com.facebook.presto.hive.security

Class SystemTableAwareAccessControl

java.lang.Object

com.facebook.presto.plugin.base.security.ForwardingConnectorAccessControl

com.facebook.presto.hive.security.SystemTableAwareAccessControl

All Implemented Interfaces:

ConnectorAccessControl

public class SystemTableAwareAccessControl
extends ForwardingConnectorAccessControl

Constructor Summary

Constructors

Constructor and Description
SystemTableAwareAccessControl(ConnectorAccessControl delegate)

Method Summary

Modifier and Type	Method and Description
void	checkCanAddColumn(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanCreateRole(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String role, Optional<PrestoPrincipal> grantor)
void	checkCanCreateSchema(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String schemaName)
void	checkCanCreateTable(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanCreateView(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName viewName)
void	checkCanCreateViewWithSelectFromColumns(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName, Set<String> columnNames)
void	checkCanDeleteFromTable(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanDropColumn(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanDropRole(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String role)
void	checkCanDropSchema(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String schemaName)
void	checkCanDropTable(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanDropView(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName viewName)
void	checkCanGrantRoles(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, Set<String> roles, Set<PrestoPrincipal> grantees, boolean withAdminOption, Optional<PrestoPrincipal> grantor, String catalogName)
void	checkCanGrantTablePrivilege(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, Privilege privilege, SchemaTableName tableName, PrestoPrincipal grantee, boolean withGrantOption)
void	checkCanInsertIntoTable(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanRenameColumn(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName)
void	checkCanRenameSchema(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String schemaName, String newSchemaName)
void	checkCanRenameTable(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName, SchemaTableName newTableName)
void	checkCanRevokeRoles(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, Set<String> roles, Set<PrestoPrincipal> grantees, boolean adminOptionFor, Optional<PrestoPrincipal> grantor, String catalogName)
void	checkCanRevokeTablePrivilege(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, Privilege privilege, SchemaTableName tableName, PrestoPrincipal revokee, boolean grantOptionFor)
void	checkCanSelectFromColumns(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, SchemaTableName tableName, Set<Subfield> columnOrSubfieldNames)
void	checkCanSetCatalogSessionProperty(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String propertyName)
void	checkCanSetRole(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String role, String catalogName)
void	checkCanShowCurrentRoles(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String catalogName)
void	checkCanShowRoleGrants(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String catalogName)
void	checkCanShowRoles(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String catalogName)
void	checkCanShowSchemas(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context)
void	checkCanShowTablesMetadata(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, String schemaName)
protected ConnectorAccessControl	delegate()
Set<String>	filterSchemas(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, Set<String> schemaNames)
Set<SchemaTableName>	filterTables(ConnectorTransactionHandle transactionHandle, ConnectorIdentity identity, AccessControlContext context, Set<SchemaTableName> tableNames)

Methods inherited from class com.facebook.presto.plugin.base.security.ForwardingConnectorAccessControl

checkCanTruncateTable, of

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SystemTableAwareAccessControl

public SystemTableAwareAccessControl(ConnectorAccessControl delegate)

Method Detail

delegate

protected ConnectorAccessControl delegate()

Specified by:

delegate in class ForwardingConnectorAccessControl

checkCanCreateSchema

public void checkCanCreateSchema(ConnectorTransactionHandle transactionHandle,
                                 ConnectorIdentity identity,
                                 AccessControlContext context,
                                 String schemaName)

Specified by:

checkCanCreateSchema in interface ConnectorAccessControl

Overrides:

checkCanCreateSchema in class ForwardingConnectorAccessControl

checkCanDropSchema

public void checkCanDropSchema(ConnectorTransactionHandle transactionHandle,
                               ConnectorIdentity identity,
                               AccessControlContext context,
                               String schemaName)

Specified by:

checkCanDropSchema in interface ConnectorAccessControl

Overrides:

checkCanDropSchema in class ForwardingConnectorAccessControl

checkCanRenameSchema

public void checkCanRenameSchema(ConnectorTransactionHandle transactionHandle,
                                 ConnectorIdentity identity,
                                 AccessControlContext context,
                                 String schemaName,
                                 String newSchemaName)

Specified by:

checkCanRenameSchema in interface ConnectorAccessControl

Overrides:

checkCanRenameSchema in class ForwardingConnectorAccessControl

checkCanShowSchemas

public void checkCanShowSchemas(ConnectorTransactionHandle transactionHandle,
                                ConnectorIdentity identity,
                                AccessControlContext context)

Specified by:

checkCanShowSchemas in interface ConnectorAccessControl

Overrides:

checkCanShowSchemas in class ForwardingConnectorAccessControl

filterSchemas

public Set<String> filterSchemas(ConnectorTransactionHandle transactionHandle,
                                 ConnectorIdentity identity,
                                 AccessControlContext context,
                                 Set<String> schemaNames)

