBS_READ

See Also:

• Constant Field Values

SYSTEMMESSAGES_READ

public static final String SYSTEMMESSAGES_READ

See Also:

• Constant Field Values

SUPPORTBUNDLE_READ

public static final String SUPPORTBUNDLE_READ

See Also:

• Constant Field Values

SUPPORTBUNDLE_CREATE

public static final String SUPPORTBUNDLE_CREATE

See Also:

• Constant Field Values

THREADS_DUMP

public static final String THREADS_DUMP

See Also:

• Constant Field Values

PROCESSBUFFER_DUMP

public static final String PROCESSBUFFER_DUMP

See Also:

• Constant Field Values

THROUGHPUT_READ

public static final String THROUGHPUT_READ

See Also:

• Constant Field Values

TYPE_MAPPINGS_CREATE

public static final String TYPE_MAPPINGS_CREATE

See Also:

• Constant Field Values

TYPE_MAPPINGS_DELETE

public static final String TYPE_MAPPINGS_DELETE

See Also:

• Constant Field Values

TYPE_MAPPINGS_EDIT

public static final String TYPE_MAPPINGS_EDIT

See Also:

• Constant Field Values

TYPE_MAPPINGS_READ

public static final String TYPE_MAPPINGS_READ

See Also:

• Constant Field Values

URL_WHITELIST_READ

public static final String URL_WHITELIST_READ

See Also:

• Constant Field Values

URL_WHITELIST_WRITE

public static final String URL_WHITELIST_WRITE

See Also:

• Constant Field Values

USERS_CREATE

public static final String USERS_CREATE

See Also:

• Constant Field Values

USERS_EDIT

public static final String USERS_EDIT

See Also:

• Constant Field Values

USERS_READ

public static final String USERS_READ

See Also:

• Constant Field Values

USERS_LIST

public static final String USERS_LIST

See Also:

• Constant Field Values

USERS_PASSWORDCHANGE

public static final String USERS_PASSWORDCHANGE

See Also:

• Constant Field Values

USERS_PERMISSIONSEDIT

public static final String USERS_PERMISSIONSEDIT

See Also:

• Constant Field Values

USERS_ROLESEDIT

public static final String USERS_ROLESEDIT

See Also:

• Constant Field Values

USERS_TOKENCREATE

public static final String USERS_TOKENCREATE

See Also:

• Constant Field Values

USERS_TOKENLIST

public static final String USERS_TOKENLIST

See Also:

• Constant Field Values

USERS_TOKENREMOVE

public static final String USERS_TOKENREMOVE

See Also:

• Constant Field Values

ENTITY_OWN

public static final String ENTITY_OWN

See Also:

• Constant Field Values

PERMISSIONS

protected static final com.google.common.collect.ImmutableSet<Permission> PERMISSIONS

READER_BASE_PERMISSION_SELECTION

protected static final com.google.common.collect.ImmutableSet<String> READER_BASE_PERMISSION_SELECTION

READER_BASE_PERMISSIONS

protected static final Set<Permission> READER_BASE_PERMISSIONS

BUILTIN_ROLES

protected static final com.google.common.collect.ImmutableSet<BuiltinRole> BUILTIN_ROLES

Constructor Details

RestPermissions

public RestPermissions()

Method Details

readerBasePermissions

public Set<Permission> readerBasePermissions()

Specified by:

readerBasePermissions in interface PluginPermissions

permissions

public Set<Permission> permissions()

Specified by:

permissions in interface PluginPermissions

builtinRoles

public Set<BuiltinRole> builtinRoles()

Description copied from interface: PluginPermissions

A set of built-in roles that should be added to every graylog setup.

Specified by:

builtinRoles in interface PluginPermissions

Returns:

The roles that this plugin provides