Package io.trino.plugin.base.security

Class ReadOnlySystemAccessControl

java.lang.Object

io.trino.plugin.base.security.ReadOnlySystemAccessControl

All Implemented Interfaces:

SystemAccessControl

public class ReadOnlySystemAccessControl
extends Object
implements SystemAccessControl

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	ReadOnlySystemAccessControl.Factory

Field Summary

Fields

Modifier and Type	Field	Description
static final String	NAME

Constructor Summary

Constructors

Constructor	Description
ReadOnlySystemAccessControl()

Method Summary

Modifier and Type	Method	Description
boolean	canAccessCatalog(SystemSecurityContext context, String catalogName)
boolean	canCreateViewWithExecuteFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)
boolean	canExecuteFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)
void	checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)
void	checkCanExecuteQuery(Identity identity, QueryId queryId)
void	checkCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)
void	checkCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName)
void	checkCanSetSystemSessionProperty(Identity identity, QueryId queryId, String propertyName)
void	checkCanSetUser(Optional<Principal> principal, String userName)
void	checkCanShowColumns(SystemSecurityContext context, CatalogSchemaTableName table)
void	checkCanShowCurrentRoles(SystemSecurityContext context)
void	checkCanShowFunctions(SystemSecurityContext context, CatalogSchemaName schema)
void	checkCanShowRoles(SystemSecurityContext context)
void	checkCanShowSchemas(SystemSecurityContext context, String catalogName)
void	checkCanShowTables(SystemSecurityContext context, CatalogSchemaName schema)
void	checkCanViewQueryOwnedBy(Identity identity, Identity queryOwner)
Set<String>	filterCatalogs(SystemSecurityContext context, Set<String> catalogs)
Set<String>	filterColumns(SystemSecurityContext context, CatalogSchemaTableName tableName, Set<String> columns)
Map<SchemaTableName,Set<String>>	filterColumns(SystemSecurityContext context, String catalogName, Map<SchemaTableName,Set<String>> tableColumns)
Set<SchemaFunctionName>	filterFunctions(SystemSecurityContext context, String catalogName, Set<SchemaFunctionName> functionNames)
Set<String>	filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames)
Set<SchemaTableName>	filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames)
Collection<Identity>	filterViewQueryOwnedBy(Identity identity, Collection<Identity> queryOwners)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.trino.spi.security.SystemAccessControl

checkCanAddColumn, checkCanAlterColumn, checkCanCreateCatalog, checkCanCreateFunction, checkCanCreateMaterializedView, checkCanCreateRole, checkCanCreateSchema, checkCanCreateTable, checkCanCreateView, checkCanDeleteFromTable, checkCanDenyEntityPrivilege, checkCanDenySchemaPrivilege, checkCanDenyTablePrivilege, checkCanDropCatalog, checkCanDropColumn, checkCanDropFunction, checkCanDropMaterializedView, checkCanDropRole, checkCanDropSchema, checkCanDropTable, checkCanDropView, checkCanExecuteProcedure, checkCanExecuteQuery, checkCanExecuteTableProcedure, checkCanGrantEntityPrivilege, checkCanGrantRoles, checkCanGrantSchemaPrivilege, checkCanGrantTablePrivilege, checkCanImpersonateUser, checkCanInsertIntoTable, checkCanKillQueryOwnedBy, checkCanReadSystemInformation, checkCanRefreshMaterializedView, checkCanRenameColumn, checkCanRenameMaterializedView, checkCanRenameSchema, checkCanRenameTable, checkCanRenameView, checkCanRevokeEntityPrivilege, checkCanRevokeRoles, checkCanRevokeSchemaPrivilege, checkCanRevokeTablePrivilege, checkCanSetColumnComment, checkCanSetMaterializedViewProperties, checkCanSetSchemaAuthorization, checkCanSetSystemSessionProperty, checkCanSetTableAuthorization, checkCanSetTableComment, checkCanSetTableProperties, checkCanSetViewAuthorization, checkCanSetViewComment, checkCanShowCreateSchema, checkCanShowCreateTable, checkCanShowRoleGrants, checkCanTruncateTable, checkCanUpdateTableColumns, checkCanWriteSystemInformation, getColumnMask, getEventListeners, getRowFilters, shutdown

Field Details

NAME

public static final String NAME

See Also:

• Constant Field Values

Constructor Details

ReadOnlySystemAccessControl

public ReadOnlySystemAccessControl()

Method Details

checkCanSetUser

public void checkCanSetUser(Optional<Principal> principal,
 String userName)

