org.apache.hadoop.hive.ql.security.authorization.PrivilegeRegistry Maven / Gradle / Ivy
/**
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.hadoop.hive.ql.security.authorization;
import java.util.HashMap;
import java.util.Map;
import org.apache.hadoop.hive.ql.session.SessionState;
/**
* PrivilegeRegistry is used to do privilege lookups. Given a privilege name, it
* will return the Privilege object.
*/
public class PrivilegeRegistry {
protected static Map Registry = null;
protected static Map RegistryV2 = null;
public static Privilege getPrivilege(PrivilegeType privilegeType) {
return Registry.get(privilegeType);
}
/**
* Add entries to registry.
*/
static {
Registry = new HashMap();
//add the privileges supported in authorization mode V1
Registry.put(Privilege.ALL.getPriv(), Privilege.ALL);
Registry.put(Privilege.ALTER_DATA.getPriv(), Privilege.ALTER_DATA);
Registry.put(Privilege.ALTER_METADATA.getPriv(), Privilege.ALTER_METADATA);
Registry.put(Privilege.CREATE.getPriv(), Privilege.CREATE);
Registry.put(Privilege.DROP.getPriv(), Privilege.DROP);
Registry.put(Privilege.INDEX.getPriv(), Privilege.INDEX);
Registry.put(Privilege.LOCK.getPriv(), Privilege.LOCK);
Registry.put(Privilege.SELECT.getPriv(), Privilege.SELECT);
Registry.put(Privilege.SHOW_DATABASE.getPriv(),
Privilege.SHOW_DATABASE);
//add the privileges not supported in V1
//The list of privileges supported in V2 is implementation defined,
//so just pass everything that syntax supports.
RegistryV2 = new HashMap();
RegistryV2.putAll(Registry);
RegistryV2.put(Privilege.INSERT.getPriv(), Privilege.INSERT);
RegistryV2.put(Privilege.DELETE.getPriv(), Privilege.DELETE);
}
public static Privilege getPrivilege(int privilegeToken) {
PrivilegeType ptype = PrivilegeType.getPrivTypeByToken(privilegeToken);
return getPrivilegeFromRegistry(ptype);
}
public static Privilege getPrivilege(String privilegeName) {
PrivilegeType ptype = PrivilegeType.getPrivTypeByName(privilegeName);
return getPrivilegeFromRegistry(ptype);
}
private static Privilege getPrivilegeFromRegistry(PrivilegeType ptype) {
return SessionState.get().isAuthorizationModeV2() ? RegistryV2.get(ptype) : Registry.get(ptype);
}
}