io.prestosql.testing

Class TestingAccessControlManager

java.lang.Object

io.prestosql.security.AccessControlManager

io.prestosql.testing.TestingAccessControlManager

All Implemented Interfaces:

AccessControl

public class TestingAccessControlManager
extends AccessControlManager

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	TestingAccessControlManager.TestingPrivilege
static class	TestingAccessControlManager.TestingPrivilegeType

Constructor Summary

Constructors

Constructor and Description
TestingAccessControlManager(TransactionManager transactionManager)

Method Summary

Modifier and Type	Method and Description
void	checkCanAddColumns(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to add columns to the specified table.
void	checkCanCreateSchema(TransactionId transactionId, Identity identity, CatalogSchemaName schemaName) Check if identity is allowed to create the specified schema.
void	checkCanCreateTable(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to create the specified table.
void	checkCanCreateView(TransactionId transactionId, Identity identity, QualifiedObjectName viewName) Check if identity is allowed to create the specified view.
void	checkCanCreateViewWithSelectFromColumns(TransactionId transactionId, Identity identity, QualifiedObjectName tableName, Set<String> columnNames) Check if identity is allowed to create a view that selects from the specified columns.
void	checkCanDeleteFromTable(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to delete from the specified table.
void	checkCanDropColumn(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to drop columns from the specified table.
void	checkCanDropSchema(TransactionId transactionId, Identity identity, CatalogSchemaName schemaName) Check if identity is allowed to drop the specified schema.
void	checkCanDropTable(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to drop the specified table.
void	checkCanDropView(TransactionId transactionId, Identity identity, QualifiedObjectName viewName) Check if identity is allowed to drop the specified view.
void	checkCanInsertIntoTable(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to insert into the specified table.
void	checkCanRenameColumn(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to rename a column in the specified table.
void	checkCanRenameSchema(TransactionId transactionId, Identity identity, CatalogSchemaName schemaName, String newSchemaName) Check if identity is allowed to rename the specified schema.
void	checkCanRenameTable(TransactionId transactionId, Identity identity, QualifiedObjectName tableName, QualifiedObjectName newTableName) Check if identity is allowed to rename the specified table.
void	checkCanSelectFromColumns(TransactionId transactionId, Identity identity, QualifiedObjectName tableName, Set<String> columns) Check if identity is allowed to select from the specified columns.
void	checkCanSetCatalogSessionProperty(TransactionId transactionId, Identity identity, String catalogName, String propertyName) Check if identity is allowed to set the specified catalog property.
void	checkCanSetSystemSessionProperty(Identity identity, String propertyName) Check if identity is allowed to set the specified system property.
void	checkCanSetTableComment(TransactionId transactionId, Identity identity, QualifiedObjectName tableName) Check if identity is allowed to comment the specified table.
void	checkCanSetUser(Optional<Principal> principal, String userName) Check if the principal is allowed to be the specified user.
void	deny(TestingAccessControlManager.TestingPrivilege... deniedPrivileges)
static TestingAccessControlManager.TestingPrivilege	privilege(String userName, String entityName, TestingAccessControlManager.TestingPrivilegeType type)
static TestingAccessControlManager.TestingPrivilege	privilege(String entityName, TestingAccessControlManager.TestingPrivilegeType type)
void	reset()

Methods inherited from class io.prestosql.security.AccessControlManager

addCatalogAccessControl, addSystemAccessControlFactory, checkCanAccessCatalog, checkCanCreateRole, checkCanDropRole, checkCanGrantRoles, checkCanGrantTablePrivilege, checkCanRevokeRoles, checkCanRevokeTablePrivilege, checkCanSetRole, checkCanShowColumnsMetadata, checkCanShowCurrentRoles, checkCanShowRoleGrants, checkCanShowRoles, checkCanShowSchemas, checkCanShowTablesMetadata, filterCatalogs, filterColumns, filterSchemas, filterTables, getAuthenticationFail, getAuthenticationSuccess, getAuthorizationFail, getAuthorizationSuccess, loadSystemAccessControl, removeCatalogAccessControl, setSystemAccessControl

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TestingAccessControlManager

@Inject
public TestingAccessControlManager(TransactionManager transactionManager)

Method Detail

privilege

public static TestingAccessControlManager.TestingPrivilege privilege(String entityName,
                                                                     TestingAccessControlManager.TestingPrivilegeType type)

privilege

public static TestingAccessControlManager.TestingPrivilege privilege(String userName,
                                                                     String entityName,
                                                                     TestingAccessControlManager.TestingPrivilegeType type)

deny

public void deny(TestingAccessControlManager.TestingPrivilege... deniedPrivileges)

reset

public void reset()

checkCanSetUser

public void checkCanSetUser(Optional<Principal> principal,
                            String userName)

Description copied from interface: AccessControl

Check if the principal is allowed to be the specified user.

Specified by:

checkCanSetUser in interface AccessControl

Overrides:

checkCanSetUser in class AccessControlManager

checkCanCreateSchema

public void checkCanCreateSchema(TransactionId transactionId,
                                 Identity identity,
                                 CatalogSchemaName schemaName)

Description copied from interface: AccessControl

Check if identity is allowed to create the specified schema.

Specified by:

checkCanCreateSchema in interface AccessControl

Overrides:

checkCanCreateSchema in class AccessControlManager

checkCanDropSchema

public void checkCanDropSchema(TransactionId transactionId,
                               Identity identity,
                               CatalogSchemaName schemaName)

Description copied from interface: AccessControl

Check if identity is allowed to drop the specified schema.

