public class SqlStandardAccessControlMetadata extends Object implements AccessControlMetadata
| Constructor and Description |
|---|
SqlStandardAccessControlMetadata(SemiTransactionalHiveMetastore metastore) |
| Modifier and Type | Method and Description |
|---|---|
void |
createRole(ConnectorSession session,
String role,
Optional<HivePrincipal> grantor)
Creates the specified role.
|
void |
dropRole(ConnectorSession session,
String role)
Drops the specified role.
|
void |
grantRoles(ConnectorSession session,
Set<String> roles,
Set<HivePrincipal> grantees,
boolean adminOption,
Optional<HivePrincipal> grantor)
Grants the specified roles to the specified grantees
|
void |
grantTablePrivileges(ConnectorSession session,
SchemaTableName schemaTableName,
Set<Privilege> privileges,
HivePrincipal grantee,
boolean grantOption)
Grants the specified privilege to the specified user on the specified table
|
Set<RoleGrant> |
listApplicableRoles(ConnectorSession session,
HivePrincipal principal)
List applicable roles, including the transitive grants, for the specified principal
|
Set<String> |
listEnabledRoles(ConnectorSession session)
List applicable roles, including the transitive grants, in given session
|
Set<RoleGrant> |
listRoleGrants(ConnectorSession session,
HivePrincipal principal)
List role grants for a given principal, not recursively.
|
Set<String> |
listRoles(ConnectorSession session)
List available roles.
|
List<GrantInfo> |
listTablePrivileges(ConnectorSession session,
List<SchemaTableName> tableNames)
List the table privileges granted to the specified grantee for the tables that have the specified prefix considering the selected session role
|
void |
revokeRoles(ConnectorSession session,
Set<String> roles,
Set<HivePrincipal> grantees,
boolean adminOption,
Optional<HivePrincipal> grantor)
Revokes the specified roles from the specified grantees
|
void |
revokeTablePrivileges(ConnectorSession session,
SchemaTableName schemaTableName,
Set<Privilege> privileges,
HivePrincipal grantee,
boolean grantOption)
Revokes the specified privilege on the specified table from the specified user
|
public SqlStandardAccessControlMetadata(SemiTransactionalHiveMetastore metastore)
public void createRole(ConnectorSession session, String role, Optional<HivePrincipal> grantor)
AccessControlMetadatacreateRole in interface AccessControlMetadatagrantor - represents the principal specified by WITH ADMIN statementpublic void dropRole(ConnectorSession session, String role)
AccessControlMetadatadropRole in interface AccessControlMetadatapublic Set<String> listRoles(ConnectorSession session)
AccessControlMetadatalistRoles in interface AccessControlMetadatapublic Set<RoleGrant> listRoleGrants(ConnectorSession session, HivePrincipal principal)
AccessControlMetadatalistRoleGrants in interface AccessControlMetadatapublic void grantRoles(ConnectorSession session, Set<String> roles, Set<HivePrincipal> grantees, boolean adminOption, Optional<HivePrincipal> grantor)
AccessControlMetadatagrantRoles in interface AccessControlMetadatagrantor - represents the principal specified by GRANTED BY statementpublic void revokeRoles(ConnectorSession session, Set<String> roles, Set<HivePrincipal> grantees, boolean adminOption, Optional<HivePrincipal> grantor)
AccessControlMetadatarevokeRoles in interface AccessControlMetadatagrantor - represents the principal specified by GRANTED BY statementpublic Set<RoleGrant> listApplicableRoles(ConnectorSession session, HivePrincipal principal)
AccessControlMetadatalistApplicableRoles in interface AccessControlMetadatapublic Set<String> listEnabledRoles(ConnectorSession session)
AccessControlMetadatalistEnabledRoles in interface AccessControlMetadatapublic void grantTablePrivileges(ConnectorSession session, SchemaTableName schemaTableName, Set<Privilege> privileges, HivePrincipal grantee, boolean grantOption)
AccessControlMetadatagrantTablePrivileges in interface AccessControlMetadatapublic void revokeTablePrivileges(ConnectorSession session, SchemaTableName schemaTableName, Set<Privilege> privileges, HivePrincipal grantee, boolean grantOption)
AccessControlMetadatarevokeTablePrivileges in interface AccessControlMetadatapublic List<GrantInfo> listTablePrivileges(ConnectorSession session, List<SchemaTableName> tableNames)
AccessControlMetadatalistTablePrivileges in interface AccessControlMetadataCopyright © 2012–2020. All rights reserved.