org.apache.sentry.provider.db.generic.service.persistent.PrivilegeObject$Builder java code examples

 public PrivilegeObject build() {
  Preconditions.checkNotNull(component);
  Preconditions.checkNotNull(service);
  Preconditions.checkNotNull(action);
  //CaseInsensitive authorizable name
  List<? extends Authorizable> newAuthorizable = toLowerAuthorizableName(authorizables);
  return new PrivilegeObject(component.toLowerCase(),
                  service.toLowerCase(),
                  action.toLowerCase(),
                  grantOption,
                  newAuthorizable);
 }
}

@Test
public void testGetPrivilegesByRoleName() throws Exception {
 String roleName1 = "r1";
 String roleName2 = "r2";
 String grantor = "g1";
 PrivilegeObject queryPrivilege = new Builder()
   .setComponent(SEARCH)
   .setAction(SolrConstants.QUERY)
   .setService(SERVICE)
   .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME)))
   .build();
 sentryStore.createRole(SEARCH, roleName1, grantor);
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName1, queryPrivilege,
   ADMIN_USER);
 PrivilegeObject updatePrivilege = new Builder()
   .setComponent(SEARCH)
   .setAction(SolrConstants.QUERY)
   .setService(SERVICE)
   .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME)))
   .build();
 sentryStore.createRole(SEARCH, roleName2, grantor);
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName2, updatePrivilege,
   ADMIN_USER);
 assertEquals(Sets.newHashSet(queryPrivilege,updatePrivilege),
   sentryStore.getPrivilegesByRole(SEARCH, Sets.newHashSet(roleName1,roleName2)));
}

@Test
public void testGetPrivilegesByRoleName() throws Exception {
 String roleName1 = "r1";
 String roleName2 = "r2";
 String grantor = "g1";
 PrivilegeObject queryPrivilege = new Builder()
   .setComponent(SEARCH)
   .setAction(SearchConstants.QUERY)
   .setService(SERVICE)
   .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME)))
   .build();
 sentryStore.createRole(SEARCH, roleName1, grantor);
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName1, queryPrivilege,
   ADMIN_USER);
 PrivilegeObject updatePrivilege = new Builder()
   .setComponent(SEARCH)
   .setAction(SearchConstants.QUERY)
   .setService(SERVICE)
   .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME)))
   .build();
 sentryStore.createRole(SEARCH, roleName2, grantor);
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName2, updatePrivilege,
   ADMIN_USER);
 assertEquals(Sets.newHashSet(queryPrivilege,updatePrivilege),
   sentryStore.getPrivilegesByRole(SEARCH, Sets.newHashSet(roleName1,roleName2)));
}

@Test
public void testGrantWithGrantOption() throws Exception {
 addGroupsToUser(GRANT_OPTION_USER, GRANT_OPTION_GROUP);
 addGroupsToUser(NO_GRANT_OPTION_USER, NO_GRANT_OPTION_GROUP);
 writePolicyFile();
 String roleName1 = "r1";
 String grantor = "g1";
 sentryStore.createRole(SEARCH, roleName1, grantor);
 /**
  * grant query privilege to role r1 with grant option
  */
 PrivilegeObject queryPrivilege = new Builder()
   .setComponent(SEARCH)
   .setAction(SearchConstants.QUERY)
   .setService(SERVICE)
   .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME)))
   .withGrantOption(true)
   .build();
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName1, queryPrivilege,ADMIN_USER);
 sentryStore.alterRoleAddGroups(SEARCH, roleName1,
   Sets.newHashSet(GRANT_OPTION_GROUP), grantor);
 /**
  * the user with grant option grant query privilege to rolr r2
  */
 String roleName2 = "r2";
 sentryStore.createRole(SEARCH, roleName2, grantor);
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName2, queryPrivilege, GRANT_OPTION_USER);
 assertEquals(Sets.newHashSet(queryPrivilege),
   sentryStore.getPrivilegesByRole(SEARCH, Sets.newHashSet(roleName2)));
}

privileges.add(new Builder()
             .setComponent(mPrivilege.getComponentName())
             .setService(mPrivilege.getServiceName())
             .setAction(mPrivilege.getAction())
             .setAuthorizables(mPrivilege.getAuthorizables())
             .withGrantOption(mPrivilege.getGrantOption())
             .build());

