com.facebook.presto.hive.security

Class SqlStandardAccessControl

java.lang.Object

com.facebook.presto.hive.security.SqlStandardAccessControl

All Implemented Interfaces:

ConnectorAccessControl

public class SqlStandardAccessControl
extends Object
implements ConnectorAccessControl

Field Summary

Fields

Modifier and Type	Field and Description
static String	ADMIN_ROLE_NAME

Constructor Summary

Constructors

Constructor and Description
SqlStandardAccessControl(HiveConnectorId connectorId, java.util.function.Function<HiveTransactionHandle,SemiTransactionalHiveMetastore> metastoreProvider, ExtendedHiveMetastore metastore)

Method Summary

Modifier and Type	Method and Description
void	checkCanAddColumn(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanCreateSchema(ConnectorTransactionHandle transaction, Identity identity, String schemaName)
void	checkCanCreateTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanCreateView(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName viewName)
void	checkCanCreateViewWithSelectFromTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanCreateViewWithSelectFromView(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName viewName)
void	checkCanDeleteFromTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanDropColumn(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanDropSchema(ConnectorTransactionHandle transaction, Identity identity, String schemaName)
void	checkCanDropTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanDropView(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName viewName)
void	checkCanGrantTablePrivilege(ConnectorTransactionHandle transaction, Identity identity, Privilege privilege, SchemaTableName tableName, String grantee, boolean withGrantOption)
void	checkCanInsertIntoTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanRenameColumn(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanRenameSchema(ConnectorTransactionHandle transaction, Identity identity, String schemaName, String newSchemaName)
void	checkCanRenameTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName, SchemaTableName newTableName)
void	checkCanRevokeTablePrivilege(ConnectorTransactionHandle transaction, Identity identity, Privilege privilege, SchemaTableName tableName, String revokee, boolean grantOptionFor)
void	checkCanSelectFromTable(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName tableName)
void	checkCanSelectFromView(ConnectorTransactionHandle transaction, Identity identity, SchemaTableName viewName)
void	checkCanSetCatalogSessionProperty(Identity identity, String propertyName)
void	checkCanShowSchemas(ConnectorTransactionHandle transactionHandle, Identity identity)
void	checkCanShowTablesMetadata(ConnectorTransactionHandle transactionHandle, Identity identity, String schemaName)
Set<String>	filterSchemas(ConnectorTransactionHandle transactionHandle, Identity identity, Set<String> schemaNames)
Set<SchemaTableName>	filterTables(ConnectorTransactionHandle transactionHandle, Identity identity, Set<SchemaTableName> tableNames)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ADMIN_ROLE_NAME

public static final String ADMIN_ROLE_NAME

See Also:

Constant Field Values

Constructor Detail

SqlStandardAccessControl

@Inject
public SqlStandardAccessControl(HiveConnectorId connectorId,
                                        java.util.function.Function<HiveTransactionHandle,SemiTransactionalHiveMetastore> metastoreProvider,
                                        ExtendedHiveMetastore metastore)

Method Detail

checkCanCreateSchema

public void checkCanCreateSchema(ConnectorTransactionHandle transaction,
                                 Identity identity,
                                 String schemaName)

Specified by:

checkCanCreateSchema in interface ConnectorAccessControl

checkCanDropSchema

public void checkCanDropSchema(ConnectorTransactionHandle transaction,
                               Identity identity,
                               String schemaName)

Specified by:

checkCanDropSchema in interface ConnectorAccessControl

checkCanRenameSchema

public void checkCanRenameSchema(ConnectorTransactionHandle transaction,
                                 Identity identity,
                                 String schemaName,
                                 String newSchemaName)

Specified by:

checkCanRenameSchema in interface ConnectorAccessControl

checkCanShowSchemas

public void checkCanShowSchemas(ConnectorTransactionHandle transactionHandle,
                                Identity identity)

Specified by:

checkCanShowSchemas in interface ConnectorAccessControl

filterSchemas

public Set<String> filterSchemas(ConnectorTransactionHandle transactionHandle,
                                 Identity identity,
                                 Set<String> schemaNames)

Specified by:

filterSchemas in interface ConnectorAccessControl

checkCanCreateTable

public void checkCanCreateTable(ConnectorTransactionHandle transaction,
                                Identity identity,
                                SchemaTableName tableName)

Specified by:

checkCanCreateTable in interface ConnectorAccessControl

checkCanDropTable

public void checkCanDropTable(ConnectorTransactionHandle transaction,
                              Identity identity,
                              SchemaTableName tableName)

