Interface OpenMetadataConnectionSecurity
- All Known Implementing Classes:
CocoPharmaSecretsSecurityConnector
,CocoPharmaServerSecurityConnector
public interface OpenMetadataConnectionSecurity
OpenMetadataConnectionSecurity defines the interface of a security connector that is validating whether a specific
user should be given access to a specific Connection object. This connection information has been retrieved
from an open metadata repository. It is used to create a Connector to an Asset. It may include user
credentials that could enhance the access to data and function within the Asset that is far above
the specific user's approval. This is why this optional check is performed by any open metadata service
that is returning a Connection object (or a Connector created with the Connection object) to an external party.
-
Method Summary
Modifier and TypeMethodDescriptionvalidateUserForAssetConnectionList
(String userId, Asset asset, List<Connection> connections) Select a connection from the list of connections attached to an asset.void
validateUserForConnection
(String userId, Connection connection) Tests for whether a specific user should have access to a connection.
-
Method Details
-
validateUserForConnection
void validateUserForConnection(String userId, Connection connection) throws UserNotAuthorizedException Tests for whether a specific user should have access to a connection.- Parameters:
userId
- identifier of userconnection
- connection object- Throws:
UserNotAuthorizedException
- the user is not authorized to access this service
-
validateUserForAssetConnectionList
Connection validateUserForAssetConnectionList(String userId, Asset asset, List<Connection> connections) throws UserNotAuthorizedException Select a connection from the list of connections attached to an asset.- Parameters:
userId
- calling userasset
- asset requested by callerconnections
- list of attached connections- Returns:
- selected connection or null (pretend there are no connections attached to the asset) or
- Throws:
UserNotAuthorizedException
- the user is not authorized to access this service
-