org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd

Class SQLStdConfOnlyAuthorizerFactory

java.lang.Object

org.apache.hadoop.hive.ql.security.authorization.plugin.sqlstd.SQLStdConfOnlyAuthorizerFactory

All Implemented Interfaces:

HiveAuthorizerFactory

@InterfaceAudience.Private
public class SQLStdConfOnlyAuthorizerFactory
extends Object
implements HiveAuthorizerFactory

Authorization class that can be used from hive cli, so that configuration in cli mode is set appropriately for SQL standards authorization. This ensures that new tables and views have proper privileges for the table/view owner. Uses DummyHiveAuthorizationValidator for no-op authorization checks. Authorization using sql standards based authorization mode can't be done securely with hive-cli, as hive-cli users have direct access to the file system.

Constructor Summary

Constructors

Constructor and Description
SQLStdConfOnlyAuthorizerFactory()

Method Summary

Methods

Modifier and Type	Method and Description
HiveAuthorizer	createHiveAuthorizer(HiveMetastoreClientFactory metastoreClientFactory, HiveConf conf, HiveAuthenticationProvider authenticator, HiveAuthzSessionContext ctx) Create a new instance of HiveAuthorizer, initialized with the given objects.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SQLStdConfOnlyAuthorizerFactory

public SQLStdConfOnlyAuthorizerFactory()

Method Detail

createHiveAuthorizer

public HiveAuthorizer createHiveAuthorizer(HiveMetastoreClientFactory metastoreClientFactory,
                                  HiveConf conf,
                                  HiveAuthenticationProvider authenticator,
                                  HiveAuthzSessionContext ctx)
                                    throws HiveAuthzPluginException

Description copied from interface: HiveAuthorizerFactory

Create a new instance of HiveAuthorizer, initialized with the given objects.

Specified by:

createHiveAuthorizer in interface HiveAuthorizerFactory

Parameters:

metastoreClientFactory - - Use this to get the valid meta store client (IMetaStoreClient) for the current thread. Each invocation of method in HiveAuthorizer can happen in different thread, so get the current instance in each method invocation.

conf - - current HiveConf

authenticator - - authenticator, provides user name

ctx - - session context information

Returns:

new instance of HiveAuthorizer

Throws:

HiveAuthzPluginException