public class HiveV1Authorizer extends AbstractHiveAuthorizer
HiveAuthorizer.VERSION
Constructor and Description |
---|
HiveV1Authorizer(HiveConf conf) |
HiveV1Authorizer(HiveConf conf,
Hive hive)
Deprecated.
|
Modifier and Type | Method and Description |
---|---|
void |
applyAuthorizationConfigPolicy(HiveConf hiveConf)
Modify the given HiveConf object to configure authorization related parameters
or other parameters related to hive security
|
List<HivePrivilegeObject> |
applyRowFilterAndColumnMasking(HiveAuthzContext context,
List<HivePrivilegeObject> privObjs)
applyRowFilterAndColumnMasking is called once for each table in a query.
|
void |
checkPrivileges(HiveOperationType hiveOpType,
List<HivePrivilegeObject> inputsHObjs,
List<HivePrivilegeObject> outputHObjs,
HiveAuthzContext context)
Check if user has privileges to do this action on these objects
|
void |
createRole(String roleName,
HivePrincipal adminGrantor)
Create role
|
void |
dropRole(String roleName)
Drop role
|
List<HivePrivilegeObject> |
filterListCmdObjects(List<HivePrivilegeObject> listObjs,
HiveAuthzContext context)
Filter out any objects that should not be shown to the user, from the list of
tables or databases coming from a 'show tables' or 'show databases' command
|
List<String> |
getAllRoles() |
List<String> |
getCurrentRoleNames() |
List<HiveRoleGrant> |
getPrincipalGrantInfoForRole(String roleName)
Get the grant information for principals granted the given role
|
List<HiveRoleGrant> |
getRoleGrantInfoForPrincipal(HivePrincipal principal)
Get the grant information of roles the given principal belongs to
|
HiveAuthorizer.VERSION |
getVersion() |
void |
grantPrivileges(List<HivePrincipal> principals,
List<HivePrivilege> privileges,
HivePrivilegeObject privObject,
HivePrincipal grantor,
boolean grantOption)
Grant privileges for principals on the object
|
void |
grantRole(List<HivePrincipal> principals,
List<String> roles,
boolean grantOption,
HivePrincipal grantor)
Grant roles in given roles list to principals in given hivePrincipals list
|
boolean |
needTransform()
needTransform() is called once per user in a query.
|
void |
revokePrivileges(List<HivePrincipal> principals,
List<HivePrivilege> privileges,
HivePrivilegeObject privObject,
HivePrincipal grantor,
boolean grantOption)
Revoke privileges for principals on the object
|
void |
revokeRole(List<HivePrincipal> principals,
List<String> roles,
boolean grantOption,
HivePrincipal grantor)
Revoke roles in given roles list to principals in given hivePrincipals list
|
void |
setCurrentRole(String roleName)
Set the current role to roleName argument
|
List<HivePrivilegeInfo> |
showPrivileges(HivePrincipal principal,
HivePrivilegeObject privObj)
Show privileges for given principal on given object
|
getHiveAuthorizationTranslator
public HiveV1Authorizer(HiveConf conf)
@Deprecated public HiveV1Authorizer(HiveConf conf, Hive hive)
public HiveAuthorizer.VERSION getVersion()
public void checkPrivileges(HiveOperationType hiveOpType, List<HivePrivilegeObject> inputsHObjs, List<HivePrivilegeObject> outputHObjs, HiveAuthzContext context) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
public void grantPrivileges(List<HivePrincipal> principals, List<HivePrivilege> privileges, HivePrivilegeObject privObject, HivePrincipal grantor, boolean grantOption) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
public void revokePrivileges(List<HivePrincipal> principals, List<HivePrivilege> privileges, HivePrivilegeObject privObject, HivePrincipal grantor, boolean grantOption) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
public void createRole(String roleName, HivePrincipal adminGrantor) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
adminGrantor
- - The user in "[ WITH ADMIN HiveAuthzPluginException
HiveAccessControlException
public void dropRole(String roleName) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
public List<HiveRoleGrant> getPrincipalGrantInfoForRole(String roleName) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
HiveAuthzPluginException
HiveAccessControlException
public List<HiveRoleGrant> getRoleGrantInfoForPrincipal(HivePrincipal principal) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
HiveAuthzPluginException
HiveAccessControlException
public void grantRole(List<HivePrincipal> principals, List<String> roles, boolean grantOption, HivePrincipal grantor) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
public void revokeRole(List<HivePrincipal> principals, List<String> roles, boolean grantOption, HivePrincipal grantor) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
public List<String> getAllRoles() throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthzPluginException
HiveAccessControlException
public List<HivePrivilegeInfo> showPrivileges(HivePrincipal principal, HivePrivilegeObject privObj) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
HiveAuthzPluginException
HiveAccessControlException
public void setCurrentRole(String roleName) throws HiveAccessControlException, HiveAuthzPluginException
HiveAuthorizer
public List<String> getCurrentRoleNames() throws HiveAuthzPluginException
HiveAuthzPluginException
public void applyAuthorizationConfigPolicy(HiveConf hiveConf)
HiveAuthorizer
public List<HivePrivilegeObject> filterListCmdObjects(List<HivePrivilegeObject> listObjs, HiveAuthzContext context) throws HiveAuthzPluginException, HiveAccessControlException
HiveAuthorizer
listObjs
- List of all objects obtained as result of a show commandHiveAuthzPluginException
HiveAccessControlException
public boolean needTransform()
HiveAuthorizer
public List<HivePrivilegeObject> applyRowFilterAndColumnMasking(HiveAuthzContext context, List<HivePrivilegeObject> privObjs) throws SemanticException
HiveAuthorizer
SemanticException
Copyright © 2016 The Apache Software Foundation. All rights reserved.