com.facebook.presto.hive.security

Class LegacyAccessControl

java.lang.Object

com.facebook.presto.hive.security.LegacyAccessControl

All Implemented Interfaces:

com.facebook.presto.spi.connector.ConnectorAccessControl

public class LegacyAccessControl
extends Object
implements com.facebook.presto.spi.connector.ConnectorAccessControl

Constructor Summary

Constructors

Constructor and Description
LegacyAccessControl(HiveTransactionManager hiveTransactionManager, LegacySecurityConfig securityConfig)

Method Summary

Modifier and Type	Method and Description
void	checkCanAddColumn(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanCreateRole(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String role, Optional<com.facebook.presto.spi.security.PrestoPrincipal> grantor)
void	checkCanCreateSchema(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String schemaName)
void	checkCanCreateTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanCreateView(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName viewName)
void	checkCanCreateViewWithSelectFromColumns(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName, Set<String> columnNames)
void	checkCanDeleteFromTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanDropColumn(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanDropRole(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String role)
void	checkCanDropSchema(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String schemaName)
void	checkCanDropTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanDropView(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName viewName)
void	checkCanGrantRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, Set<String> roles, Set<com.facebook.presto.spi.security.PrestoPrincipal> grantees, boolean withAdminOption, Optional<com.facebook.presto.spi.security.PrestoPrincipal> grantor, String catalogName)
void	checkCanGrantTablePrivilege(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.security.Privilege privilege, com.facebook.presto.spi.SchemaTableName tableName, com.facebook.presto.spi.security.PrestoPrincipal grantee, boolean withGrantOption)
void	checkCanInsertIntoTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanRenameColumn(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
void	checkCanRenameSchema(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String schemaName, String newSchemaName)
void	checkCanRenameTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName, com.facebook.presto.spi.SchemaTableName newTableName)
void	checkCanRevokeRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, Set<String> roles, Set<com.facebook.presto.spi.security.PrestoPrincipal> grantees, boolean adminOptionFor, Optional<com.facebook.presto.spi.security.PrestoPrincipal> grantor, String catalogName)
void	checkCanRevokeTablePrivilege(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.security.Privilege privilege, com.facebook.presto.spi.SchemaTableName tableName, com.facebook.presto.spi.security.PrestoPrincipal revokee, boolean grantOptionFor)
void	checkCanSelectFromColumns(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName, Set<com.facebook.presto.common.Subfield> columnOrSubfieldNames)
void	checkCanSetCatalogSessionProperty(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String propertyName)
void	checkCanSetRole(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String role, String catalogName)
void	checkCanShowCurrentRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String catalogName)
void	checkCanShowRoleGrants(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String catalogName)
void	checkCanShowRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String catalogName)
void	checkCanShowSchemas(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context)
void	checkCanShowTablesMetadata(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, String schemaName)
void	checkCanTruncateTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, com.facebook.presto.spi.SchemaTableName tableName)
Set<String>	filterSchemas(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, Set<String> schemaNames)
Set<com.facebook.presto.spi.SchemaTableName>	filterTables(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle, com.facebook.presto.spi.security.ConnectorIdentity identity, com.facebook.presto.spi.security.AccessControlContext context, Set<com.facebook.presto.spi.SchemaTableName> tableNames)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LegacyAccessControl

@Inject
public LegacyAccessControl(HiveTransactionManager hiveTransactionManager,
                                   LegacySecurityConfig securityConfig)

Method Detail

checkCanCreateSchema

public void checkCanCreateSchema(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                 com.facebook.presto.spi.security.ConnectorIdentity identity,
                                 com.facebook.presto.spi.security.AccessControlContext context,
                                 String schemaName)

Specified by:

checkCanCreateSchema in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanDropSchema

public void checkCanDropSchema(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                               com.facebook.presto.spi.security.ConnectorIdentity identity,
                               com.facebook.presto.spi.security.AccessControlContext context,
                               String schemaName)

Specified by:

checkCanDropSchema in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanRenameSchema

public void checkCanRenameSchema(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                 com.facebook.presto.spi.security.ConnectorIdentity identity,
                                 com.facebook.presto.spi.security.AccessControlContext context,
                                 String schemaName,
                                 String newSchemaName)

Specified by:

checkCanRenameSchema in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanShowSchemas

public void checkCanShowSchemas(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                com.facebook.presto.spi.security.ConnectorIdentity identity,
                                com.facebook.presto.spi.security.AccessControlContext context)

