Package io.trino.security

Class ViewAccessControl

java.lang.Object

io.trino.security.ForwardingAccessControl

io.trino.security.ViewAccessControl

All Implemented Interfaces:

AccessControl

public class ViewAccessControl
extends ForwardingAccessControl

Constructor Summary

Constructors

Constructor	Description
ViewAccessControl(AccessControl delegate)

Method Summary

Modifier and Type	Method	Description
boolean	canCreateViewWithExecuteFunction(SecurityContext context, QualifiedObjectName functionName)	Is the identity allowed to create a view that executes the specified function?
boolean	canExecuteFunction(SecurityContext context, QualifiedObjectName functionName)	Is the identity allowed to execute function?
void	checkCanCreateViewWithSelectFromColumns(SecurityContext context, QualifiedObjectName tableName, Set<String> columnNames)	Check if identity is allowed to create a view that selects from the specified columns.
void	checkCanSelectFromColumns(SecurityContext context, QualifiedObjectName tableName, Set<String> columnNames)	Check if identity is allowed to select from the specified columns.
protected AccessControl	delegate()
Map<SchemaTableName,Set<String>>	filterColumns(SecurityContext context, String catalogName, Map<SchemaTableName,Set<String>> tableColumns)	Filter lists of columns of multiple tables to those visible to the identity.
Optional<ViewExpression>	getColumnMask(SecurityContext context, QualifiedObjectName tableName, String columnName, Type type)
List<ViewExpression>	getRowFilters(SecurityContext context, QualifiedObjectName tableName)

Methods inherited from class io.trino.security.ForwardingAccessControl

checkCanAddColumns, checkCanAlterColumn, checkCanCreateCatalog, checkCanCreateFunction, checkCanCreateMaterializedView, checkCanCreateRole, checkCanCreateSchema, checkCanCreateTable, checkCanCreateView, checkCanDeleteFromTable, checkCanDenyEntityPrivilege, checkCanDenySchemaPrivilege, checkCanDenyTablePrivilege, checkCanDropCatalog, checkCanDropColumn, checkCanDropFunction, checkCanDropMaterializedView, checkCanDropRole, checkCanDropSchema, checkCanDropTable, checkCanDropView, checkCanExecuteProcedure, checkCanExecuteQuery, checkCanExecuteTableProcedure, checkCanGrantEntityPrivilege, checkCanGrantRoles, checkCanGrantSchemaPrivilege, checkCanGrantTablePrivilege, checkCanImpersonateUser, checkCanInsertIntoTable, checkCanKillQueryOwnedBy, checkCanReadSystemInformation, checkCanRefreshMaterializedView, checkCanRenameColumn, checkCanRenameMaterializedView, checkCanRenameSchema, checkCanRenameTable, checkCanRenameView, checkCanRevokeEntityPrivilege, checkCanRevokeRoles, checkCanRevokeSchemaPrivilege, checkCanRevokeTablePrivilege, checkCanSetCatalogRole, checkCanSetCatalogSessionProperty, checkCanSetColumnComment, checkCanSetMaterializedViewProperties, checkCanSetSchemaAuthorization, checkCanSetSystemSessionProperty, checkCanSetTableAuthorization, checkCanSetTableComment, checkCanSetTableProperties, checkCanSetUser, checkCanSetViewAuthorization, checkCanSetViewComment, checkCanShowColumns, checkCanShowCreateSchema, checkCanShowCreateTable, checkCanShowCurrentRoles, checkCanShowFunctions, checkCanShowRoleGrants, checkCanShowRoles, checkCanShowSchemas, checkCanShowTables, checkCanTruncateTable, checkCanUpdateTableColumns, checkCanViewQueryOwnedBy, checkCanWriteSystemInformation, filterCatalogs, filterFunctions, filterQueriesOwnedBy, filterSchemas, filterTables, of

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ViewAccessControl

public ViewAccessControl(AccessControl delegate)

Method Details

delegate

protected AccessControl delegate()

Specified by:

delegate in class ForwardingAccessControl

checkCanSelectFromColumns

public void checkCanSelectFromColumns(SecurityContext context,
 QualifiedObjectName tableName,
 Set<String> columnNames)

Description copied from interface: AccessControl

Check if identity is allowed to select from the specified columns. The column set can be empty.

Specified by:

checkCanSelectFromColumns in interface AccessControl

Overrides:

checkCanSelectFromColumns in class ForwardingAccessControl

filterColumns

public Map<SchemaTableName,Set<String>> filterColumns(SecurityContext context,
 String catalogName,
 Map<SchemaTableName,Set<String>> tableColumns)

Description copied from interface: AccessControl

Filter lists of columns of multiple tables to those visible to the identity.

Specified by:

filterColumns in interface AccessControl

Overrides:

filterColumns in class ForwardingAccessControl

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(SecurityContext context,
 QualifiedObjectName tableName,
 Set<String> columnNames)

Description copied from interface: AccessControl

Check if identity is allowed to create a view that selects from the specified columns.

Specified by:

checkCanCreateViewWithSelectFromColumns in interface AccessControl

Overrides:

checkCanCreateViewWithSelectFromColumns in class ForwardingAccessControl

canExecuteFunction

public boolean canExecuteFunction(SecurityContext context,
 QualifiedObjectName functionName)

Description copied from interface: AccessControl

Is the identity allowed to execute function?

Specified by:

canExecuteFunction in interface AccessControl

Overrides:

canExecuteFunction in class ForwardingAccessControl

canCreateViewWithExecuteFunction

public boolean canCreateViewWithExecuteFunction(SecurityContext context,
 QualifiedObjectName functionName)

Description copied from interface: AccessControl

Is the identity allowed to create a view that executes the specified function?

Specified by:

canCreateViewWithExecuteFunction in interface AccessControl

Overrides:

canCreateViewWithExecuteFunction in class ForwardingAccessControl

getRowFilters

public List<ViewExpression> getRowFilters(SecurityContext context,
 QualifiedObjectName tableName)

Specified by:

getRowFilters in interface AccessControl

Overrides:

getRowFilters in class ForwardingAccessControl

getColumnMask

public Optional<ViewExpression> getColumnMask(SecurityContext context,
 QualifiedObjectName tableName,
 String columnName,
 Type type)

Specified by:

getColumnMask in interface AccessControl

Overrides:

getColumnMask in class ForwardingAccessControl