org.apache.hcatalog.security

Class HdfsAuthorizationProvider

java.lang.Object

org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

org.apache.hcatalog.security.HdfsAuthorizationProvider

All Implemented Interfaces:

HiveAuthorizationProvider

Deprecated.

use StorageBasedAuthorizationProvider

public class HdfsAuthorizationProvider
extends HiveAuthorizationProviderBase

An AuthorizationProvider, which checks against the data access level permissions on HDFS. It makes sense to eventually move this class to Hive, so that all hive users can use this authorization model.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

HiveAuthorizationProviderBase.HiveProxy

Field Summary

Fields

Modifier and Type	Field and Description
protected Warehouse	wh Deprecated.

Fields inherited from class org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

authenticator, hive_db, LOG

Constructor Summary

Constructors

Constructor and Description
HdfsAuthorizationProvider() Deprecated.
HdfsAuthorizationProvider(Configuration conf) Deprecated.

Method Summary

Modifier and Type	Method and Description
void	authorize(Database db, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated. Authorization privileges against a database object.
void	authorize(Partition part, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated. Authorization privileges against a hive partition object.
void	authorize(Path path, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated. Authorization privileges against a path.
void	authorize(Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated. Authorization user level privileges.
void	authorize(Table table, Partition part, java.util.List<java.lang.String> columns, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated. Authorization privileges against a list of columns.
void	authorize(Table table, Partition part, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated.
void	authorize(Table table, Privilege[] readRequiredPriv, Privilege[] writeRequiredPriv) Deprecated. Authorization privileges against a hive table object.
protected static void	checkPermissions(Configuration conf, Path path, java.util.EnumSet<FsAction> actions) Deprecated. Checks the permissions for the given path and current user on Hadoop FS.
protected static void	checkPermissions(FileSystem fs, Path path, java.util.EnumSet<FsAction> actions, java.lang.String user, java.lang.String[] groups) Deprecated. Checks the permissions for the given path and current user on Hadoop FS.
protected Path	getDbLocation(Database db) Deprecated.
protected FsAction	getFsAction(Privilege priv, Path path) Deprecated.
protected java.util.EnumSet<FsAction>	getFsActions(Privilege[] privs, Path path) Deprecated.
void	init(Configuration conf) Deprecated.
void	setConf(Configuration conf) Deprecated.

Methods inherited from class org.apache.hadoop.hive.ql.security.authorization.HiveAuthorizationProviderBase

getAuthenticator, getConf, setAuthenticator

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

wh

protected Warehouse wh

Deprecated.

Constructor Detail

HdfsAuthorizationProvider

public HdfsAuthorizationProvider()

Deprecated.

HdfsAuthorizationProvider

public HdfsAuthorizationProvider(Configuration conf)

Deprecated.

Method Detail

init

public void init(Configuration conf)
          throws HiveException

Deprecated.

Throws:

HiveException

setConf

public void setConf(Configuration conf)

Deprecated.

Overrides:

setConf in class HiveAuthorizationProviderBase

getFsAction

protected FsAction getFsAction(Privilege priv,
                               Path path)

Deprecated.

getFsActions

protected java.util.EnumSet<FsAction> getFsActions(Privilege[] privs,
                                                   Path path)

Deprecated.

getDbLocation

protected Path getDbLocation(Database db)
                      throws HiveException

Deprecated.

Throws:

HiveException

authorize

public void authorize(Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Description copied from interface: HiveAuthorizationProvider

Authorization user level privileges.

Parameters:

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Database db,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a database object.

Parameters:

db - database

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Table table,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a hive table object.

Parameters:

table - table object

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Table table,
                      Partition part,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Partition part,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a hive partition object.

Parameters:

part - partition object

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Table table,
                      Partition part,
                      java.util.List<java.lang.String> columns,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Description copied from interface: HiveAuthorizationProvider

Authorization privileges against a list of columns. If the partition object is not null, look at the column grants for the given partition. Otherwise look at the table column grants.

Parameters:

table - table object

part - partition object

columns - a list of columns

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

authorize

public void authorize(Path path,
                      Privilege[] readRequiredPriv,
                      Privilege[] writeRequiredPriv)
               throws HiveException,
                      AuthorizationException

Deprecated.

Authorization privileges against a path.

Parameters:

path - a filesystem path

readRequiredPriv - a list of privileges needed for inputs.

writeRequiredPriv - a list of privileges needed for outputs.

Throws:

HiveException

AuthorizationException

checkPermissions

protected static void checkPermissions(Configuration conf,
                                       Path path,
                                       java.util.EnumSet<FsAction> actions)
                                throws java.io.IOException,
                                       javax.security.auth.login.LoginException

Deprecated.

Checks the permissions for the given path and current user on Hadoop FS. If the given path does not exists, it checks for it's parent folder.

Throws:

java.io.IOException

javax.security.auth.login.LoginException

checkPermissions

protected static void checkPermissions(FileSystem fs,
                                       Path path,
                                       java.util.EnumSet<FsAction> actions,
                                       java.lang.String user,
                                       java.lang.String[] groups)
                                throws java.io.IOException,
                                       AccessControlException

Deprecated.

Checks the permissions for the given path and current user on Hadoop FS. If the given path does not exists, it returns.

Throws:

java.io.IOException

AccessControlException