org.apache.hadoop.hive.ql.security.authorization

Class MetaStoreAuthzAPIAuthorizerEmbedOnly

java.lang.Object

org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

org.apache.hadoop.hive.ql.security.authorization.MetaStoreAuthzAPIAuthorizerEmbedOnly

All Implemented Interfaces:

org.apache.hadoop.conf.Configurable, HiveAuthorizationProvider, HiveMetastoreAuthorizationProvider

public class MetaStoreAuthzAPIAuthorizerEmbedOnly
extends HiveAuthorizationProviderBase
implements HiveMetastoreAuthorizationProvider

If this authorizer is used, it allows authorization api to be invoked only in embedded metastore mode.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

HiveAuthorizationProviderBase.HiveProxy

Field Summary

Fields

Modifier and Type	Field and Description
static String	errMsg

Fields inherited from class org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

authenticator, hive_db, LOG

Constructor Summary

Constructors

Constructor and Description
MetaStoreAuthzAPIAuthorizerEmbedOnly()

Method Summary

Modifier and Type	Method and Description
void	authorize(org.apache.hadoop.hive.metastore.api.Database db, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a database object.
void	authorize(Partition part, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a hive partition object.
void	authorize(Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization user level privileges.
void	authorize(Table table, Partition part, List<String> columns, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a list of columns.
void	authorize(Table table, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Authorization privileges against a hive table object.
void	authorizeAuthorizationApiInvocation() Authorize metastore authorization api call.
void	init(org.apache.hadoop.conf.Configuration conf)
void	setMetaStoreHandler(IHMSHandler handler) Allows invoker of HiveMetaStoreAuthorizationProvider to send in a hive metastore handler that can be used to make calls to test whether or not authorizations can/will succeed.

Methods inherited from class org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

getAuthenticator, getConf, getHivePolicyProvider, setAuthenticator, setConf

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.hadoop.hive.ql.security.authorization.HiveMetastoreAuthorizationProvider

getHivePolicyProvider

Methods inherited from interface org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProvider

getAuthenticator, setAuthenticator

Methods inherited from interface org.apache.hadoop.conf.Configurable

getConf, setConf

Field Detail

errMsg

public static final String errMsg

See Also:

Constant Field Values

Constructor Detail

MetaStoreAuthzAPIAuthorizerEmbedOnly

public MetaStoreAuthzAPIAuthorizerEmbedOnly()

Method Detail

init

public void init(org.apache.hadoop.conf.Configuration conf)
          throws HiveException

Specified by:

init in interface HiveAuthorizationProvider

Throws:

HiveException

authorize

public void authorize(Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Description copied from interface: HiveAuthorizationProvider

Authorization user level privileges.

Specified by:

authorize in interface HiveAuthorizationProvider

Parameters:

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(org.apache.hadoop.hive.metastore.api.Database db,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a database object.

Specified by:

authorize in interface HiveAuthorizationProvider

Parameters:

db - database

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Table table,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a hive table object.

Specified by:

authorize in interface HiveAuthorizationProvider

Parameters:

table - table object

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Partition part,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a hive partition object.

Specified by:

authorize in interface HiveAuthorizationProvider

Parameters:

part - partition object

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Table table,
                      Partition part,
                      List<String> columns,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a list of columns. If the partition object is not null, look at the column grants for the given partition. Otherwise look at the table column grants.

Specified by:

authorize in interface HiveAuthorizationProvider

Parameters:

table - table object

part - partition object

columns - a list of columns

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

setMetaStoreHandler

public void setMetaStoreHandler(IHMSHandler handler)

Description copied from interface: HiveMetastoreAuthorizationProvider

Allows invoker of HiveMetaStoreAuthorizationProvider to send in a hive metastore handler that can be used to make calls to test whether or not authorizations can/will succeed. Intended to be called before any of the authorize methods are called.

Specified by:

setMetaStoreHandler in interface HiveMetastoreAuthorizationProvider

authorizeAuthorizationApiInvocation

public void authorizeAuthorizationApiInvocation()
                                         throws AuthorizationException

Description copied from interface: HiveMetastoreAuthorizationProvider

Authorize metastore authorization api call.

Specified by:

authorizeAuthorizationApiInvocation in interface HiveMetastoreAuthorizationProvider

Throws:

AuthorizationException