io.prestosql.plugin.base.security

Class FileBasedSystemAccessControl

java.lang.Object

io.prestosql.plugin.base.security.FileBasedSystemAccessControl

All Implemented Interfaces:

SystemAccessControl

public class FileBasedSystemAccessControl
extends Object
implements SystemAccessControl

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	FileBasedSystemAccessControl.Factory

Field Summary

Fields

Modifier and Type	Field and Description
static String	NAME

Method Summary

Modifier and Type	Method and Description
void	checkCanAccessCatalog(SystemSecurityContext context, String catalogName)
void	checkCanAddColumn(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanCreateSchema(SystemSecurityContext context, CatalogSchemaName schema)
void	checkCanCreateTable(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanCreateView(SystemSecurityContext context, CatalogSchemaTableName view)
void	checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)
void	checkCanDeleteFromTable(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanDropColumn(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanDropSchema(SystemSecurityContext context, CatalogSchemaName schema)
void	checkCanDropTable(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanDropView(SystemSecurityContext context, CatalogSchemaTableName view)
void	checkCanExecuteFunction(SystemSecurityContext systemSecurityContext, String functionName)
void	checkCanExecuteProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName procedure)
void	checkCanExecuteQuery(SystemSecurityContext context)
void	checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, String functionName, PrestoPrincipal grantee, boolean grantOption)
void	checkCanGrantTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, PrestoPrincipal grantee, boolean grantOption)
void	checkCanImpersonateUser(SystemSecurityContext context, String userName)
void	checkCanInsertIntoTable(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanKillQueryOwnedBy(SystemSecurityContext context, String queryOwner)
void	checkCanRenameColumn(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanRenameSchema(SystemSecurityContext context, CatalogSchemaName schema, String newSchemaName)
void	checkCanRenameTable(SystemSecurityContext context, CatalogSchemaTableName table, CatalogSchemaTableName newTable)
void	checkCanRenameView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView)
void	checkCanRevokeTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, PrestoPrincipal revokee, boolean grantOption)
void	checkCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)
void	checkCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName)
void	checkCanSetSchemaAuthorization(SystemSecurityContext context, CatalogSchemaName schema, PrestoPrincipal principal)
void	checkCanSetSystemSessionProperty(SystemSecurityContext context, String propertyName)
void	checkCanSetTableComment(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanSetUser(Optional<Principal> principal, String userName)
void	checkCanShowColumns(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanShowCreateTable(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanShowRoles(SystemSecurityContext context, String catalogName)
void	checkCanShowSchemas(SystemSecurityContext context, String catalogName)
void	checkCanShowTables(SystemSecurityContext context, CatalogSchemaName schema)
void	checkCanViewQueryOwnedBy(SystemSecurityContext context, String queryOwner)
Set<String>	filterCatalogs(SystemSecurityContext context, Set<String> catalogs)
List<ColumnMetadata>	filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, List<ColumnMetadata> columns)
Set<String>	filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames)
Set<SchemaTableName>	filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames)
Set<String>	filterViewQueryOwnedBy(SystemSecurityContext context, Set<String> queryOwners)
Optional<ViewExpression>	getColumnMask(SystemSecurityContext context, CatalogSchemaTableName tableName, String columnName, Type type)
Optional<ViewExpression>	getRowFilter(SystemSecurityContext context, CatalogSchemaTableName tableName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

NAME

public static final String NAME

See Also:

Constant Field Values

Method Detail

checkCanImpersonateUser

public void checkCanImpersonateUser(SystemSecurityContext context,
                                    String userName)

Specified by:

checkCanImpersonateUser in interface SystemAccessControl

checkCanSetUser

public void checkCanSetUser(Optional<Principal> principal,
                            String userName)

Specified by:

checkCanSetUser in interface SystemAccessControl

checkCanExecuteQuery

public void checkCanExecuteQuery(SystemSecurityContext context)

Specified by:

checkCanExecuteQuery in interface SystemAccessControl

checkCanViewQueryOwnedBy

public void checkCanViewQueryOwnedBy(SystemSecurityContext context,
                                     String queryOwner)

