Package io.trino.plugin.base.security

Class ReadOnlySystemAccessControl

java.lang.Object

io.trino.plugin.base.security.ReadOnlySystemAccessControl

All Implemented Interfaces:

SystemAccessControl

public class ReadOnlySystemAccessControl
extends Object
implements SystemAccessControl

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ReadOnlySystemAccessControl.Factory

Field Summary

Fields

Modifier and Type	Field	Description
static String	NAME

Constructor Summary

Constructors

Constructor	Description
ReadOnlySystemAccessControl()

Method Summary

Modifier and Type	Method	Description
void	checkCanAccessCatalog(SystemSecurityContext context, String catalogName)
void	checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)
void	checkCanExecuteFunction(SystemSecurityContext systemSecurityContext, String functionName)
void	checkCanExecuteQuery(SystemSecurityContext context)
void	checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, String functionName, TrinoPrincipal grantee, boolean grantOption)
void	checkCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)
void	checkCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName)
void	checkCanSetSystemSessionProperty(SystemSecurityContext context, String propertyName)
void	checkCanSetUser(Optional<Principal> principal, String userName)
void	checkCanShowColumns(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanShowRoles(SystemSecurityContext context, String catalogName)
void	checkCanShowSchemas(SystemSecurityContext context, String catalogName)
void	checkCanShowTables(SystemSecurityContext context, CatalogSchemaName schema)
void	checkCanViewQueryOwnedBy(SystemSecurityContext context, String queryOwner)
Set<String>	filterCatalogs(SystemSecurityContext context, Set<String> catalogs)
Set<String>	filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, Set<String> columns)
Set<String>	filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames)
Set<SchemaTableName>	filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames)
Set<String>	filterViewQueryOwnedBy(SystemSecurityContext context, Set<String> queryOwners)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.trino.spi.security.SystemAccessControl

checkCanAddColumn, checkCanCreateMaterializedView, checkCanCreateSchema, checkCanCreateTable, checkCanCreateView, checkCanDeleteFromTable, checkCanDropColumn, checkCanDropMaterializedView, checkCanDropSchema, checkCanDropTable, checkCanDropView, checkCanExecuteProcedure, checkCanGrantSchemaPrivilege, checkCanGrantTablePrivilege, checkCanImpersonateUser, checkCanInsertIntoTable, checkCanKillQueryOwnedBy, checkCanReadSystemInformation, checkCanRefreshMaterializedView, checkCanRenameColumn, checkCanRenameSchema, checkCanRenameTable, checkCanRenameView, checkCanRevokeSchemaPrivilege, checkCanRevokeTablePrivilege, checkCanSetColumnComment, checkCanSetSchemaAuthorization, checkCanSetTableAuthorization, checkCanSetTableComment, checkCanSetViewAuthorization, checkCanShowCreateSchema, checkCanShowCreateTable, checkCanUpdateTableColumns, checkCanWriteSystemInformation, getColumnMask, getEventListeners, getRowFilter

Field Detail

NAME

public static final String NAME

See Also:

Constant Field Values

Constructor Detail

ReadOnlySystemAccessControl

public ReadOnlySystemAccessControl()

Method Detail

checkCanSetUser

public void checkCanSetUser(Optional<Principal> principal,
                            String userName)

Specified by:

checkCanSetUser in interface SystemAccessControl

checkCanExecuteQuery

public void checkCanExecuteQuery(SystemSecurityContext context)

Specified by:

checkCanExecuteQuery in interface SystemAccessControl

checkCanViewQueryOwnedBy

public void checkCanViewQueryOwnedBy(SystemSecurityContext context,
                                     String queryOwner)

Specified by:

checkCanViewQueryOwnedBy in interface SystemAccessControl

filterViewQueryOwnedBy

public Set<String> filterViewQueryOwnedBy(SystemSecurityContext context,
                                          Set<String> queryOwners)

Specified by:

filterViewQueryOwnedBy in interface SystemAccessControl

checkCanSetSystemSessionProperty

public void checkCanSetSystemSessionProperty(SystemSecurityContext context,
                                             String propertyName)

Specified by:

checkCanSetSystemSessionProperty in interface SystemAccessControl

checkCanAccessCatalog

public void checkCanAccessCatalog(SystemSecurityContext context,
                                  String catalogName)

Specified by:

checkCanAccessCatalog in interface SystemAccessControl

checkCanSelectFromColumns

public void checkCanSelectFromColumns(SystemSecurityContext context,
                                      CatalogSchemaTableName table,
                                      Set<String> columns)

Specified by:

checkCanSelectFromColumns in interface SystemAccessControl

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(SystemSecurityContext context,
                                              String catalogName,
                                              String propertyName)

Specified by:

checkCanSetCatalogSessionProperty in interface SystemAccessControl

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context,
                                                    CatalogSchemaTableName table,
                                                    Set<String> columns)

Specified by:

checkCanCreateViewWithSelectFromColumns in interface SystemAccessControl

checkCanGrantExecuteFunctionPrivilege

public void checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context,
                                                  String functionName,
                                                  TrinoPrincipal grantee,
                                                  boolean grantOption)

Specified by:

checkCanGrantExecuteFunctionPrivilege in interface SystemAccessControl

filterCatalogs

public Set<String> filterCatalogs(SystemSecurityContext context,
                                  Set<String> catalogs)

Specified by:

filterCatalogs in interface SystemAccessControl

filterSchemas

public Set<String> filterSchemas(SystemSecurityContext context,
                                 String catalogName,
                                 Set<String> schemaNames)

Specified by:

filterSchemas in interface SystemAccessControl

filterTables

public Set<SchemaTableName> filterTables(SystemSecurityContext context,
                                         String catalogName,
                                         Set<SchemaTableName> tableNames)

Specified by:

filterTables in interface SystemAccessControl

checkCanShowColumns

public void checkCanShowColumns(SystemSecurityContext context,
                                CatalogSchemaTableName table)

Specified by:

checkCanShowColumns in interface SystemAccessControl

filterColumns

public Set<String> filterColumns(SystemSecurityContext context,
                                 CatalogSchemaTableName tableName,
                                 Set<String> columns)

Specified by:

filterColumns in interface SystemAccessControl

checkCanShowSchemas

public void checkCanShowSchemas(SystemSecurityContext context,
                                String catalogName)

Specified by:

checkCanShowSchemas in interface SystemAccessControl

checkCanShowTables

public void checkCanShowTables(SystemSecurityContext context,
                               CatalogSchemaName schema)

Specified by:

checkCanShowTables in interface SystemAccessControl

checkCanShowRoles

public void checkCanShowRoles(SystemSecurityContext context,
                              String catalogName)

Specified by:

checkCanShowRoles in interface SystemAccessControl

checkCanExecuteFunction

public void checkCanExecuteFunction(SystemSecurityContext systemSecurityContext,
                                    String functionName)

Specified by:

checkCanExecuteFunction in interface SystemAccessControl