org.apache.hadoop.hive.ql.security.authorization

Interface HiveAuthorizationProvider

All Superinterfaces:

org.apache.hadoop.conf.Configurable

All Known Subinterfaces:

HiveMetastoreAuthorizationProvider

All Known Implementing Classes:

BitSetCheckedAuthorizationProvider, DefaultHiveAuthorizationProvider, DefaultHiveMetastoreAuthorizationProvider, HiveAuthorizationProviderBase, HiveMultiPartitionAuthorizationProviderBase, MetaStoreAuthzAPIAuthorizerEmbedOnly, StorageBasedAuthorizationProvider

public interface HiveAuthorizationProvider
extends org.apache.hadoop.conf.Configurable

Hive's pluggable authorization provider interface

Method Summary

Methods

Modifier and Type	Method and Description
void	authorize(Database db, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a database object.
void	authorize(Partition part, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a hive partition object.
void	authorize(Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization user level privileges.
void	authorize(Table table, Partition part, List<String> columns, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a list of columns.
void	authorize(Table table, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a hive table object.
HiveAuthenticationProvider	getAuthenticator()
void	init(org.apache.hadoop.conf.Configuration conf)
void	setAuthenticator(HiveAuthenticationProvider authenticator)

Methods inherited from interface org.apache.hadoop.conf.Configurable

getConf, setConf

Method Detail

init

void init(org.apache.hadoop.conf.Configuration conf)
          throws HiveException

Throws:

HiveException

getAuthenticator

HiveAuthenticationProvider getAuthenticator()

setAuthenticator

void setAuthenticator(HiveAuthenticationProvider authenticator)

authorize

void authorize(Privilege[] readRequiredPriv,
             Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Authorization user level privileges.

Parameters:

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

void authorize(Database db,
             Privilege[] readRequiredPriv,
             Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Authorization privileges against a database object.

Parameters:

db - database

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

void authorize(Table table,
             Privilege[] readRequiredPriv,
             Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Authorization privileges against a hive table object.

Parameters:

table - table object

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

void authorize(Partition part,
             Privilege[] readRequiredPriv,
             Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Authorization privileges against a hive partition object.

Parameters:

part - partition object

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

void authorize(Table table,
             Partition part,
             List<String> columns,
             Privilege[] readRequiredPriv,
             Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Authorization privileges against a list of columns. If the partition object is not null, look at the column grants for the given partition. Otherwise look at the table column grants.

Parameters:

table - table object

part - partition object

columns - a list of columns

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException