org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd.SQLPrivTypeGrant Maven / Gradle / Ivy
/*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd;
import org.apache.hadoop.hive.ql.security.authorization.plugin.HiveAuthzPluginException;
public enum SQLPrivTypeGrant {
SELECT_NOGRANT(SQLPrivilegeType.SELECT, false),
SELECT_WGRANT(SQLPrivilegeType.SELECT, true),
INSERT_NOGRANT(SQLPrivilegeType.INSERT, false),
INSERT_WGRANT(SQLPrivilegeType.INSERT, true),
UPDATE_NOGRANT(SQLPrivilegeType.UPDATE, false),
UPDATE_WGRANT(SQLPrivilegeType.UPDATE, true),
DELETE_NOGRANT(SQLPrivilegeType.DELETE, false),
DELETE_WGRANT(SQLPrivilegeType.DELETE, true),
OWNER_PRIV("OBJECT OWNERSHIP"),
ADMIN_PRIV("ADMIN PRIVILEGE"); // This one can be used to deny permission for performing the operation
private final SQLPrivilegeType privType;
private final boolean withGrant;
private final String privDesc;
SQLPrivTypeGrant(SQLPrivilegeType privType, boolean isGrant){
this.privType = privType;
this.withGrant = isGrant;
this.privDesc = privType.toString() + (withGrant ? " with grant" : "");
}
/**
* Constructor for privileges that are not the standard sql types, but are used by
* authorization rules
* @param privDesc
*/
SQLPrivTypeGrant(String privDesc){
this.privDesc = privDesc;
this.privType = null;
this.withGrant = false;
}
/**
* Find matching enum
* @param privType
* @param isGrant
* @return
*/
public static SQLPrivTypeGrant getSQLPrivTypeGrant(
SQLPrivilegeType privType, boolean isGrant) {
String typeName = privType.name() + (isGrant ? "_WGRANT" : "_NOGRANT");
return SQLPrivTypeGrant.valueOf(typeName);
}
/**
* Find matching enum
*
* @param privTypeStr
* privilege type string
* @param isGrant
* @return
* @throws HiveAuthzPluginException
*/
public static SQLPrivTypeGrant getSQLPrivTypeGrant(String privTypeStr, boolean isGrant)
throws HiveAuthzPluginException {
SQLPrivilegeType ptype = SQLPrivilegeType.getRequirePrivilege(privTypeStr);
return getSQLPrivTypeGrant(ptype, isGrant);
}
public SQLPrivilegeType getPrivType() {
return privType;
}
public boolean isWithGrant() {
return withGrant;
}
/**
* @return String representation for use in error messages
*/
@Override
public String toString(){
return privDesc;
}
};