org.apache.kafka.common.requests.DeleteAclsResponse Maven / Gradle / Ivy
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.kafka.common.requests;
import org.apache.kafka.common.acl.AccessControlEntry;
import org.apache.kafka.common.acl.AclBinding;
import org.apache.kafka.common.acl.AclOperation;
import org.apache.kafka.common.acl.AclPermissionType;
import org.apache.kafka.common.errors.UnsupportedVersionException;
import org.apache.kafka.common.message.DeleteAclsResponseData;
import org.apache.kafka.common.message.DeleteAclsResponseData.DeleteAclsFilterResult;
import org.apache.kafka.common.message.DeleteAclsResponseData.DeleteAclsMatchingAcl;
import org.apache.kafka.common.protocol.ApiKeys;
import org.apache.kafka.common.protocol.Errors;
import org.apache.kafka.common.protocol.types.Struct;
import org.apache.kafka.common.resource.PatternType;
import org.apache.kafka.common.resource.ResourcePattern;
import org.apache.kafka.common.resource.ResourceType;
import org.apache.kafka.server.authorizer.AclDeleteResult;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.nio.ByteBuffer;
import java.util.List;
import java.util.Map;
import java.util.stream.Collectors;
public class DeleteAclsResponse extends AbstractResponse {
public static final Logger log = LoggerFactory.getLogger(DeleteAclsResponse.class);
private final DeleteAclsResponseData data;
public DeleteAclsResponse(DeleteAclsResponseData data) {
this.data = data;
}
public DeleteAclsResponse(Struct struct, short version) {
data = new DeleteAclsResponseData(struct, version);
}
@Override
protected Struct toStruct(short version) {
validate(version);
return data.toStruct(version);
}
@Override
public int throttleTimeMs() {
return data.throttleTimeMs();
}
public List filterResults() {
return data.filterResults();
}
@Override
public Map errorCounts() {
return errorCounts(filterResults().stream().map(r -> Errors.forCode(r.errorCode())));
}
public static DeleteAclsResponse parse(ByteBuffer buffer, short version) {
return new DeleteAclsResponse(ApiKeys.DELETE_ACLS.parseResponse(version, buffer), version);
}
public String toString() {
return data.toString();
}
@Override
public boolean shouldClientThrottle(short version) {
return version >= 1;
}
private void validate(short version) {
if (version == 0) {
final boolean unsupported = filterResults().stream()
.flatMap(r -> r.matchingAcls().stream())
.anyMatch(matchingAcl -> matchingAcl.patternType() != PatternType.LITERAL.code());
if (unsupported)
throw new UnsupportedVersionException("Version 0 only supports literal resource pattern types");
}
final boolean unknown = filterResults().stream()
.flatMap(r -> r.matchingAcls().stream())
.anyMatch(matchingAcl -> matchingAcl.patternType() == PatternType.UNKNOWN.code()
|| matchingAcl.resourceType() == ResourceType.UNKNOWN.code()
|| matchingAcl.permissionType() == AclPermissionType.UNKNOWN.code()
|| matchingAcl.operation() == AclOperation.UNKNOWN.code());
if (unknown)
throw new IllegalArgumentException("DeleteAclsMatchingAcls contain UNKNOWN elements");
}
public static DeleteAclsFilterResult filterResult(AclDeleteResult result) {
ApiError error = result.exception().map(e -> ApiError.fromThrowable(e)).orElse(ApiError.NONE);
List matchingAcls = result.aclBindingDeleteResults().stream()
.map(DeleteAclsResponse::matchingAcl)
.collect(Collectors.toList());
return new DeleteAclsFilterResult()
.setErrorCode(error.error().code())
.setErrorMessage(error.message())
.setMatchingAcls(matchingAcls);
}
private static DeleteAclsMatchingAcl matchingAcl(AclDeleteResult.AclBindingDeleteResult result) {
ApiError error = result.exception().map(e -> ApiError.fromThrowable(e)).orElse(ApiError.NONE);
AclBinding acl = result.aclBinding();
return matchingAcl(acl, error);
}
// Visible for testing
public static DeleteAclsMatchingAcl matchingAcl(AclBinding acl, ApiError error) {
return new DeleteAclsMatchingAcl()
.setErrorCode(error.error().code())
.setErrorMessage(error.message())
.setResourceName(acl.pattern().name())
.setResourceType(acl.pattern().resourceType().code())
.setPatternType(acl.pattern().patternType().code())
.setHost(acl.entry().host())
.setOperation(acl.entry().operation().code())
.setPermissionType(acl.entry().permissionType().code())
.setPrincipal(acl.entry().principal());
}
public static AclBinding aclBinding(DeleteAclsMatchingAcl matchingAcl) {
ResourcePattern resourcePattern = new ResourcePattern(ResourceType.fromCode(matchingAcl.resourceType()),
matchingAcl.resourceName(), PatternType.fromCode(matchingAcl.patternType()));
AccessControlEntry accessControlEntry = new AccessControlEntry(matchingAcl.principal(), matchingAcl.host(),
AclOperation.fromCode(matchingAcl.operation()), AclPermissionType.fromCode(matchingAcl.permissionType()));
return new AclBinding(resourcePattern, accessControlEntry);
}
}