Package io.trino.plugin.base.security

Class DefaultSystemAccessControl

java.lang.Object

io.trino.plugin.base.security.AllowAllSystemAccessControl

io.trino.plugin.base.security.DefaultSystemAccessControl

All Implemented Interfaces:

SystemAccessControl

public class DefaultSystemAccessControl
extends AllowAllSystemAccessControl

Default system access control rules. By default all access is allowed except for user impersonation.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	DefaultSystemAccessControl.Factory

Field Summary

Fields

Modifier and Type	Field	Description
static final String	NAME

Constructor Summary

Constructors

Constructor	Description
DefaultSystemAccessControl()

Method Summary

Modifier and Type	Method	Description
void	checkCanImpersonateUser(SystemSecurityContext context, String userName)
void	checkCanWriteSystemInformation(SystemSecurityContext context)

Methods inherited from class io.trino.plugin.base.security.AllowAllSystemAccessControl

checkCanAccessCatalog, checkCanAddColumn, checkCanAlterColumn, checkCanCreateCatalog, checkCanCreateMaterializedView, checkCanCreateRole, checkCanCreateSchema, checkCanCreateTable, checkCanCreateView, checkCanCreateViewWithSelectFromColumns, checkCanDeleteFromTable, checkCanDenySchemaPrivilege, checkCanDenyTablePrivilege, checkCanDropCatalog, checkCanDropColumn, checkCanDropMaterializedView, checkCanDropRole, checkCanDropSchema, checkCanDropTable, checkCanDropView, checkCanExecuteFunction, checkCanExecuteFunction, checkCanExecuteProcedure, checkCanExecuteQuery, checkCanExecuteTableProcedure, checkCanGrantExecuteFunctionPrivilege, checkCanGrantExecuteFunctionPrivilege, checkCanGrantRoles, checkCanGrantSchemaPrivilege, checkCanGrantTablePrivilege, checkCanInsertIntoTable, checkCanKillQueryOwnedBy, checkCanReadSystemInformation, checkCanRefreshMaterializedView, checkCanRenameColumn, checkCanRenameMaterializedView, checkCanRenameSchema, checkCanRenameTable, checkCanRenameView, checkCanRevokeRoles, checkCanRevokeSchemaPrivilege, checkCanRevokeTablePrivilege, checkCanSelectFromColumns, checkCanSetCatalogSessionProperty, checkCanSetColumnComment, checkCanSetMaterializedViewProperties, checkCanSetSchemaAuthorization, checkCanSetSystemSessionProperty, checkCanSetTableAuthorization, checkCanSetTableComment, checkCanSetTableProperties, checkCanSetUser, checkCanSetViewAuthorization, checkCanSetViewComment, checkCanShowColumns, checkCanShowCreateSchema, checkCanShowCreateTable, checkCanShowCurrentRoles, checkCanShowRoleGrants, checkCanShowRoles, checkCanShowSchemas, checkCanShowTables, checkCanTruncateTable, checkCanUpdateTableColumns, checkCanViewQueryOwnedBy, filterCatalogs, filterColumns, filterSchemas, filterTables, filterViewQueryOwnedBy, getColumnMask, getEventListeners, getRowFilters

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

NAME

public static final String NAME

See Also:

• Constant Field Values

Constructor Details

DefaultSystemAccessControl

public DefaultSystemAccessControl()

Method Details

checkCanImpersonateUser

public void checkCanImpersonateUser(SystemSecurityContext context,
 String userName)

Specified by:

checkCanImpersonateUser in interface SystemAccessControl

Overrides:

checkCanImpersonateUser in class AllowAllSystemAccessControl

checkCanWriteSystemInformation

public void checkCanWriteSystemInformation(SystemSecurityContext context)

Specified by:

checkCanWriteSystemInformation in interface SystemAccessControl

Overrides:

checkCanWriteSystemInformation in class AllowAllSystemAccessControl