Specified by:

checkCanSetUser in interface SystemAccessControl

checkCanExecuteQuery

public void checkCanExecuteQuery(Identity identity,
 QueryId queryId)

Specified by:

checkCanExecuteQuery in interface SystemAccessControl

checkCanViewQueryOwnedBy

public void checkCanViewQueryOwnedBy(Identity identity,
 Identity queryOwner)

Specified by:

checkCanViewQueryOwnedBy in interface SystemAccessControl

filterViewQueryOwnedBy

public Collection<Identity> filterViewQueryOwnedBy(Identity identity,
 Collection<Identity> queryOwners)

Specified by:

filterViewQueryOwnedBy in interface SystemAccessControl

checkCanSetSystemSessionProperty

public void checkCanSetSystemSessionProperty(Identity identity,
 QueryId queryId,
 String propertyName)

Specified by:

checkCanSetSystemSessionProperty in interface SystemAccessControl

checkCanSelectFromColumns

public void checkCanSelectFromColumns(SystemSecurityContext context,
 CatalogSchemaTableName table,
 Set<String> columns)

Specified by:

checkCanSelectFromColumns in interface SystemAccessControl

canAccessCatalog

public boolean canAccessCatalog(SystemSecurityContext context,
 String catalogName)

Specified by:

canAccessCatalog in interface SystemAccessControl

checkCanSetCatalogSessionProperty

public void checkCanSetCatalogSessionProperty(SystemSecurityContext context,
 String catalogName,
 String propertyName)

Specified by:

checkCanSetCatalogSessionProperty in interface SystemAccessControl

checkCanCreateViewWithSelectFromColumns

public void checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context,
 CatalogSchemaTableName table,
 Set<String> columns)

Specified by:

checkCanCreateViewWithSelectFromColumns in interface SystemAccessControl

filterCatalogs

public Set<String> filterCatalogs(SystemSecurityContext context,
 Set<String> catalogs)

Specified by:

filterCatalogs in interface SystemAccessControl

filterSchemas

public Set<String> filterSchemas(SystemSecurityContext context,
 String catalogName,
 Set<String> schemaNames)

Specified by:

filterSchemas in interface SystemAccessControl

filterTables

public Set<SchemaTableName> filterTables(SystemSecurityContext context,
 String catalogName,
 Set<SchemaTableName> tableNames)

Specified by:

filterTables in interface SystemAccessControl

checkCanShowColumns

public void checkCanShowColumns(SystemSecurityContext context,
 CatalogSchemaTableName table)

Specified by:

checkCanShowColumns in interface SystemAccessControl

filterColumns

public Set<String> filterColumns(SystemSecurityContext context,
 CatalogSchemaTableName tableName,
 Set<String> columns)

Specified by:

filterColumns in interface SystemAccessControl

filterColumns

public Map<SchemaTableName,Set<String>> filterColumns(SystemSecurityContext context,
 String catalogName,
 Map<SchemaTableName,Set<String>> tableColumns)

Specified by:

filterColumns in interface SystemAccessControl

checkCanShowSchemas

public void checkCanShowSchemas(SystemSecurityContext context,
 String catalogName)

Specified by:

checkCanShowSchemas in interface SystemAccessControl

checkCanShowTables

public void checkCanShowTables(SystemSecurityContext context,
 CatalogSchemaName schema)

Specified by:

checkCanShowTables in interface SystemAccessControl

checkCanShowRoles

public void checkCanShowRoles(SystemSecurityContext context)

Specified by:

checkCanShowRoles in interface SystemAccessControl

checkCanShowCurrentRoles

public void checkCanShowCurrentRoles(SystemSecurityContext context)

Specified by:

checkCanShowCurrentRoles in interface SystemAccessControl

canExecuteFunction

public boolean canExecuteFunction(SystemSecurityContext systemSecurityContext,
 CatalogSchemaRoutineName functionName)

Specified by:

canExecuteFunction in interface SystemAccessControl

canCreateViewWithExecuteFunction

public boolean canCreateViewWithExecuteFunction(SystemSecurityContext systemSecurityContext,
 CatalogSchemaRoutineName functionName)

Specified by:

canCreateViewWithExecuteFunction in interface SystemAccessControl

checkCanShowFunctions

public void checkCanShowFunctions(SystemSecurityContext context,
 CatalogSchemaName schema)

Specified by:

checkCanShowFunctions in interface SystemAccessControl

filterFunctions

public Set<SchemaFunctionName> filterFunctions(SystemSecurityContext context,
 String catalogName,
 Set<SchemaFunctionName> functionNames)

Specified by:

filterFunctions in interface SystemAccessControl