Uses of Class
io.trino.spi.security.SystemSecurityContext

Packages that use SystemSecurityContext

Package	Description
io.trino.spi.security

Uses of SystemSecurityContext in io.trino.spi.security

Methods in io.trino.spi.security with parameters of type SystemSecurityContext

Modifier and Type	Method	Description
default boolean	SystemAccessControl.canAccessCatalog(SystemSecurityContext context, String catalogName)	Is identity allowed to access the specified catalog?
default boolean	SystemAccessControl.canCreateViewWithExecuteFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)	Is identity allowed to create a view that executes the specified function?
default boolean	SystemAccessControl.canExecuteFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)	Is identity allowed to execute the specified function?
default void	SystemAccessControl.checkCanAddColumn(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to add columns to the specified table in a catalog.
default void	SystemAccessControl.checkCanAlterColumn(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to alter columns for the specified table in a catalog.
default void	SystemAccessControl.checkCanCreateCatalog(SystemSecurityContext context, String catalog)	Check if identity is allowed to create the specified catalog.
default void	SystemAccessControl.checkCanCreateFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)	Check if identity is allowed to create the specified function in the catalog.
default void	SystemAccessControl.checkCanCreateMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView, Map<String,Object> properties)	Check if identity is allowed to create the specified materialized view in a catalog.
default void	SystemAccessControl.checkCanCreateRole(SystemSecurityContext context, String role, Optional<TrinoPrincipal> grantor)	Check if identity is allowed to create the specified role.
default void	SystemAccessControl.checkCanCreateSchema(SystemSecurityContext context, CatalogSchemaName schema, Map<String,Object> properties)	Check if identity is allowed to create the specified schema with properties in a catalog.
default void	SystemAccessControl.checkCanCreateTable(SystemSecurityContext context, CatalogSchemaTableName table, Map<String,Object> properties)	Check if identity is allowed to create the specified table with properties in a catalog.
default void	SystemAccessControl.checkCanCreateView(SystemSecurityContext context, CatalogSchemaTableName view)	Check if identity is allowed to create the specified view in a catalog.
default void	SystemAccessControl.checkCanCreateViewWithSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)	Check if identity is allowed to create a view that selects from the specified columns in a relation.
default void	SystemAccessControl.checkCanDeleteFromTable(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to delete from the specified table in a catalog.
default void	SystemAccessControl.checkCanDenyEntityPrivilege(SystemSecurityContext context, EntityPrivilege privilege, EntityKindAndName entity, TrinoPrincipal grantee)	Check if identity is allowed to deny the specified privilege to the grantee on the specified entity.
default void	SystemAccessControl.checkCanDenySchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal grantee)	Check if identity is allowed to deny the specified privilege to the grantee on the specified schema.
default void	SystemAccessControl.checkCanDenyTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal grantee)	Check if identity is allowed to deny the specified privilege to the grantee on the specified table.
default void	SystemAccessControl.checkCanDropCatalog(SystemSecurityContext context, String catalog)	Check if identity is allowed to drop the specified catalog.
default void	SystemAccessControl.checkCanDropColumn(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to drop columns from the specified table in a catalog.
default void	SystemAccessControl.checkCanDropFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)	Check if identity is allowed to drop the specified function in the catalog.
default void	SystemAccessControl.checkCanDropMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView)	Check if identity is allowed to drop the specified materialized view in a catalog.
default void	SystemAccessControl.checkCanDropRole(SystemSecurityContext context, String role)	Check if identity is allowed to drop the specified role.
default void	SystemAccessControl.checkCanDropSchema(SystemSecurityContext context, CatalogSchemaName schema)	Check if identity is allowed to drop the specified schema in a catalog.
default void	SystemAccessControl.checkCanDropTable(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to drop the specified table in a catalog.
default void	SystemAccessControl.checkCanDropView(SystemSecurityContext context, CatalogSchemaTableName view)	Check if identity is allowed to drop the specified view in a catalog.
default void	SystemAccessControl.checkCanExecuteProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName procedure)	Check if identity is allowed to execute the specified procedure