Specified by:

filterSchemas in interface ConnectorAccessControl

Overrides:

filterSchemas in class ForwardingConnectorAccessControl

checkCanCreateTable

public void checkCanCreateTable(ConnectorTransactionHandle transactionHandle,
                                ConnectorIdentity identity,
                                AccessControlContext context,
                                SchemaTableName tableName)

Specified by:

checkCanCreateTable in interface ConnectorAccessControl

Overrides:

checkCanCreateTable in class ForwardingConnectorAccessControl

checkCanDropTable

public void checkCanDropTable(ConnectorTransactionHandle transactionHandle,
                              ConnectorIdentity identity,
                              AccessControlContext context,
                              SchemaTableName tableName)

Specified by:

checkCanDropTable in interface ConnectorAccessControl

Overrides:

checkCanDropTable in class ForwardingConnectorAccessControl

checkCanRenameTable

public void checkCanRenameTable(ConnectorTransactionHandle transactionHandle,
                                ConnectorIdentity identity,
                                AccessControlContext context,
                                SchemaTableName tableName,
                                SchemaTableName newTableName)

Specified by:

checkCanRenameTable in interface ConnectorAccessControl

Overrides:

checkCanRenameTable in class ForwardingConnectorAccessControl

checkCanShowTablesMetadata

public void checkCanShowTablesMetadata(ConnectorTransactionHandle transactionHandle,
                                       ConnectorIdentity identity,
                                       AccessControlContext context,
                                       String schemaName)

Specified by:

checkCanShowTablesMetadata in interface ConnectorAccessControl

Overrides:

checkCanShowTablesMetadata in class ForwardingConnectorAccessControl

filterTables

public Set<SchemaTableName> filterTables(ConnectorTransactionHandle transactionHandle,
                                         ConnectorIdentity identity,
                                         AccessControlContext context,
                                         Set<SchemaTableName> tableNames)

Specified by:

filterTables in interface ConnectorAccessControl

Overrides:

filterTables in class ForwardingConnectorAccessControl

checkCanAddColumn

public void checkCanAddColumn(ConnectorTransactionHandle transactionHandle,
                              ConnectorIdentity identity,
                              AccessControlContext context,
                              SchemaTableName tableName)

Specified by:

checkCanAddColumn in interface ConnectorAccessControl

Overrides:

checkCanAddColumn in class ForwardingConnectorAccessControl

checkCanDropColumn

public void checkCanDropColumn(ConnectorTransactionHandle transactionHandle,
                               ConnectorIdentity identity,
                               AccessControlContext context,
                               SchemaTableName tableName)

Specified by:

checkCanDropColumn in interface ConnectorAccessControl

Overrides:

checkCanDropColumn in class ForwardingConnectorAccessControl

checkCanRenameColumn

public void checkCanRenameColumn(ConnectorTransactionHandle transactionHandle,
                                 ConnectorIdentity identity,
                                 AccessControlContext context,
                                 SchemaTableName tableName)

Specified by:

checkCanRenameColumn in interface ConnectorAccessControl

Overrides:

checkCanRenameColumn in class ForwardingConnectorAccessControl

checkCanSelectFromColumns

public void checkCanSelectFromColumns(ConnectorTransactionHandle transactionHandle,
                                      ConnectorIdentity identity,
                                      AccessControlContext context,
                                      SchemaTableName tableName,
                                      Set<Subfield> columnOrSubfieldNames)

Specified by:

checkCanSelectFromColumns in interface ConnectorAccessControl

Overrides:

checkCanSelectFromColumns in class ForwardingConnectorAccessControl

checkCanInsertIntoTable

public void checkCanInsertIntoTable(ConnectorTransactionHandle transactionHandle,
                                    ConnectorIdentity identity,
                                    AccessControlContext context,
                                    SchemaTableName tableName)

Specified by:

checkCanInsertIntoTable in interface ConnectorAccessControl

Overrides:

checkCanInsertIntoTable in class ForwardingConnectorAccessControl

checkCanDeleteFromTable

public void checkCanDeleteFromTable(ConnectorTransactionHandle transactionHandle,
                                    ConnectorIdentity identity,
                                    AccessControlContext context,
                                    SchemaTableName tableName)

Specified by:

checkCanDeleteFromTable in interface ConnectorAccessControl

Overrides:

checkCanDeleteFromTable in class ForwardingConnectorAccessControl

checkCanCreateView

public void checkCanCreateView(ConnectorTransactionHandle transactionHandle,
                               ConnectorIdentity identity,
                               AccessControlContext context,
                               SchemaTableName viewName)

Specified by:

checkCanCreateView in interface ConnectorAccessControl

Overrides:

checkCanCreateView in class ForwardingConnectorAccessControl

checkCanDropView

public void checkCanDropView(ConnectorTransactionHandle transactionHandle,
                             ConnectorIdentity identity,
                             AccessControlContext context,
                             SchemaTableName viewName)

Specified by:

checkCanDropView in interface ConnectorAccessControl

Overrides:

checkCanDropView in class ForwardingConnectorAccessControl

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(ConnectorTransactionHandle transactionHandle,
                                                    ConnectorIdentity identity,
                                                    AccessControlContext context,
                                                    SchemaTableName tableName,
                                                    Set<String> columnNames)

