org.apache.hadoop.hive.ql.security.authorization.plugin
Interface HiveAccessController

All Known Implementing Classes:

SQLStdHiveAccessController

@InterfaceAudience.LimitedPrivate(value="")
@InterfaceStability.Evolving
public interface HiveAccessController

Interface that is invoked by access control commands, including grant/revoke role/privileges, create/drop roles, and commands to read the state of authorization rules. Methods here have corresponding methods in HiveAuthorizer, check method documentation there.

Method Summary

void	applyAuthorizationConfigPolicy(HiveConf hiveConf)
void	createRole(String roleName, HivePrincipal adminGrantor)
void	dropRole(String roleName)
List<String>	getAllRoles()
List<String>	getCurrentRoleNames()
List<HiveRoleGrant>	getPrincipalGrantInfoForRole(String roleName)
List<HiveRoleGrant>	getRoleGrantInfoForPrincipal(HivePrincipal principal)
void	grantPrivileges(List<HivePrincipal> hivePrincipals, List<HivePrivilege> hivePrivileges, HivePrivilegeObject hivePrivObject, HivePrincipal grantorPrincipal, boolean grantOption)
void	grantRole(List<HivePrincipal> hivePrincipals, List<String> roles, boolean grantOption, HivePrincipal grantorPrinc)
void	revokePrivileges(List<HivePrincipal> hivePrincipals, List<HivePrivilege> hivePrivileges, HivePrivilegeObject hivePrivObject, HivePrincipal grantorPrincipal, boolean grantOption)
void	revokeRole(List<HivePrincipal> hivePrincipals, List<String> roles, boolean grantOption, HivePrincipal grantorPrinc)
void	setCurrentRole(String roleName)
List<HivePrivilegeInfo>	showPrivileges(HivePrincipal principal, HivePrivilegeObject privObj)

Method Detail

grantPrivileges

void grantPrivileges(List<HivePrincipal> hivePrincipals,
                     List<HivePrivilege> hivePrivileges,
                     HivePrivilegeObject hivePrivObject,
                     HivePrincipal grantorPrincipal,
                     boolean grantOption)
                     throws HiveAuthzPluginException,
                            HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

revokePrivileges

void revokePrivileges(List<HivePrincipal> hivePrincipals,
                      List<HivePrivilege> hivePrivileges,
                      HivePrivilegeObject hivePrivObject,
                      HivePrincipal grantorPrincipal,
                      boolean grantOption)
                      throws HiveAuthzPluginException,
                             HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

createRole

void createRole(String roleName,
                HivePrincipal adminGrantor)
                throws HiveAuthzPluginException,
                       HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

dropRole

void dropRole(String roleName)
              throws HiveAuthzPluginException,
                     HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

grantRole

void grantRole(List<HivePrincipal> hivePrincipals,
               List<String> roles,
               boolean grantOption,
               HivePrincipal grantorPrinc)
               throws HiveAuthzPluginException,
                      HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

revokeRole

void revokeRole(List<HivePrincipal> hivePrincipals,
                List<String> roles,
                boolean grantOption,
                HivePrincipal grantorPrinc)
                throws HiveAuthzPluginException,
                       HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

getAllRoles

List<String> getAllRoles()
                         throws HiveAuthzPluginException,
                                HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

showPrivileges

List<HivePrivilegeInfo> showPrivileges(HivePrincipal principal,
                                       HivePrivilegeObject privObj)
                                       throws HiveAuthzPluginException,
                                              HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

setCurrentRole

void setCurrentRole(String roleName)
                    throws HiveAuthzPluginException,
                           HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

getCurrentRoleNames

List<String> getCurrentRoleNames()
                                 throws HiveAuthzPluginException

Throws:

HiveAuthzPluginException

getPrincipalGrantInfoForRole

List<HiveRoleGrant> getPrincipalGrantInfoForRole(String roleName)
                                                 throws HiveAuthzPluginException,
                                                        HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

getRoleGrantInfoForPrincipal

List<HiveRoleGrant> getRoleGrantInfoForPrincipal(HivePrincipal principal)
                                                 throws HiveAuthzPluginException,
                                                        HiveAccessControlException

Throws:

HiveAuthzPluginException

HiveAccessControlException

applyAuthorizationConfigPolicy

void applyAuthorizationConfigPolicy(HiveConf hiveConf)