default void	SystemAccessControl.checkCanExecuteTableProcedure(SystemSecurityContext systemSecurityContext, CatalogSchemaTableName table, String procedure)	Check if identity is allowed to execute the specified table procedure on specified table
default void	SystemAccessControl.checkCanGrantEntityPrivilege(SystemSecurityContext context, EntityPrivilege privilege, EntityKindAndName entity, TrinoPrincipal grantee, boolean grantOption)	Check if identity is allowed to grant the specified privilege to the grantee on the specified entity.
default void	SystemAccessControl.checkCanGrantRoles(SystemSecurityContext context, Set<String> roles, Set<TrinoPrincipal> grantees, boolean adminOption, Optional<TrinoPrincipal> grantor)	Check if identity is allowed to grant the specified roles to the specified principals.
default void	SystemAccessControl.checkCanGrantSchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal grantee, boolean grantOption)	Check if identity is allowed to grant the specified privilege to the grantee on the specified schema.
default void	SystemAccessControl.checkCanGrantTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal grantee, boolean grantOption)	Check if identity is allowed to grant the specified privilege to the grantee on the specified table.
default void	SystemAccessControl.checkCanInsertIntoTable(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to insert into the specified table in a catalog.
default void	SystemAccessControl.checkCanRefreshMaterializedView(SystemSecurityContext context, CatalogSchemaTableName materializedView)	Check if identity is allowed to refresh the specified materialized view in a catalog.
default void	SystemAccessControl.checkCanRenameColumn(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to rename a column in the specified table in a catalog.
default void	SystemAccessControl.checkCanRenameMaterializedView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView)	Check if identity is allowed to rename the specified materialized view in a catalog.
default void	SystemAccessControl.checkCanRenameSchema(SystemSecurityContext context, CatalogSchemaName schema, String newSchemaName)	Check if identity is allowed to rename the specified schema in a catalog.
default void	SystemAccessControl.checkCanRenameTable(SystemSecurityContext context, CatalogSchemaTableName table, CatalogSchemaTableName newTable)	Check if identity is allowed to rename the specified table in a catalog.
default void	SystemAccessControl.checkCanRenameView(SystemSecurityContext context, CatalogSchemaTableName view, CatalogSchemaTableName newView)	Check if identity is allowed to rename the specified view in a catalog.
default void	SystemAccessControl.checkCanRevokeEntityPrivilege(SystemSecurityContext context, EntityPrivilege privilege, EntityKindAndName entity, TrinoPrincipal revokee, boolean grantOption)	Check if identity is allowed to revoke the specified privilege on the specified entity from the revokee.
default void	SystemAccessControl.checkCanRevokeRoles(SystemSecurityContext context, Set<String> roles, Set<TrinoPrincipal> grantees, boolean adminOption, Optional<TrinoPrincipal> grantor)	Check if identity is allowed to revoke the specified roles from the specified principals.
default void	SystemAccessControl.checkCanRevokeSchemaPrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaName schema, TrinoPrincipal revokee, boolean grantOption)	Check if identity is allowed to revoke the specified privilege on the specified schema from the revokee.
default void	SystemAccessControl.checkCanRevokeTablePrivilege(SystemSecurityContext context, Privilege privilege, CatalogSchemaTableName table, TrinoPrincipal revokee, boolean grantOption)	Check if identity is allowed to revoke the specified privilege on the specified table from the revokee.
default void	SystemAccessControl.checkCanSelectFromColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)	Check if identity is allowed to select from the specified columns in a relation.
default void	SystemAccessControl.checkCanSetCatalogSessionProperty(SystemSecurityContext context, String catalogName, String propertyName)	Check if identity is allowed to set the specified property in a catalog.
default void	SystemAccessControl.checkCanSetColumnComment(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to set comment to column in the specified table in a catalog.
default void	SystemAccessControl.checkCanSetMaterializedViewProperties(SystemSecurityContext context, CatalogSchemaTableName materializedView, Map<String,Optional<Object>> properties)	Check if identity is allowed to set the properties of the specified materialized view in a catalog.
default void	SystemAccessControl.checkCanSetSchemaAuthorization(SystemSecurityContext context, CatalogSchemaName schema, TrinoPrincipal principal)	Check if identity is allowed to change the specified schema's user/role.
default void	SystemAccessControl.checkCanSetTableAuthorization(SystemSecurityContext context, CatalogSchemaTableName table, TrinoPrincipal principal)	Check if identity is allowed to change the specified table's user/role.