Specified by:

checkCanCreateViewWithSelectFromColumns in interface ConnectorAccessControl

Overrides:

checkCanCreateViewWithSelectFromColumns in class ForwardingConnectorAccessControl

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(ConnectorTransactionHandle transactionHandle,
                                              ConnectorIdentity identity,
                                              AccessControlContext context,
                                              String propertyName)

Specified by:

checkCanSetCatalogSessionProperty in interface ConnectorAccessControl

Overrides:

checkCanSetCatalogSessionProperty in class ForwardingConnectorAccessControl

checkCanGrantTablePrivilege

public void checkCanGrantTablePrivilege(ConnectorTransactionHandle transactionHandle,
                                        ConnectorIdentity identity,
                                        AccessControlContext context,
                                        Privilege privilege,
                                        SchemaTableName tableName,
                                        PrestoPrincipal grantee,
                                        boolean withGrantOption)

Specified by:

checkCanGrantTablePrivilege in interface ConnectorAccessControl

Overrides:

checkCanGrantTablePrivilege in class ForwardingConnectorAccessControl

checkCanRevokeTablePrivilege

public void checkCanRevokeTablePrivilege(ConnectorTransactionHandle transactionHandle,
                                         ConnectorIdentity identity,
                                         AccessControlContext context,
                                         Privilege privilege,
                                         SchemaTableName tableName,
                                         PrestoPrincipal revokee,
                                         boolean grantOptionFor)

Specified by:

checkCanRevokeTablePrivilege in interface ConnectorAccessControl

Overrides:

checkCanRevokeTablePrivilege in class ForwardingConnectorAccessControl

checkCanCreateRole

public void checkCanCreateRole(ConnectorTransactionHandle transactionHandle,
                               ConnectorIdentity identity,
                               AccessControlContext context,
                               String role,
                               Optional<PrestoPrincipal> grantor)

Specified by:

checkCanCreateRole in interface ConnectorAccessControl

Overrides:

checkCanCreateRole in class ForwardingConnectorAccessControl

checkCanDropRole

public void checkCanDropRole(ConnectorTransactionHandle transactionHandle,
                             ConnectorIdentity identity,
                             AccessControlContext context,
                             String role)

Specified by:

checkCanDropRole in interface ConnectorAccessControl

Overrides:

checkCanDropRole in class ForwardingConnectorAccessControl

checkCanGrantRoles

public void checkCanGrantRoles(ConnectorTransactionHandle transactionHandle,
                               ConnectorIdentity identity,
                               AccessControlContext context,
                               Set<String> roles,
                               Set<PrestoPrincipal> grantees,
                               boolean withAdminOption,
                               Optional<PrestoPrincipal> grantor,
                               String catalogName)

Specified by:

checkCanGrantRoles in interface ConnectorAccessControl

Overrides:

checkCanGrantRoles in class ForwardingConnectorAccessControl

checkCanRevokeRoles

public void checkCanRevokeRoles(ConnectorTransactionHandle transactionHandle,
                                ConnectorIdentity identity,
                                AccessControlContext context,
                                Set<String> roles,
                                Set<PrestoPrincipal> grantees,
                                boolean adminOptionFor,
                                Optional<PrestoPrincipal> grantor,
                                String catalogName)

Specified by:

checkCanRevokeRoles in interface ConnectorAccessControl

Overrides:

checkCanRevokeRoles in class ForwardingConnectorAccessControl

checkCanSetRole

public void checkCanSetRole(ConnectorTransactionHandle transactionHandle,
                            ConnectorIdentity identity,
                            AccessControlContext context,
                            String role,
                            String catalogName)

Specified by:

checkCanSetRole in interface ConnectorAccessControl

Overrides:

checkCanSetRole in class ForwardingConnectorAccessControl

checkCanShowRoles

public void checkCanShowRoles(ConnectorTransactionHandle transactionHandle,
                              ConnectorIdentity identity,
                              AccessControlContext context,
                              String catalogName)

Specified by:

checkCanShowRoles in interface ConnectorAccessControl

Overrides:

checkCanShowRoles in class ForwardingConnectorAccessControl

checkCanShowCurrentRoles

public void checkCanShowCurrentRoles(ConnectorTransactionHandle transactionHandle,
                                     ConnectorIdentity identity,
                                     AccessControlContext context,
                                     String catalogName)

Specified by:

checkCanShowCurrentRoles in interface ConnectorAccessControl

Overrides:

checkCanShowCurrentRoles in class ForwardingConnectorAccessControl

checkCanShowRoleGrants

public void checkCanShowRoleGrants(ConnectorTransactionHandle transactionHandle,
                                   ConnectorIdentity identity,
                                   AccessControlContext context,
                                   String catalogName)

Specified by:

checkCanShowRoleGrants in interface ConnectorAccessControl

Overrides:

checkCanShowRoleGrants in class ForwardingConnectorAccessControl