PathAccessControlEntry Class
- java.
lang. Object - com.
azure. storage. file. datalake. models. PathAccessControlEntry
- com.
public class PathAccessControlEntry
POSIX access control rights on files and directories.
The value is a comma-separated list of access control entries, each access control entry (ACE) consists of four elements in the format "[scope:][type]:[id]:[permissions]":
- Scope
- Type
- User or Group Identifier (AAD ObjectId)
- Permissions
The scope must be "default" to indicate the ACE belongs to the default Access Control List (ACL) for a directory; otherwise scope is implicit and the ACE belongs to the access ACL.
There are four ACE types:
- "user": grants rights to the owner or a named user
- "group" grants rights to the owning group or a named group
- "mask" restricts rights granted to named users and the members of groups
- "other" grants rights to all users not found in any of the other entries
The user or group identifier is omitted for entries of type "mask" and "other". The user or group identifier is also omitted for the owner and owning group.
The permission field is a 3-character sequence where the first character is 'r' to grant read access, the second character is 'w' to grant write access, and the third character is 'x' to grant execute permission. If access is not granted, the '-' character is used to denote that the permission is denied.
For example, the following ACL grants read, write, and execute rights to the file owner and john.doe@contoso, the read right to the owning group, and nothing to everyone else: "user::rwx,user:john.doe@contoso:rwx,group::r--,other::---,mask::rwx".
Constructor Summary
Constructor | Description |
---|---|
PathAccessControlEntry() |
Initializes an empty instance of |
Method Summary
Modifier and Type | Method and Description |
---|---|
boolean | equals(Object o) |
Access |
getAccessControlType()
Returns the AccessControlType for this entry. |
String |
getEntityId()
The Azure AAD Object ID or User Principal Name that is associated with this entry. |
Role |
getPermissions()
Returns the symbolic form of the permissions for this entry. |
int | hashCode() |
boolean |
isInDefaultScope()
Returns whether this ACE is in the default scope. |
static
Path |
parse(String str)
Parses the provided string into a |
static
List<Path |
parseList(String str)
Deserializes an ACL to the format "user::rwx,user:john. |
static String |
serializeList(List<PathAccessControlEntry> acl)
Converts the Access Control List to a |
Path |
setAccessControlType(AccessControlType accessControlType)
Sets the AccessControlType for this entry. |
Path |
setDefaultScope(boolean defaultScope)
Sets whether or not this entry is the default for a directory. |
Path |
setEntityId(String entityId)
Sets the entity ID to which this entry will apply. |
Path |
setPermissions(RolePermissions permissions)
Sets the permissions for this entry. |
String | toString() |
Methods inherited from java.lang.Object
Constructor Details
PathAccessControlEntry
public PathAccessControlEntry()
Initializes an empty instance of PathAccessControlEntry
. Constructs an empty instance of RolePermissions for the permissions field.
Method Details
equals
public boolean equals(Object o)
Overrides:
PathAccessControlEntry.equals(Object o)Parameters:
getAccessControlType
public AccessControlType getAccessControlType()
Returns the AccessControlType for this entry.
Returns:
getEntityId
public String getEntityId()
The Azure AAD Object ID or User Principal Name that is associated with this entry.
Returns:
getPermissions
public RolePermissions getPermissions()
Returns the symbolic form of the permissions for this entry.
Returns:
hashCode
public int hashCode()
Overrides:
PathAccessControlEntry.hashCode()isInDefaultScope
public boolean isInDefaultScope()
Returns whether this ACE is in the default scope.
Returns:
true
if in the default scope and false
otherwise.parse
public static PathAccessControlEntry parse(String str)
Parses the provided string into a List<{@link PathAccessControlEntry}>
. Must be of the format "[scope:][type]:[id]:[permissions]".
Parameters:
Returns:
parseList
public static List
Deserializes an ACL to the format "user::rwx,user:john.doe@contoso:rwx,group::r--,other::---,mask=rwx"
Parameters:
String
representation of the ACL.
Returns:
java.util.List
serializeList
public static String serializeList(List
Converts the Access Control List to a String
. The format is specified in the description of this type.
Parameters:
Returns:
String
representing the serialized Access Control ListsetAccessControlType
public PathAccessControlEntry setAccessControlType(AccessControlType accessControlType)
Sets the AccessControlType for this entry.
Parameters:
Returns:
setDefaultScope
public PathAccessControlEntry setDefaultScope(boolean defaultScope)
Sets whether or not this entry is the default for a directory.
Parameters:
true
to set as the default scope and false
otherwise.
Returns:
setEntityId
public PathAccessControlEntry setEntityId(String entityId)
Sets the entity ID to which this entry will apply. Must be null if the type is MASK or OTHER or if the user is the owner or the group is the owning group. Must be a valid Azure AAD Object ID or User Principal Name.
Parameters:
Returns:
setPermissions
public PathAccessControlEntry setPermissions(RolePermissions permissions)
Sets the permissions for this entry.
Parameters:
Returns:
toString
public String toString()
Overrides:
PathAccessControlEntry.toString()