Examples with HiveRoleGrant org.apache.hadoop.hive.ql.security.authorization.plugin.HiveRoleGrant used on opensource projects

Example 1 with HiveRoleGrant

use of org.apache.hadoop.hive.ql.security.authorization.plugin.HiveRoleGrant in project hive by apache.

the class DDLTask method writeHiveRoleGrantInfo.

private String writeHiveRoleGrantInfo(List<HiveRoleGrant> roleGrants, boolean testMode) {
    if (roleGrants == null || roleGrants.isEmpty()) {
        return "";
    }
    StringBuilder builder = new StringBuilder();
    // sort the list to get sorted (deterministic) output (for ease of testing)
    Collections.sort(roleGrants);
    for (HiveRoleGrant roleGrant : roleGrants) {
        // schema:
        // principal_name,principal_type,grant_option,grantor,grantor_type,grant_time
        appendNonNull(builder, roleGrant.getPrincipalName(), true);
        appendNonNull(builder, roleGrant.getPrincipalType());
        appendNonNull(builder, roleGrant.isGrantOption());
        appendNonNull(builder, roleGrant.getGrantor());
        appendNonNull(builder, roleGrant.getGrantorType());
        appendNonNull(builder, testMode ? -1 : roleGrant.getGrantTime() * 1000L);
    }
    return builder.toString();
}

Example 2 with HiveRoleGrant

use of org.apache.hadoop.hive.ql.security.authorization.plugin.HiveRoleGrant in project hive by apache.

the class DDLTask method writeRolesGrantedInfo.

static String writeRolesGrantedInfo(List<HiveRoleGrant> roles, boolean testMode) {
    if (roles == null || roles.isEmpty()) {
        return "";
    }
    StringBuilder builder = new StringBuilder();
    // sort the list to get sorted (deterministic) output (for ease of testing)
    Collections.sort(roles);
    for (HiveRoleGrant role : roles) {
        appendNonNull(builder, role.getRoleName(), true);
        appendNonNull(builder, role.isGrantOption());
        appendNonNull(builder, testMode ? -1 : role.getGrantTime() * 1000L);
        appendNonNull(builder, role.getGrantor());
    }
    return builder.toString();
}

Example 3 with HiveRoleGrant

use of org.apache.hadoop.hive.ql.security.authorization.plugin.HiveRoleGrant in project ranger by apache.

the class RangerHivePlugin method getHiveRoleGrant.

private HiveRoleGrant getHiveRoleGrant(RangerRole role, RangerRole.RoleMember roleMember, String type) {
    HiveRoleGrant ret = new HiveRoleGrant();
    ret.setRoleName(role.getName());
    ret.setGrantOption(roleMember.getIsAdmin());
    ret.setGrantor(role.getCreatedByUser());
    ret.setGrantorType(HivePrincipal.HivePrincipalType.USER.name());
    ret.setPrincipalName(roleMember.getName());
    ret.setPrincipalType(type);
    if (role.getUpdateTime() != null) {
        ret.setGrantTime((int) (role.getUpdateTime().getTime() / 1000));
    }
    return ret;
}

Example 4 with HiveRoleGrant

use of org.apache.hadoop.hive.ql.security.authorization.plugin.HiveRoleGrant in project hive by apache.

the class ShowPrincipalsOperation method execute.

@Override
public int execute() throws HiveException, IOException {
    HiveAuthorizer authorizer = PrivilegeUtils.getSessionAuthorizer(context.getConf());
    boolean testMode = context.getConf().getBoolVar(HiveConf.ConfVars.HIVE_IN_TEST);
    List<HiveRoleGrant> roleGrants = authorizer.getPrincipalGrantInfoForRole(desc.getName());
    ShowUtils.writeToFile(writeHiveRoleGrantInfo(roleGrants, testMode), desc.getResFile(), context);
    return 0;
}

Example 5 with HiveRoleGrant

use of org.apache.hadoop.hive.ql.security.authorization.plugin.HiveRoleGrant in project hive by apache.

the class ShowPrincipalsOperation method writeHiveRoleGrantInfo.

private String writeHiveRoleGrantInfo(List<HiveRoleGrant> roleGrants, boolean testMode) {
    if (roleGrants == null || roleGrants.isEmpty()) {
        return "";
    }
    StringBuilder builder = new StringBuilder();
    // sort the list to get sorted (deterministic) output (for ease of testing)
    Collections.sort(roleGrants);
    for (HiveRoleGrant roleGrant : roleGrants) {
        // schema: principal_name,principal_type,grant_option,grantor,grantor_type,grant_time
        ShowUtils.appendNonNull(builder, roleGrant.getPrincipalName(), true);
        ShowUtils.appendNonNull(builder, roleGrant.getPrincipalType());
        ShowUtils.appendNonNull(builder, roleGrant.isGrantOption());
        ShowUtils.appendNonNull(builder, roleGrant.getGrantor());
        ShowUtils.appendNonNull(builder, roleGrant.getGrantorType());
        ShowUtils.appendNonNull(builder, testMode ? -1 : roleGrant.getGrantTime() * 1000L);
    }
    return builder.toString();
}