Specified by:

checkCanShowSchemas in interface com.facebook.presto.spi.connector.ConnectorAccessControl

filterSchemas

public Set<String> filterSchemas(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                 com.facebook.presto.spi.security.ConnectorIdentity identity,
                                 com.facebook.presto.spi.security.AccessControlContext context,
                                 Set<String> schemaNames)

Specified by:

filterSchemas in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanCreateTable

public void checkCanCreateTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                com.facebook.presto.spi.security.ConnectorIdentity identity,
                                com.facebook.presto.spi.security.AccessControlContext context,
                                com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanCreateTable in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanDropTable

public void checkCanDropTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                              com.facebook.presto.spi.security.ConnectorIdentity identity,
                              com.facebook.presto.spi.security.AccessControlContext context,
                              com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanDropTable in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanRenameTable

public void checkCanRenameTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                com.facebook.presto.spi.security.ConnectorIdentity identity,
                                com.facebook.presto.spi.security.AccessControlContext context,
                                com.facebook.presto.spi.SchemaTableName tableName,
                                com.facebook.presto.spi.SchemaTableName newTableName)

Specified by:

checkCanRenameTable in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanTruncateTable

public void checkCanTruncateTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                  com.facebook.presto.spi.security.ConnectorIdentity identity,
                                  com.facebook.presto.spi.security.AccessControlContext context,
                                  com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanTruncateTable in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanShowTablesMetadata

public void checkCanShowTablesMetadata(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                       com.facebook.presto.spi.security.ConnectorIdentity identity,
                                       com.facebook.presto.spi.security.AccessControlContext context,
                                       String schemaName)

Specified by:

checkCanShowTablesMetadata in interface com.facebook.presto.spi.connector.ConnectorAccessControl

filterTables

public Set<com.facebook.presto.spi.SchemaTableName> filterTables(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                                                 com.facebook.presto.spi.security.ConnectorIdentity identity,
                                                                 com.facebook.presto.spi.security.AccessControlContext context,
                                                                 Set<com.facebook.presto.spi.SchemaTableName> tableNames)

Specified by:

filterTables in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanAddColumn

public void checkCanAddColumn(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                              com.facebook.presto.spi.security.ConnectorIdentity identity,
                              com.facebook.presto.spi.security.AccessControlContext context,
                              com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanAddColumn in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanDropColumn

public void checkCanDropColumn(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                               com.facebook.presto.spi.security.ConnectorIdentity identity,
                               com.facebook.presto.spi.security.AccessControlContext context,
                               com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanDropColumn in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanRenameColumn

public void checkCanRenameColumn(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                 com.facebook.presto.spi.security.ConnectorIdentity identity,
                                 com.facebook.presto.spi.security.AccessControlContext context,
                                 com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanRenameColumn in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanSelectFromColumns

public void checkCanSelectFromColumns(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                      com.facebook.presto.spi.security.ConnectorIdentity identity,
                                      com.facebook.presto.spi.security.AccessControlContext context,
                                      com.facebook.presto.spi.SchemaTableName tableName,
                                      Set<com.facebook.presto.common.Subfield> columnOrSubfieldNames)

Specified by:

checkCanSelectFromColumns in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanInsertIntoTable

public void checkCanInsertIntoTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                    com.facebook.presto.spi.security.ConnectorIdentity identity,
                                    com.facebook.presto.spi.security.AccessControlContext context,
                                    com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanInsertIntoTable in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanDeleteFromTable

public void checkCanDeleteFromTable(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                    com.facebook.presto.spi.security.ConnectorIdentity identity,
                                    com.facebook.presto.spi.security.AccessControlContext context,
                                    com.facebook.presto.spi.SchemaTableName tableName)

Specified by:

checkCanDeleteFromTable in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanCreateView

public void checkCanCreateView(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                               com.facebook.presto.spi.security.ConnectorIdentity identity,
                               com.facebook.presto.spi.security.AccessControlContext context,
                               com.facebook.presto.spi.SchemaTableName viewName)

Specified by:

checkCanCreateView in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanDropView

public void checkCanDropView(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                             com.facebook.presto.spi.security.ConnectorIdentity identity,
                             com.facebook.presto.spi.security.AccessControlContext context,
                             com.facebook.presto.spi.SchemaTableName viewName)