Specified by:

checkCanDropSchema in interface AccessControl

Overrides:

checkCanDropSchema in class AccessControlManager

checkCanRenameSchema

public void checkCanRenameSchema(TransactionId transactionId,
                                 Identity identity,
                                 CatalogSchemaName schemaName,
                                 String newSchemaName)

Description copied from interface: AccessControl

Check if identity is allowed to rename the specified schema.

Specified by:

checkCanRenameSchema in interface AccessControl

Overrides:

checkCanRenameSchema in class AccessControlManager

checkCanCreateTable

public void checkCanCreateTable(TransactionId transactionId,
                                Identity identity,
                                QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to create the specified table.

Specified by:

checkCanCreateTable in interface AccessControl

Overrides:

checkCanCreateTable in class AccessControlManager

checkCanDropTable

public void checkCanDropTable(TransactionId transactionId,
                              Identity identity,
                              QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to drop the specified table.

Specified by:

checkCanDropTable in interface AccessControl

Overrides:

checkCanDropTable in class AccessControlManager

checkCanRenameTable

public void checkCanRenameTable(TransactionId transactionId,
                                Identity identity,
                                QualifiedObjectName tableName,
                                QualifiedObjectName newTableName)

Description copied from interface: AccessControl

Check if identity is allowed to rename the specified table.

Specified by:

checkCanRenameTable in interface AccessControl

Overrides:

checkCanRenameTable in class AccessControlManager

checkCanSetTableComment

public void checkCanSetTableComment(TransactionId transactionId,
                                    Identity identity,
                                    QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to comment the specified table.

Specified by:

checkCanSetTableComment in interface AccessControl

Overrides:

checkCanSetTableComment in class AccessControlManager

checkCanAddColumns

public void checkCanAddColumns(TransactionId transactionId,
                               Identity identity,
                               QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to add columns to the specified table.

Specified by:

checkCanAddColumns in interface AccessControl

Overrides:

checkCanAddColumns in class AccessControlManager

checkCanDropColumn

public void checkCanDropColumn(TransactionId transactionId,
                               Identity identity,
                               QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to drop columns from the specified table.

Specified by:

checkCanDropColumn in interface AccessControl

Overrides:

checkCanDropColumn in class AccessControlManager

checkCanRenameColumn

public void checkCanRenameColumn(TransactionId transactionId,
                                 Identity identity,
                                 QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to rename a column in the specified table.

Specified by:

checkCanRenameColumn in interface AccessControl

Overrides:

checkCanRenameColumn in class AccessControlManager

checkCanInsertIntoTable

public void checkCanInsertIntoTable(TransactionId transactionId,
                                    Identity identity,
                                    QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to insert into the specified table.

Specified by:

checkCanInsertIntoTable in interface AccessControl

Overrides:

checkCanInsertIntoTable in class AccessControlManager

checkCanDeleteFromTable

public void checkCanDeleteFromTable(TransactionId transactionId,
                                    Identity identity,
                                    QualifiedObjectName tableName)

Description copied from interface: AccessControl

Check if identity is allowed to delete from the specified table.

Specified by:

checkCanDeleteFromTable in interface AccessControl

Overrides:

checkCanDeleteFromTable in class AccessControlManager

checkCanCreateView

public void checkCanCreateView(TransactionId transactionId,
                               Identity identity,
                               QualifiedObjectName viewName)

Description copied from interface: AccessControl

Check if identity is allowed to create the specified view.

Specified by:

checkCanCreateView in interface AccessControl

Overrides:

checkCanCreateView in class AccessControlManager

checkCanDropView

public void checkCanDropView(TransactionId transactionId,
                             Identity identity,
                             QualifiedObjectName viewName)

Description copied from interface: AccessControl

Check if identity is allowed to drop the specified view.

Specified by:

checkCanDropView in interface AccessControl

Overrides:

checkCanDropView in class AccessControlManager

checkCanSetSystemSessionProperty

public void checkCanSetSystemSessionProperty(Identity identity,
                                             String propertyName)

Description copied from interface: AccessControl

Check if identity is allowed to set the specified system property.

Specified by:

checkCanSetSystemSessionProperty in interface AccessControl

Overrides:

checkCanSetSystemSessionProperty in class AccessControlManager

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(TransactionId transactionId,
                                                    Identity identity,
                                                    QualifiedObjectName tableName,
                                                    Set<String> columnNames)

Description copied from interface: AccessControl

Check if identity is allowed to create a view that selects from the specified columns.

Specified by:

checkCanCreateViewWithSelectFromColumns in interface AccessControl

Overrides:

checkCanCreateViewWithSelectFromColumns in class AccessControlManager

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(TransactionId transactionId,
                                              Identity identity,
                                              String catalogName,
                                              String propertyName)

Description copied from interface: AccessControl

Check if identity is allowed to set the specified catalog property.

Specified by:

checkCanSetCatalogSessionProperty in interface AccessControl

Overrides:

checkCanSetCatalogSessionProperty in class AccessControlManager

checkCanSelectFromColumns

public void checkCanSelectFromColumns(TransactionId transactionId,
                                      Identity identity,
                                      QualifiedObjectName tableName,
                                      Set<String> columns)

Description copied from interface: AccessControl

Check if identity is allowed to select from the specified columns. The column set can be empty.

Specified by:

checkCanSelectFromColumns in interface AccessControl

Overrides:

checkCanSelectFromColumns in class AccessControlManager