Package io.trino.plugin.base.security

Class DefaultSystemAccessControl

java.lang.Object

io.trino.plugin.base.security.AllowAllSystemAccessControl

io.trino.plugin.base.security.DefaultSystemAccessControl

All Implemented Interfaces:

SystemAccessControl

public class DefaultSystemAccessControl
extends AllowAllSystemAccessControl

Default system access control rules. By default all access is allowed except for user impersonation.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	DefaultSystemAccessControl.Factory

Field Summary

Fields

Modifier and Type	Field	Description
static String	NAME

Constructor Summary

Constructors

Constructor	Description
DefaultSystemAccessControl()

Method Summary

Modifier and Type	Method	Description
void	checkCanImpersonateUser(SystemSecurityContext context, String userName)

Methods inherited from class io.trino.plugin.base.security.AllowAllSystemAccessControl

checkCanAccessCatalog, checkCanAddColumn, checkCanCreateMaterializedView, checkCanCreateRole, checkCanCreateSchema, checkCanCreateTable, checkCanCreateView, checkCanCreateViewWithSelectFromColumns, checkCanDeleteFromTable, checkCanDropColumn, checkCanDropMaterializedView, checkCanDropRole, checkCanDropSchema, checkCanDropTable, checkCanDropView, checkCanExecuteFunction, checkCanExecuteProcedure, checkCanExecuteQuery, checkCanGrantExecuteFunctionPrivilege, checkCanGrantRoles, checkCanGrantSchemaPrivilege, checkCanGrantTablePrivilege, checkCanInsertIntoTable, checkCanKillQueryOwnedBy, checkCanReadSystemInformation, checkCanRefreshMaterializedView, checkCanRenameColumn, checkCanRenameSchema, checkCanRenameTable, checkCanRenameView, checkCanRevokeRoles, checkCanRevokeSchemaPrivilege, checkCanRevokeTablePrivilege, checkCanSelectFromColumns, checkCanSetCatalogSessionProperty, checkCanSetColumnComment, checkCanSetSchemaAuthorization, checkCanSetSystemSessionProperty, checkCanSetTableAuthorization, checkCanSetTableComment, checkCanSetUser, checkCanSetViewAuthorization, checkCanShowColumns, checkCanShowCreateSchema, checkCanShowCreateTable, checkCanShowCurrentRoles, checkCanShowRoleAuthorizationDescriptors, checkCanShowRoleGrants, checkCanShowRoles, checkCanShowSchemas, checkCanShowTables, checkCanUpdateTableColumns, checkCanViewQueryOwnedBy, checkCanWriteSystemInformation, filterCatalogs, filterColumns, filterSchemas, filterTables, filterViewQueryOwnedBy, getColumnMask, getEventListeners, getRowFilter

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

NAME

public static final String NAME

See Also:

Constant Field Values

Constructor Detail

DefaultSystemAccessControl

public DefaultSystemAccessControl()

Method Detail

checkCanImpersonateUser

public void checkCanImpersonateUser(SystemSecurityContext context,
                                    String userName)

Specified by:

checkCanImpersonateUser in interface SystemAccessControl

Overrides:

checkCanImpersonateUser in class AllowAllSystemAccessControl