Specified by:

checkCanDropView in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                                    com.facebook.presto.spi.security.ConnectorIdentity identity,
                                                    com.facebook.presto.spi.security.AccessControlContext context,
                                                    com.facebook.presto.spi.SchemaTableName tableName,
                                                    Set<String> columnNames)

Specified by:

checkCanCreateViewWithSelectFromColumns in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                              com.facebook.presto.spi.security.ConnectorIdentity identity,
                                              com.facebook.presto.spi.security.AccessControlContext context,
                                              String propertyName)

Specified by:

checkCanSetCatalogSessionProperty in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanGrantTablePrivilege

public void checkCanGrantTablePrivilege(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                        com.facebook.presto.spi.security.ConnectorIdentity identity,
                                        com.facebook.presto.spi.security.AccessControlContext context,
                                        com.facebook.presto.spi.security.Privilege privilege,
                                        com.facebook.presto.spi.SchemaTableName tableName,
                                        com.facebook.presto.spi.security.PrestoPrincipal grantee,
                                        boolean withGrantOption)

Specified by:

checkCanGrantTablePrivilege in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanRevokeTablePrivilege

public void checkCanRevokeTablePrivilege(com.facebook.presto.spi.connector.ConnectorTransactionHandle transaction,
                                         com.facebook.presto.spi.security.ConnectorIdentity identity,
                                         com.facebook.presto.spi.security.AccessControlContext context,
                                         com.facebook.presto.spi.security.Privilege privilege,
                                         com.facebook.presto.spi.SchemaTableName tableName,
                                         com.facebook.presto.spi.security.PrestoPrincipal revokee,
                                         boolean grantOptionFor)

Specified by:

checkCanRevokeTablePrivilege in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanCreateRole

public void checkCanCreateRole(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                               com.facebook.presto.spi.security.ConnectorIdentity identity,
                               com.facebook.presto.spi.security.AccessControlContext context,
                               String role,
                               Optional<com.facebook.presto.spi.security.PrestoPrincipal> grantor)

Specified by:

checkCanCreateRole in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanDropRole

public void checkCanDropRole(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                             com.facebook.presto.spi.security.ConnectorIdentity identity,
                             com.facebook.presto.spi.security.AccessControlContext context,
                             String role)

Specified by:

checkCanDropRole in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanGrantRoles

public void checkCanGrantRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                               com.facebook.presto.spi.security.ConnectorIdentity identity,
                               com.facebook.presto.spi.security.AccessControlContext context,
                               Set<String> roles,
                               Set<com.facebook.presto.spi.security.PrestoPrincipal> grantees,
                               boolean withAdminOption,
                               Optional<com.facebook.presto.spi.security.PrestoPrincipal> grantor,
                               String catalogName)

Specified by:

checkCanGrantRoles in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanRevokeRoles

public void checkCanRevokeRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                com.facebook.presto.spi.security.ConnectorIdentity identity,
                                com.facebook.presto.spi.security.AccessControlContext context,
                                Set<String> roles,
                                Set<com.facebook.presto.spi.security.PrestoPrincipal> grantees,
                                boolean adminOptionFor,
                                Optional<com.facebook.presto.spi.security.PrestoPrincipal> grantor,
                                String catalogName)

Specified by:

checkCanRevokeRoles in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanSetRole

public void checkCanSetRole(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                            com.facebook.presto.spi.security.ConnectorIdentity identity,
                            com.facebook.presto.spi.security.AccessControlContext context,
                            String role,
                            String catalogName)

Specified by:

checkCanSetRole in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanShowRoles

public void checkCanShowRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                              com.facebook.presto.spi.security.ConnectorIdentity identity,
                              com.facebook.presto.spi.security.AccessControlContext context,
                              String catalogName)

Specified by:

checkCanShowRoles in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanShowCurrentRoles

public void checkCanShowCurrentRoles(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                     com.facebook.presto.spi.security.ConnectorIdentity identity,
                                     com.facebook.presto.spi.security.AccessControlContext context,
                                     String catalogName)

Specified by:

checkCanShowCurrentRoles in interface com.facebook.presto.spi.connector.ConnectorAccessControl

checkCanShowRoleGrants

public void checkCanShowRoleGrants(com.facebook.presto.spi.connector.ConnectorTransactionHandle transactionHandle,
                                   com.facebook.presto.spi.security.ConnectorIdentity identity,
                                   com.facebook.presto.spi.security.AccessControlContext context,
                                   String catalogName)

Specified by:

checkCanShowRoleGrants in interface com.facebook.presto.spi.connector.ConnectorAccessControl