Package io.trino.plugin.base.security
Class AllowAllSystemAccessControl
java.lang.Object
io.trino.plugin.base.security.AllowAllSystemAccessControl
- All Implemented Interfaces:
SystemAccessControl
- Direct Known Subclasses:
DefaultSystemAccessControl
-
Nested Class Summary
Nested Classes -
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidcheckCanAccessCatalog(SystemSecurityContext context, String catalogName) voidcheckCanAddColumn(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanAlterColumn(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanCreateCatalog(SystemSecurityContext context, String catalog) voidcheckCanCreateMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView, Map<String, Object> properties) voidcheckCanCreateRole(SystemSecurityContext context, String role, Optional<TrinoPrincipal> grantor) voidcheckCanCreateSchema(SystemSecurityContext context, CatalogSchemaName schema, Map<String, Object> properties) voidcheckCanCreateTable(SystemSecurityContext context, CatalogSchemaTableName table, Map<String, Object> properties) voidcheckCanCreateView(SystemSecurityContext context, CatalogSchemaTableName view) voidcheckCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) voidcheckCanDeleteFromTable(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanDenySchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal grantee) voidcheckCanDenyTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal grantee) voidcheckCanDropCatalog(SystemSecurityContext context, String catalog) voidcheckCanDropColumn(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanDropMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView) voidcheckCanDropRole(SystemSecurityContext context, String role) voidcheckCanDropSchema(SystemSecurityContext context, CatalogSchemaName schema) voidcheckCanDropTable(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanDropView(SystemSecurityContext context, CatalogSchemaTableName view) voidcheckCanExecuteFunction(SystemSecurityContext systemSecurityContext, FunctionKind functionKind, CatalogSchemaRoutineName functionName) voidcheckCanExecuteFunction(SystemSecurityContext systemSecurityContext, String functionName) voidcheckCanExecuteProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName procedure) voidvoidcheckCanExecuteTableProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaTableName table, String procedure) voidcheckCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, FunctionKind functionKind, CatalogSchemaRoutineName functionName, TrinoPrincipal grantee, boolean grantOption) voidcheckCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, String functionName, TrinoPrincipal grantee, boolean grantOption) voidcheckCanGrantRoles(SystemSecurityContext context, Set<String> roles, Set<TrinoPrincipal> grantees, boolean adminOption, Optional<TrinoPrincipal> grantor) voidcheckCanGrantSchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal grantee, boolean grantOption) voidcheckCanGrantTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal grantee, boolean grantOption) voidcheckCanImpersonateUser(SystemSecurityContext context, String userName) voidcheckCanInsertIntoTable(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanKillQueryOwnedBy(SystemSecurityContext context, Identity queryOwner) voidvoidcheckCanRefreshMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView) voidcheckCanRenameColumn(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanRenameMaterializedView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView) voidcheckCanRenameSchema(SystemSecurityContext context, CatalogSchemaName schema, String newSchemaName) voidcheckCanRenameTable(SystemSecurityContext context, CatalogSchemaTableName table, CatalogSchemaTableName newTable) voidcheckCanRenameView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView) voidcheckCanRevokeRoles(SystemSecurityContext context, Set<String> roles, Set<TrinoPrincipal> grantees, boolean adminOption, Optional<TrinoPrincipal> grantor) voidcheckCanRevokeSchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal revokee, boolean grantOption) voidcheckCanRevokeTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal revokee, boolean grantOption) voidcheckCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) voidcheckCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName) voidcheckCanSetColumnComment(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanSetMaterializedViewProperties(SystemSecurityContext context, CatalogSchemaTableName materializedView, Map<String, Optional<Object>> properties) voidcheckCanSetSchemaAuthorization(SystemSecurityContext context, CatalogSchemaName