public Set<PrivilegeObject> getPrivilegesByProvider(String component,
  String service, Set<MSentryRole> roles,
  List<? extends Authorizable> authorizables, PersistenceManager pm) {
 Set<PrivilegeObject> privileges = Sets.newHashSet();
 if (roles == null || roles.isEmpty()) {
  return privileges;
 }
 MSentryGMPrivilege parentPrivilege = new MSentryGMPrivilege(component, service, authorizables, null, null);
 Set<MSentryGMPrivilege> privilegeGraph = Sets.newHashSet();
 privilegeGraph.addAll(populateIncludePrivileges(roles, parentPrivilege, pm));
 for (MSentryGMPrivilege mPrivilege : privilegeGraph) {
  privileges.add(new Builder()
               .setComponent(mPrivilege.getComponentName())
               .setService(mPrivilege.getServiceName())
               .setAction(mPrivilege.getAction())
               .setAuthorizables(mPrivilege.getAuthorizables())
               .withGrantOption(mPrivilege.getGrantOption())
               .build());
 }
 return privileges;
}

PrivilegeObject queryPrivilege = new Builder()
  .setComponent(SEARCH)
  .setAction(SolrConstants.QUERY)
  .setService(SERVICE)
  .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME), new Field(FIELD_NAME)))
  .build();
PrivilegeObject updatePrivilege = new Builder(queryPrivilege)
  .setAction(SolrConstants.UPDATE)
  .build();

@Test
public void testGrantWithGrantOption() throws Exception {
 addGroupsToUser(GRANT_OPTION_USER, GRANT_OPTION_GROUP);
 addGroupsToUser(NO_GRANT_OPTION_USER, NO_GRANT_OPTION_GROUP);
 writePolicyFile();
 String roleName1 = "r1";
 String grantor = "g1";
 sentryStore.createRole(SEARCH, roleName1, grantor);
 /**
  * grant query privilege to role r1 with grant option
  */
 PrivilegeObject queryPrivilege = new Builder()
   .setComponent(SEARCH)
   .setAction(SolrConstants.QUERY)
   .setService(SERVICE)
   .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME)))
   .withGrantOption(true)
   .build();
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName1, queryPrivilege,ADMIN_USER);
 sentryStore.alterRoleAddGroups(SEARCH, roleName1,
   Sets.newHashSet(GRANT_OPTION_GROUP), grantor);
 /**
  * the user with grant option grant query privilege to rolr r2
  */
 String roleName2 = "r2";
 sentryStore.createRole(SEARCH, roleName2, grantor);
 sentryStore.alterRoleGrantPrivilege(SEARCH, roleName2, queryPrivilege, GRANT_OPTION_USER);
 assertEquals(Sets.newHashSet(queryPrivilege),
   sentryStore.getPrivilegesByRole(SEARCH, Sets.newHashSet(roleName2)));
}

PrivilegeObject allPrivilege = new Builder()
  .setComponent(SEARCH)
  .setAction(SearchConstants.ALL)
  .setService(SERVICE)
  .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME), new Field(FIELD_NAME)))
  .build();
PrivilegeObject updatePrivilege = new Builder(allPrivilege)
  .setAction(SearchConstants.UPDATE)
  .build();
PrivilegeObject queryPrivilege = new Builder(allPrivilege)
  .setAction(SearchConstants.QUERY)
  .build();

PrivilegeObject allPrivilege = new Builder()
  .setComponent(SEARCH)
  .setAction(SolrConstants.ALL)
  .setService(SERVICE)
  .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME), new Field(FIELD_NAME)))
  .build();
PrivilegeObject updatePrivilege = new Builder(allPrivilege)
  .setAction(SolrConstants.UPDATE)
  .build();
PrivilegeObject queryPrivilege = new Builder(allPrivilege)
  .setAction(SolrConstants.QUERY)
  .build();

privileges.add(new Builder()
             .setComponent(mPrivilege.getComponentName())
             .setService(mPrivilege.getServiceName())
             .setAction(mPrivilege.getAction())
             .setAuthorizables(mPrivilege.getAuthorizables())
             .withGrantOption(mPrivilege.getGrantOption())
             .build());