Specified by:

checkCanDropTable in interface ConnectorAccessControl

checkCanRenameTable

public void checkCanRenameTable(ConnectorTransactionHandle transaction,
                                Identity identity,
                                SchemaTableName tableName,
                                SchemaTableName newTableName)

Specified by:

checkCanRenameTable in interface ConnectorAccessControl

checkCanShowTablesMetadata

public void checkCanShowTablesMetadata(ConnectorTransactionHandle transactionHandle,
                                       Identity identity,
                                       String schemaName)

Specified by:

checkCanShowTablesMetadata in interface ConnectorAccessControl

filterTables

public Set<SchemaTableName> filterTables(ConnectorTransactionHandle transactionHandle,
                                         Identity identity,
                                         Set<SchemaTableName> tableNames)

Specified by:

filterTables in interface ConnectorAccessControl

checkCanAddColumn

public void checkCanAddColumn(ConnectorTransactionHandle transaction,
                              Identity identity,
                              SchemaTableName tableName)

Specified by:

checkCanAddColumn in interface ConnectorAccessControl

checkCanDropColumn

public void checkCanDropColumn(ConnectorTransactionHandle transaction,
                               Identity identity,
                               SchemaTableName tableName)

Specified by:

checkCanDropColumn in interface ConnectorAccessControl

checkCanRenameColumn

public void checkCanRenameColumn(ConnectorTransactionHandle transaction,
                                 Identity identity,
                                 SchemaTableName tableName)

Specified by:

checkCanRenameColumn in interface ConnectorAccessControl

checkCanSelectFromTable

public void checkCanSelectFromTable(ConnectorTransactionHandle transaction,
                                    Identity identity,
                                    SchemaTableName tableName)

Specified by:

checkCanSelectFromTable in interface ConnectorAccessControl

checkCanInsertIntoTable

public void checkCanInsertIntoTable(ConnectorTransactionHandle transaction,
                                    Identity identity,
                                    SchemaTableName tableName)

Specified by:

checkCanInsertIntoTable in interface ConnectorAccessControl

checkCanDeleteFromTable

public void checkCanDeleteFromTable(ConnectorTransactionHandle transaction,
                                    Identity identity,
                                    SchemaTableName tableName)

Specified by:

checkCanDeleteFromTable in interface ConnectorAccessControl

checkCanCreateView

public void checkCanCreateView(ConnectorTransactionHandle transaction,
                               Identity identity,
                               SchemaTableName viewName)

Specified by:

checkCanCreateView in interface ConnectorAccessControl

checkCanDropView

public void checkCanDropView(ConnectorTransactionHandle transaction,
                             Identity identity,
                             SchemaTableName viewName)

Specified by:

checkCanDropView in interface ConnectorAccessControl

checkCanSelectFromView

public void checkCanSelectFromView(ConnectorTransactionHandle transaction,
                                   Identity identity,
                                   SchemaTableName viewName)

Specified by:

checkCanSelectFromView in interface ConnectorAccessControl

checkCanCreateViewWithSelectFromTable

public void checkCanCreateViewWithSelectFromTable(ConnectorTransactionHandle transaction,
                                                  Identity identity,
                                                  SchemaTableName tableName)

Specified by:

checkCanCreateViewWithSelectFromTable in interface ConnectorAccessControl

checkCanCreateViewWithSelectFromView

public void checkCanCreateViewWithSelectFromView(ConnectorTransactionHandle transaction,
                                                 Identity identity,
                                                 SchemaTableName viewName)

Specified by:

checkCanCreateViewWithSelectFromView in interface ConnectorAccessControl

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(Identity identity,
                                              String propertyName)

Specified by:

checkCanSetCatalogSessionProperty in interface ConnectorAccessControl

checkCanGrantTablePrivilege

public void checkCanGrantTablePrivilege(ConnectorTransactionHandle transaction,
                                        Identity identity,
                                        Privilege privilege,
                                        SchemaTableName tableName,
                                        String grantee,
                                        boolean withGrantOption)

Specified by:

checkCanGrantTablePrivilege in interface ConnectorAccessControl

checkCanRevokeTablePrivilege

public void checkCanRevokeTablePrivilege(ConnectorTransactionHandle transaction,
                                         Identity identity,
                                         Privilege privilege,
                                         SchemaTableName tableName,
                                         String revokee,
                                         boolean grantOptionFor)

Specified by:

checkCanRevokeTablePrivilege in interface ConnectorAccessControl