in src/main/java/org/apache/accumulo/testing/randomwalk/security/DropTable.java [43:100]
public static void dropTable(State state, RandWalkEnv env, Properties props) throws Exception {
String sourceUser = props.getProperty("source", "system");
String principal;
AuthenticationToken token;
boolean hasPermission = false;
if (sourceUser.equals("table")) {
principal = WalkingSecurity.get(state, env).getTabUserName();
token = WalkingSecurity.get(state, env).getTabToken();
} else {
principal = WalkingSecurity.get(state, env).getSysUserName();
token = WalkingSecurity.get(state, env).getSysToken();
}
try (AccumuloClient client = env.createClient(principal, token)) {
String tableName = WalkingSecurity.get(state, env).getTableName();
boolean exists = WalkingSecurity.get(state, env).getTableExists();
try {
hasPermission = client.securityOperations().hasTablePermission(principal, tableName,
TablePermission.DROP_TABLE)
|| client.securityOperations().hasSystemPermission(principal,
SystemPermission.DROP_TABLE);
client.tableOperations().delete(tableName);
} catch (AccumuloSecurityException ae) {
if (ae.getSecurityErrorCode().equals(SecurityErrorCode.TABLE_DOESNT_EXIST)) {
if (exists)
throw new TableExistsException(null, tableName,
"Got a TableNotFoundException but it should have existed", ae);
else
return;
} else if (ae.getSecurityErrorCode().equals(SecurityErrorCode.PERMISSION_DENIED)) {
if (hasPermission)
throw new AccumuloException(
"Got a security exception when I should have had permission.", ae);
else {
// Drop anyway for sake of state
env.getAccumuloClient().tableOperations().delete(tableName);
WalkingSecurity.get(state, env).cleanTablePermissions(tableName);
return;
}
} else if (ae.getSecurityErrorCode().equals(SecurityErrorCode.BAD_CREDENTIALS)) {
if (WalkingSecurity.get(state, env).userPassTransient(client.whoami()))
return;
}
throw new AccumuloException("Got unexpected ae error code", ae);
} catch (TableNotFoundException tnfe) {
if (exists)
throw new TableExistsException(null, tableName,
"Got a TableNotFoundException but it should have existed", tnfe);
else
return;
}
WalkingSecurity.get(state, env).cleanTablePermissions(tableName);
if (!hasPermission)
throw new AccumuloException("Didn't get Security Exception when we should have");
}
}