schema, TrinoPrincipal principal) voidcheckCanSetSystemSessionProperty(SystemSecurityContext context, String propertyName) voidcheckCanSetTableAuthorization(SystemSecurityContext context, CatalogSchemaTableName table, TrinoPrincipal principal) voidcheckCanSetTableComment(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanSetTableProperties(SystemSecurityContext context, CatalogSchemaTableName table, Map<String, Optional<Object>> properties) voidcheckCanSetUser(Optional<Principal> principal, String userName) voidcheckCanSetViewAuthorization(SystemSecurityContext context, CatalogSchemaTableName view, TrinoPrincipal principal) voidcheckCanSetViewComment(SystemSecurityContext context, CatalogSchemaTableName view) voidcheckCanShowColumns(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanShowCreateSchema(SystemSecurityContext context, CatalogSchemaName schemaName) voidcheckCanShowCreateTable(SystemSecurityContext context, CatalogSchemaTableName table) voidvoidvoidcheckCanShowRoles(SystemSecurityContext context) voidcheckCanShowSchemas(SystemSecurityContext context, String catalogName) voidcheckCanShowTables(SystemSecurityContext context, CatalogSchemaName schema) voidcheckCanTruncateTable(SystemSecurityContext context, CatalogSchemaTableName table) voidcheckCanUpdateTableColumns(SystemSecurityContext securityContext, CatalogSchemaTableName table, Set<String> updatedColumnNames) voidcheckCanViewQueryOwnedBy(SystemSecurityContext context, Identity queryOwner) voidfilterCatalogs(SystemSecurityContext context, Set<String> catalogs) filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, Set<String> columns) filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames) filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames) filterViewQueryOwnedBy(SystemSecurityContext context, Collection<Identity> queryOwners) getColumnMask(SystemSecurityContext context, CatalogSchemaTableName tableName, String columnName, Type type) getRowFilters(SystemSecurityContext context, CatalogSchemaTableName tableName)
-
Field Details
-
NAME
- See Also:
-
INSTANCE
-
-
Constructor Details
-
AllowAllSystemAccessControl
public AllowAllSystemAccessControl()
-
-
Method Details
-
checkCanImpersonateUser
- Specified by:
checkCanImpersonateUserin interfaceSystemAccessControl
-
checkCanSetUser
- Specified by:
checkCanSetUserin interfaceSystemAccessControl
-
checkCanReadSystemInformation
- Specified by:
checkCanReadSystemInformationin interfaceSystemAccessControl
-
checkCanWriteSystemInformation
- Specified by:
checkCanWriteSystemInformationin interfaceSystemAccessControl
-
checkCanExecuteQuery
- Specified by:
checkCanExecuteQueryin interfaceSystemAccessControl
-
checkCanViewQueryOwnedBy
- Specified by:
checkCanViewQueryOwnedByin interfaceSystemAccessControl
-
checkCanKillQueryOwnedBy
- Specified by:
checkCanKillQueryOwnedByin interfaceSystemAccessControl
-
filterViewQueryOwnedBy
public Collection<Identity> filterViewQueryOwnedBy(SystemSecurityContext context, Collection<Identity> queryOwners) - Specified by:
filterViewQueryOwnedByin interfaceSystemAccessControl
-
checkCanSetSystemSessionProperty
- Specified by:
checkCanSetSystemSessionPropertyin interfaceSystemAccessControl
-
checkCanAccessCatalog
- Specified by:
checkCanAccessCatalogin interfaceSystemAccessControl
-
checkCanCreateCatalog
- Specified by:
checkCanCreateCatalogin interfaceSystemAccessControl
-
checkCanDropCatalog
- Specified by:
checkCanDropCatalogin interfaceSystemAccessControl
-
filterCatalogs
- Specified by:
filterCatalogsin interfaceSystemAccessControl
-
checkCanCreateSchema
public void checkCanCreateSchema(SystemSecurityContext context, CatalogSchemaName schema, Map<String, Object> properties) - Specified by:
checkCanCreateSchemain interfaceSystemAccessControl
-
checkCanDropSchema
- Specified by:
checkCanDropSchemain interfaceSystemAccessControl
-
checkCanRenameSchema
public void checkCanRenameSchema(SystemSecurityContext context, CatalogSchemaName schema, String newSchemaName) - Specified by:
checkCanRenameSchemain interfaceSystemAccessControl
-
checkCanSetSchemaAuthorization
public void checkCanSetSchemaAuthorization(SystemSecurityContext context, CatalogSchemaName schema, TrinoPrincipal principal) - Specified by:
checkCanSetSchemaAuthorizationin interfaceSystemAccessControl
-
checkCanShowSchemas
- Specified by:
checkCanShowSchemasin interfaceSystemAccessControl
-
filterSchemas
public Set<String> filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames) - Specified by:
filterSchemasin interfaceSystemAccessControl
-
checkCanShowCreateSchema
- Specified by:
checkCanShowCreateSchemain interfaceSystemAccessControl
-