Specified by:

checkCanViewQueryOwnedBy in interface SystemAccessControl

filterViewQueryOwnedBy

public Set<String> filterViewQueryOwnedBy(SystemSecurityContext context,
                                          Set<String> queryOwners)

Specified by:

filterViewQueryOwnedBy in interface SystemAccessControl

checkCanKillQueryOwnedBy

public void checkCanKillQueryOwnedBy(SystemSecurityContext context,
                                     String queryOwner)

Specified by:

checkCanKillQueryOwnedBy in interface SystemAccessControl

checkCanSetSystemSessionProperty

public void checkCanSetSystemSessionProperty(SystemSecurityContext context,
                                             String propertyName)

Specified by:

checkCanSetSystemSessionProperty in interface SystemAccessControl

checkCanAccessCatalog

public void checkCanAccessCatalog(SystemSecurityContext context,
                                  String catalogName)

Specified by:

checkCanAccessCatalog in interface SystemAccessControl

filterCatalogs

public Set<String> filterCatalogs(SystemSecurityContext context,
                                  Set<String> catalogs)

Specified by:

filterCatalogs in interface SystemAccessControl

checkCanCreateSchema

public void checkCanCreateSchema(SystemSecurityContext context,
                                 CatalogSchemaName schema)

Specified by:

checkCanCreateSchema in interface SystemAccessControl

checkCanDropSchema

public void checkCanDropSchema(SystemSecurityContext context,
                               CatalogSchemaName schema)

Specified by:

checkCanDropSchema in interface SystemAccessControl

checkCanRenameSchema

public void checkCanRenameSchema(SystemSecurityContext context,
                                 CatalogSchemaName schema,
                                 String newSchemaName)

Specified by:

checkCanRenameSchema in interface SystemAccessControl

checkCanSetSchemaAuthorization

public void checkCanSetSchemaAuthorization(SystemSecurityContext context,
                                           CatalogSchemaName schema,
                                           PrestoPrincipal principal)

Specified by:

checkCanSetSchemaAuthorization in interface SystemAccessControl

checkCanShowSchemas

public void checkCanShowSchemas(SystemSecurityContext context,
                                String catalogName)

Specified by:

checkCanShowSchemas in interface SystemAccessControl

filterSchemas

public Set<String> filterSchemas(SystemSecurityContext context,
                                 String catalogName,
                                 Set<String> schemaNames)

Specified by:

filterSchemas in interface SystemAccessControl

checkCanShowCreateTable

public void checkCanShowCreateTable(SystemSecurityContext context,
                                    CatalogSchemaTableName table)

Specified by:

checkCanShowCreateTable in interface SystemAccessControl

checkCanCreateTable

public void checkCanCreateTable(SystemSecurityContext context,
                                CatalogSchemaTableName table)

Specified by:

checkCanCreateTable in interface SystemAccessControl

checkCanDropTable

public void checkCanDropTable(SystemSecurityContext context,
                              CatalogSchemaTableName table)

Specified by:

checkCanDropTable in interface SystemAccessControl

checkCanRenameTable

public void checkCanRenameTable(SystemSecurityContext context,
                                CatalogSchemaTableName table,
                                CatalogSchemaTableName newTable)

Specified by:

checkCanRenameTable in interface SystemAccessControl

checkCanSetTableComment

public void checkCanSetTableComment(SystemSecurityContext context,
                                    CatalogSchemaTableName table)

Specified by:

checkCanSetTableComment in interface SystemAccessControl

checkCanShowTables

public void checkCanShowTables(SystemSecurityContext context,
                               CatalogSchemaName schema)

Specified by:

checkCanShowTables in interface SystemAccessControl

filterTables

public Set<SchemaTableName> filterTables(SystemSecurityContext context,
                                         String catalogName,
                                         Set<SchemaTableName> tableNames)

Specified by:

filterTables in interface SystemAccessControl

checkCanShowColumns

public void checkCanShowColumns(SystemSecurityContext context,
                                CatalogSchemaTableName table)

Specified by:

checkCanShowColumns in interface SystemAccessControl

filterColumns

public List<ColumnMetadata> filterColumns(SystemSecurityContext context,
                                          CatalogSchemaTableName tableName,
                                          List<ColumnMetadata> columns)

Specified by:

filterColumns in interface SystemAccessControl

checkCanAddColumn

public void checkCanAddColumn(SystemSecurityContext context,
                              CatalogSchemaTableName table)

