Package io.trino.plugin.base.security
Class ReadOnlySystemAccessControl
java.lang.Object
io.trino.plugin.base.security.ReadOnlySystemAccessControl
- All Implemented Interfaces:
SystemAccessControl
-
Nested Class Summary
Nested Classes -
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidcheckCanAccessCatalog(SystemSecurityContext context, String catalogName) voidcheckCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) voidcheckCanExecuteFunction(SystemSecurityContext systemSecurityContext, String functionName) voidvoidcheckCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, FunctionKind functionKind, CatalogSchemaRoutineName functionName, TrinoPrincipal grantee, boolean grantOption) voidcheckCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, String functionName, TrinoPrincipal grantee, boolean grantOption) voidcheckCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) voidcheckCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName) voidcheckCanSetSystemSessionProperty(SystemSecurityContext context, String propertyName) voidcheckCanSetUser(Optional<Principal> principal, String userName) voidcheckCanShowColumns(SystemSecurityContext context, CatalogSchemaTableName table) voidvoidcheckCanShowRoles(SystemSecurityContext context) voidcheckCanShowSchemas(SystemSecurityContext context, String catalogName) voidcheckCanShowTables(SystemSecurityContext context, CatalogSchemaName schema) voidcheckCanViewQueryOwnedBy(SystemSecurityContext context, Identity queryOwner) filterCatalogs(SystemSecurityContext context, Set<String> catalogs) filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, Set<String> columns) filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames) filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames) filterViewQueryOwnedBy(SystemSecurityContext context, Collection<Identity> queryOwners) Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface io.trino.spi.security.SystemAccessControl
checkCanAddColumn, checkCanAlterColumn, checkCanCreateCatalog, checkCanCreateMaterializedView, checkCanCreateRole, checkCanCreateSchema, checkCanCreateTable, checkCanCreateView, checkCanDeleteFromTable, checkCanDenySchemaPrivilege, checkCanDenyTablePrivilege, checkCanDropCatalog, checkCanDropColumn, checkCanDropMaterializedView, checkCanDropRole, checkCanDropSchema, checkCanDropTable, checkCanDropView, checkCanExecuteFunction, checkCanExecuteProcedure, checkCanExecuteTableProcedure, checkCanGrantRoles, checkCanGrantSchemaPrivilege, checkCanGrantTablePrivilege, checkCanImpersonateUser, checkCanInsertIntoTable, checkCanKillQueryOwnedBy, checkCanReadSystemInformation, checkCanRefreshMaterializedView, checkCanRenameColumn, checkCanRenameMaterializedView, checkCanRenameSchema, checkCanRenameTable, checkCanRenameView, checkCanRevokeRoles, checkCanRevokeSchemaPrivilege, checkCanRevokeTablePrivilege, checkCanSetColumnComment, checkCanSetMaterializedViewProperties, checkCanSetSchemaAuthorization, checkCanSetTableAuthorization, checkCanSetTableComment, checkCanSetTableProperties, checkCanSetViewAuthorization, checkCanSetViewComment, checkCanShowCreateSchema, checkCanShowCreateTable, checkCanShowRoleGrants, checkCanTruncateTable, checkCanUpdateTableColumns, checkCanWriteSystemInformation, getColumnMask, getEventListeners, getRowFilters
-
Field Details
-
NAME
- See Also:
-
-
Constructor Details
-
ReadOnlySystemAccessControl
public ReadOnlySystemAccessControl()
-
-
Method Details
-
checkCanSetUser
- Specified by:
checkCanSetUserin interfaceSystemAccessControl
-
checkCanExecuteQuery
- Specified by:
checkCanExecuteQueryin interfaceSystemAccessControl
-
checkCanViewQueryOwnedBy
- Specified by:
checkCanViewQueryOwnedByin interfaceSystemAccessControl
-
filterViewQueryOwnedBy
public Collection<Identity> filterViewQueryOwnedBy(SystemSecurityContext context, Collection<Identity> queryOwners) - Specified by:
filterViewQueryOwnedByin interfaceSystemAccessControl
-
checkCanSetSystemSessionProperty
- Specified by:
checkCanSetSystemSessionPropertyin interfaceSystemAccessControl
-
checkCanAccessCatalog
- Specified by:
checkCanAccessCatalogin interfaceSystemAccessControl
-
checkCanSelectFromColumns
public void checkCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) - Specified by:
checkCanSelectFromColumnsin interfaceSystemAccessControl
-
checkCanSetCatalogSessionProperty
public void checkCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName) - Specified by:
checkCanSetCatalogSessionPropertyin interfaceSystemAccessControl
-
checkCanCreateViewWithSelectFromColumns
public void checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns) - Specified by:
checkCanCreateViewWithSelectFromColumnsin interfaceSystemAccessControl
-
checkCanGrantExecuteFunctionPrivilege
public void checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, String functionName, TrinoPrincipal grantee, boolean grantOption) - Specified by:
checkCanGrantExecuteFunctionPrivilegein interfaceSystemAccessControl
-
checkCanGrantExecuteFunctionPrivilege
public void checkCanGrantExecuteFunctionPrivilege(SystemSecurityContext context, FunctionKind functionKind, CatalogSchemaRoutineName functionName, TrinoPrincipal grantee, boolean grantOption) - Specified by:
checkCanGrantExecuteFunctionPrivilegein interfaceSystemAccessControl
-
filterCatalogs
- Specified by:
filterCatalogsin interfaceSystemAccessControl
-
filterSchemas
public Set<String> filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames) - Specified by:
filterSchemasin interfaceSystemAccessControl
-
filterTables
public Set<SchemaTableName> filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames) - Specified by:
filterTablesin interfaceSystemAccessControl
-
checkCanShowColumns
- Specified by:
checkCanShowColumnsin interfaceSystemAccessControl
-
filterColumns
public Set<String> filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, Set<String> columns) - Specified by:
filterColumnsin interfaceSystemAccessControl
-
checkCanShowSchemas
- Specified by:
checkCanShowSchemasin interfaceSystemAccessControl
-
checkCanShowTables
- Specified by:
checkCanShowTablesin interfaceSystemAccessControl
-
checkCanShowRoles
- Specified by:
checkCanShowRolesin interfaceSystemAccessControl
-
checkCanShowCurrentRoles
- Specified by:
checkCanShowCurrentRolesin interfaceSystemAccessControl
-
checkCanExecuteFunction
public void checkCanExecuteFunction(SystemSecurityContext systemSecurityContext, String functionName) - Specified by:
checkCanExecuteFunctionin interfaceSystemAccessControl
-