default void	SystemAccessControl.checkCanSetTableComment(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to comment the specified table in a catalog.
default void	SystemAccessControl.checkCanSetTableProperties(SystemSecurityContext context, CatalogSchemaTableName table, Map<String,Optional<Object>> properties)	Check if identity is allowed to alter properties to the specified table in a catalog.
default void	SystemAccessControl.checkCanSetViewAuthorization(SystemSecurityContext context, CatalogSchemaTableName view, TrinoPrincipal principal)	Check if identity is allowed to change the specified view's user/role.
default void	SystemAccessControl.checkCanSetViewComment(SystemSecurityContext context, CatalogSchemaTableName view)	Check if identity is allowed to comment the specified view in a catalog.
default void	SystemAccessControl.checkCanShowColumns(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to show columns of tables by executing SHOW COLUMNS, DESCRIBE etc.
default void	SystemAccessControl.checkCanShowCreateFunction(SystemSecurityContext systemSecurityContext, CatalogSchemaRoutineName functionName)	Check if identity is allowed to execute SHOW CREATE FUNCTION.
default void	SystemAccessControl.checkCanShowCreateSchema(SystemSecurityContext context, CatalogSchemaName schemaName)	Check if identity is allowed to execute SHOW CREATE SCHEMA.
default void	SystemAccessControl.checkCanShowCreateTable(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to execute SHOW CREATE TABLE, SHOW CREATE VIEW or SHOW CREATE MATERIALIZED VIEW
default void	SystemAccessControl.checkCanShowCurrentRoles(SystemSecurityContext context)	Check if identity is allowed to show current roles.
default void	SystemAccessControl.checkCanShowFunctions(SystemSecurityContext context, CatalogSchemaName schema)	Check if identity is allowed to show functions by executing SHOW FUNCTIONS in a catalog schema.
default void	SystemAccessControl.checkCanShowRoleGrants(SystemSecurityContext context)	Check if identity is allowed to show its own role grants.
default void	SystemAccessControl.checkCanShowRoles(SystemSecurityContext context)	Check if identity is allowed to show roles.
default void	SystemAccessControl.checkCanShowSchemas(SystemSecurityContext context, String catalogName)	Check if identity is allowed to execute SHOW SCHEMAS in a catalog.
default void	SystemAccessControl.checkCanShowTables(SystemSecurityContext context, CatalogSchemaName schema)	Check if identity is allowed to show metadata of tables by executing SHOW TABLES, SHOW GRANTS etc. in a catalog.
default void	SystemAccessControl.checkCanTruncateTable(SystemSecurityContext context, CatalogSchemaTableName table)	Check if identity is allowed to truncate the specified table in a catalog.
default void	SystemAccessControl.checkCanUpdateTableColumns(SystemSecurityContext securityContext, CatalogSchemaTableName table, Set<String> updatedColumnNames)	Check if identity is allowed to update the supplied columns in the specified table in a catalog.
default Set<String>	SystemAccessControl.filterCatalogs(SystemSecurityContext context, Set<String> catalogs)	Filter the list of catalogs to those visible to the identity.
default Set<String>	SystemAccessControl.filterColumns(SystemSecurityContext context, CatalogSchemaTableName table, Set<String> columns)	Deprecated. Use SystemAccessControl.filterColumns(SystemSecurityContext, String, Map)
default Map<SchemaTableName,Set<String>>	SystemAccessControl.filterColumns(SystemSecurityContext context, String catalogName, Map<SchemaTableName,Set<String>> tableColumns)	Filter lists of columns of multiple tables to those visible to the identity.
default Set<SchemaFunctionName>	SystemAccessControl.filterFunctions(SystemSecurityContext context, String catalogName, Set<SchemaFunctionName> functionNames)	Filter the list of functions to those visible to the identity.
default Set<String>	SystemAccessControl.filterSchemas(SystemSecurityContext context, String catalogName, Set<String> schemaNames)	Filter the list of schemas in a catalog to those visible to the identity.
default Set<SchemaTableName>	SystemAccessControl.filterTables(SystemSecurityContext context, String catalogName, Set<SchemaTableName> tableNames)	Filter the list of tables and views to those visible to the identity.
default Optional<ViewExpression>	SystemAccessControl.getColumnMask(SystemSecurityContext context, CatalogSchemaTableName tableName, String columnName, Type type)	Deprecated. use SystemAccessControl.getColumnMasks(SystemSecurityContext, CatalogSchemaTableName, List)
default Map<ColumnSchema,ViewExpression>	SystemAccessControl.getColumnMasks(SystemSecurityContext context, CatalogSchemaTableName tableName, List<ColumnSchema> columns)	Bulk method for getting column masks for a subset of columns in a table.
default List<ViewExpression>	SystemAccessControl.getRowFilters(SystemSecurityContext context, CatalogSchemaTableName tableName)	Get row filters associated with the given table and identity.