Specified by:

checkCanAddColumn in interface SystemAccessControl

checkCanDropColumn

public void checkCanDropColumn(SystemSecurityContext context,
                               CatalogSchemaTableName table)

Specified by:

checkCanDropColumn in interface SystemAccessControl

checkCanRenameColumn

public void checkCanRenameColumn(SystemSecurityContext context,
                                 CatalogSchemaTableName table)

Specified by:

checkCanRenameColumn in interface SystemAccessControl

checkCanSelectFromColumns

public void checkCanSelectFromColumns(SystemSecurityContext context,
                                      CatalogSchemaTableName table,
                                      Set<String> columns)

Specified by:

checkCanSelectFromColumns in interface SystemAccessControl

checkCanInsertIntoTable

public void checkCanInsertIntoTable(SystemSecurityContext context,
                                    CatalogSchemaTableName table)

Specified by:

checkCanInsertIntoTable in interface SystemAccessControl

checkCanDeleteFromTable

public void checkCanDeleteFromTable(SystemSecurityContext context,
                                    CatalogSchemaTableName table)

Specified by:

checkCanDeleteFromTable in interface SystemAccessControl

checkCanCreateView

public void checkCanCreateView(SystemSecurityContext context,
                               CatalogSchemaTableName view)

Specified by:

checkCanCreateView in interface SystemAccessControl

checkCanRenameView

public void checkCanRenameView(SystemSecurityContext context,
                               CatalogSchemaTableName view,
                               CatalogSchemaTableName newView)

Specified by:

checkCanRenameView in interface SystemAccessControl

checkCanDropView

public void checkCanDropView(SystemSecurityContext context,
                             CatalogSchemaTableName view)

Specified by:

checkCanDropView in interface SystemAccessControl

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context,
                                                    CatalogSchemaTableName table,
                                                    Set<String> columns)

Specified by:

checkCanCreateViewWithSelectFromColumns in interface SystemAccessControl

checkCanGrantExecuteFunctionPrivilege

public void checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context,
                                                  String functionName,
                                                  PrestoPrincipal grantee,
                                                  boolean grantOption)

Specified by:

checkCanGrantExecuteFunctionPrivilege in interface SystemAccessControl

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(SystemSecurityContext context,
                                              String catalogName,
                                              String propertyName)

Specified by:

checkCanSetCatalogSessionProperty in interface SystemAccessControl

checkCanGrantTablePrivilege

public void checkCanGrantTablePrivilege(SystemSecurityContext context,
                                        Privilege privilege,
                                        CatalogSchemaTableName table,
                                        PrestoPrincipal grantee,
                                        boolean grantOption)

Specified by:

checkCanGrantTablePrivilege in interface SystemAccessControl

checkCanRevokeTablePrivilege

public void checkCanRevokeTablePrivilege(SystemSecurityContext context,
                                         Privilege privilege,
                                         CatalogSchemaTableName table,
                                         PrestoPrincipal revokee,
                                         boolean grantOption)

Specified by:

checkCanRevokeTablePrivilege in interface SystemAccessControl

checkCanShowRoles

public void checkCanShowRoles(SystemSecurityContext context,
                              String catalogName)

Specified by:

checkCanShowRoles in interface SystemAccessControl

checkCanExecuteProcedure

public void checkCanExecuteProcedure(SystemSecurityContext systemSecurityContext,
                                     CatalogSchemaRoutineName procedure)

Specified by:

checkCanExecuteProcedure in interface SystemAccessControl

checkCanExecuteFunction

public void checkCanExecuteFunction(SystemSecurityContext systemSecurityContext,
                                    String functionName)

Specified by:

checkCanExecuteFunction in interface SystemAccessControl

getRowFilter

public Optional<ViewExpression> getRowFilter(SystemSecurityContext context,
                                             CatalogSchemaTableName tableName)

Specified by:

getRowFilter in interface SystemAccessControl

getColumnMask

public Optional<ViewExpression> getColumnMask(SystemSecurityContext context,
                                              CatalogSchemaTableName tableName,
                                              String columnName,
                                              Type type)

Specified by:

getColumnMask in interface SystemAccessControl