checkCanShowCreateTable
- Specified by:
checkCanShowCreateTablein interfaceSystemAccessControl
-
checkCanCreateTable
public void checkCanCreateTable(SystemSecurityContext context, CatalogSchemaTableName table, Map<String, Object> properties) - Specified by:
checkCanCreateTablein interfaceSystemAccessControl
-
checkCanDropTable
- Specified by:
checkCanDropTablein interfaceSystemAccessControl
-
checkCanRenameTable
public void checkCanRenameTable(SystemSecurityContext context, CatalogSchemaTableName table, CatalogSchemaTableName newTable) - Specified by:
checkCanRenameTablein interfaceSystemAccessControl
-
checkCanSetTableProperties
public void checkCanSetTableProperties(SystemSecurityContext context, CatalogSchemaTableName table, Map<String, Optional<Object>> properties) - Specified by:
checkCanSetTablePropertiesin interfaceSystemAccessControl
-
checkCanSetTableComment
- Specified by:
checkCanSetTableCommentin interfaceSystemAccessControl
-
checkCanSetViewComment
- Specified by:
checkCanSetViewCommentin interfaceSystemAccessControl
-
checkCanSetColumnComment
- Specified by:
checkCanSetColumnCommentin interfaceSystemAccessControl
-
checkCanShowTables
- Specified by:
checkCanShowTablesin interfaceSystemAccessControl
-
filterTables
public Set<SchemaTableName> filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames) - Specified by:
filterTablesin interfaceSystemAccessControl
-
checkCanShowColumns
- Specified by:
checkCanShowColumnsin interfaceSystemAccessControl
-
filterColumns
public Set<String> filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, Set<String> columns) - Specified by:
filterColumnsin interfaceSystemAccessControl
-
checkCanAddColumn
- Specified by:
checkCanAddColumnin interfaceSystemAccessControl
-
checkCanDropColumn
- Specified by:
checkCanDropColumnin interfaceSystemAccessControl
-
checkCanRenameColumn
- Specified by:
checkCanRenameColumnin interfaceSystemAccessControl
-
checkCanAlterColumn
- Specified by:
checkCanAlterColumnin interfaceSystemAccessControl
-
checkCanSetTableAuthorization
public void checkCanSetTableAuthorization(SystemSecurityContext context, CatalogSchemaTableName table, TrinoPrincipal principal) - Specified by:
checkCanSetTableAuthorizationin interfaceSystemAccessControl
-
checkCanSelectFromColumns
public void checkCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) - Specified by:
checkCanSelectFromColumnsin interfaceSystemAccessControl
-
checkCanInsertIntoTable
- Specified by:
checkCanInsertIntoTablein interfaceSystemAccessControl
-
checkCanDeleteFromTable
- Specified by:
checkCanDeleteFromTablein interfaceSystemAccessControl
-
checkCanTruncateTable
- Specified by:
checkCanTruncateTablein interfaceSystemAccessControl
-
checkCanUpdateTableColumns
public void checkCanUpdateTableColumns(SystemSecurityContext securityContext, CatalogSchemaTableName table, Set<String> updatedColumnNames) - Specified by:
checkCanUpdateTableColumnsin interfaceSystemAccessControl
-
checkCanCreateView
- Specified by:
checkCanCreateViewin interfaceSystemAccessControl
-
checkCanRenameView
public void checkCanRenameView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView) - Specified by:
checkCanRenameViewin interfaceSystemAccessControl
-
checkCanSetViewAuthorization
public void checkCanSetViewAuthorization(SystemSecurityContext context, CatalogSchemaTableName view, TrinoPrincipal principal) - Specified by:
checkCanSetViewAuthorizationin interfaceSystemAccessControl
-
checkCanDropView
- Specified by:
checkCanDropViewin interfaceSystemAccessControl
-
checkCanCreateViewWithSelectFromColumns
public void checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) - Specified by:
checkCanCreateViewWithSelectFromColumnsin interfaceSystemAccessControl
-
checkCanCreateMaterializedView
public void checkCanCreateMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView, Map<String, Object> properties) - Specified by:
checkCanCreateMaterializedViewin interfaceSystemAccessControl
-
checkCanRefreshMaterializedView
public void checkCanRefreshMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView) - Specified by:
checkCanRefreshMaterializedViewin interfaceSystemAccessControl
-
checkCanDropMaterializedView
public void checkCanDropMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView) - Specified by:
checkCanDropMaterializedViewin interfaceSystemAccessControl
-
checkCanRenameMaterializedView
public void checkCanRenameMaterializedView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView) - Specified by:
checkCanRenameMaterializedViewin interfaceSystemAccessControl
-
checkCanSetMaterializedViewProperties
public void checkCanSetMaterializedViewProperties(SystemSecurityContext context, CatalogSchemaTableName materializedView, Map<String, Optional<Object>> properties) - Specified by:
checkCanSetMaterializedViewPropertiesin interfaceSystemAccessControl
-
checkCanGrantExecuteFunctionPrivilege
public void checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, String functionName, TrinoPrincipal grantee, boolean grantOption) - Specified by:
checkCanGrantExecuteFunctionPrivilegein interfaceSystemAccessControl
-
checkCanGrantExecuteFunctionPrivilege
public void checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, FunctionKind functionKind, CatalogSchemaRoutineName functionName, TrinoPrincipal grantee, boolean grantOption) - Specified by:
checkCanGrantExecuteFunctionPrivilegein interfaceSystemAccessControl
-
checkCanSetCatalogSessionProperty
public void checkCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName) - Specified by:
checkCanSetCatalogSessionPropertyin interfaceSystemAccessControl
-
checkCanGrantSchemaPrivilege
public void checkCanGrantSchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal grantee, boolean grantOption) - Specified by:
checkCanGrantSchemaPrivilegein interfaceSystemAccessControl
-
checkCanDenySchemaPrivilege
public void checkCanDenySchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal grantee) - Specified by:
checkCanDenySchemaPrivilegein interfaceSystemAccessControl
-
checkCanRevokeSchemaPrivilege
public void checkCanRevokeSchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal revokee, boolean grantOption) - Specified by:
checkCanRevokeSchemaPrivilegein interfaceSystemAccessControl
-
checkCanGrantTablePrivilege
public void checkCanGrantTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal grantee, boolean grantOption) - Specified by:
checkCanGrantTablePrivilegein interfaceSystemAccessControl
-
checkCanDenyTablePrivilege
public void checkCanDenyTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal grantee) - Specified by:
checkCanDenyTablePrivilegein interfaceSystemAccessControl
-
checkCanRevokeTablePrivilege
public void checkCanRevokeTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal revokee, boolean grantOption) - Specified by:
checkCanRevokeTablePrivilegein interfaceSystemAccessControl
-
checkCanShowRoles
- Specified by:
checkCanShowRolesin interfaceSystemAccessControl
-
checkCanCreateRole
public void checkCanCreateRole(SystemSecurityContext context, String role, Optional<TrinoPrincipal> grantor) - Specified by:
checkCanCreateRolein interfaceSystemAccessControl
-
checkCanDropRole
- Specified by:
checkCanDropRolein interfaceSystemAccessControl
-
checkCanGrantRoles
public void checkCanGrantRoles(SystemSecurityContext context, Set<String> roles, Set<TrinoPrincipal> grantees, boolean adminOption, Optional<TrinoPrincipal> grantor) - Specified by:
checkCanGrantRolesin interfaceSystemAccessControl
-
checkCanRevokeRoles
public void checkCanRevokeRoles(SystemSecurityContext context, Set<String> roles, Set<TrinoPrincipal> grantees, boolean adminOption, Optional<TrinoPrincipal> grantor) - Specified by:
checkCanRevokeRolesin interfaceSystemAccessControl
-
checkCanShowCurrentRoles
- Specified by:
checkCanShowCurrentRolesin interfaceSystemAccessControl
-
checkCanShowRoleGrants
- Specified by:
checkCanShowRoleGrantsin interfaceSystemAccessControl
-
checkCanExecuteProcedure
public void checkCanExecuteProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName procedure) - Specified by:
checkCanExecuteProcedurein interfaceSystemAccessControl
-
checkCanExecuteFunction
public void checkCanExecuteFunction(SystemSecurityContext systemSecurityContext, String functionName) - Specified by:
checkCanExecuteFunctionin interfaceSystemAccessControl
-
checkCanExecuteFunction
public void checkCanExecuteFunction(SystemSecurityContext systemSecurityContext, FunctionKind functionKind, CatalogSchemaRoutineName functionName) - Specified by:
checkCanExecuteFunctionin interfaceSystemAccessControl
-
checkCanExecuteTableProcedure
public void checkCanExecuteTableProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaTableName table, String procedure) - Specified by:
checkCanExecuteTableProcedurein interfaceSystemAccessControl
-
getEventListeners
- Specified by:
getEventListenersin interfaceSystemAccessControl
-
getRowFilters
public List<ViewExpression> getRowFilters(SystemSecurityContext context, CatalogSchemaTableName tableName) - Specified by:
getRowFiltersin interfaceSystemAccessControl
-
getColumnMask
public Optional<ViewExpression> getColumnMask(SystemSecurityContext context, CatalogSchemaTableName tableName, String columnName, Type type) - Specified by:
getColumnMaskin interfaceSystemAccessControl
-