Set<PrivilegeObject> getPrivilegesByProvider(String component,
                       String service, Set<MSentryRole> roles,
                       List<? extends Authorizable> authorizables, PersistenceManager pm) {
 Set<PrivilegeObject> privileges = Sets.newHashSet();
 if (roles == null || roles.isEmpty()) {
  return privileges;
 }
 MSentryGMPrivilege parentPrivilege = new MSentryGMPrivilege(component, service, authorizables, null, null);
 Set<MSentryGMPrivilege> privilegeGraph = Sets.newHashSet();
 privilegeGraph.addAll(populateIncludePrivileges(roles, parentPrivilege, pm));
 for (MSentryGMPrivilege mPrivilege : privilegeGraph) {
  privileges.add(new Builder()
               .setComponent(mPrivilege.getComponentName())
               .setService(mPrivilege.getServiceName())
               .setAction(mPrivilege.getAction())
               .setAuthorizables(mPrivilege.getAuthorizables())
               .withGrantOption(mPrivilege.getGrantOption())
               .build());
 }
 return privileges;
}

PrivilegeObject queryPrivilege = new Builder()
  .setComponent(SEARCH)
  .setAction(SearchConstants.QUERY)
  .setService(SERVICE)
  .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME),new Field(FIELD_NAME)))
  .build();
PrivilegeObject updatePrivilege = new Builder(queryPrivilege)
  .setAction(SearchConstants.UPDATE)
  .build();
PrivilegeObject allPrivilege = new Builder(queryPrivilege)
  .setAction(SearchConstants.ALL)
  .build();

private PrivilegeObject toPrivilegeObject(TSentryPrivilege tSentryPrivilege) {
 Boolean grantOption;
 if (tSentryPrivilege.getGrantOption().equals(TSentryGrantOption.TRUE)) {
  grantOption = true;
 } else if (tSentryPrivilege.getGrantOption().equals(TSentryGrantOption.FALSE)) {
  grantOption = false;
 } else {
  grantOption = null;
 }
 return new Builder().setComponent(tSentryPrivilege.getComponent())
                      .setService(tSentryPrivilege.getServiceName())
                      .setAuthorizables(toAuthorizables(tSentryPrivilege.getAuthorizables()))
                      .setAction(tSentryPrivilege.getAction())
                      .withGrantOption(grantOption)
                      .build();
}

PrivilegeObject queryPrivilege = new Builder()
 .setComponent(component)
 .setAction(SolrConstants.QUERY)
 .setService(SERVICE)
 .setAuthorizables(Collections.singletonList(new Collection(COLLECTION_NAME)))
 .withGrantOption(null)
 .build();
       sentryStore.getPrivilegesByRole(component, Sets.newHashSet(roleName)));
PrivilegeObject queryPrivilegeWithOption = new Builder()
 .setComponent(component)
 .setAction(SolrConstants.QUERY)
 .setService(SERVICE)
 .setAuthorizables(Collections.singletonList(new Collection(COLLECTION_NAME)))
 .withGrantOption(true)
 .build();
       sentryStore.getPrivilegesByRole(component, Sets.newHashSet(roleName)));
PrivilegeObject queryPrivilegeWithNoOption = new Builder()
 .setComponent(component)
 .setAction(SolrConstants.QUERY)
 .setService(SERVICE)
 .setAuthorizables(Collections.singletonList(new Collection(COLLECTION_NAME)))
 .withGrantOption(false)
 .build();

private PrivilegeObject toPrivilegeObject(TSentryPrivilege tSentryPrivilege) {
 Boolean grantOption;
 if (tSentryPrivilege.getGrantOption().equals(TSentryGrantOption.TRUE)) {
  grantOption = true;
 } else if (tSentryPrivilege.getGrantOption().equals(TSentryGrantOption.FALSE)) {
  grantOption = false;
 } else {
  grantOption = null;
 }
 return new Builder().setComponent(tSentryPrivilege.getComponent())
                      .setService(tSentryPrivilege.getServiceName())
                      .setAuthorizables(toAuthorizables(tSentryPrivilege.getAuthorizables()))
                      .setAction(tSentryPrivilege.getAction())
                      .withGrantOption(grantOption)
                      .build();
}

PrivilegeObject queryPrivilege = new Builder()
  .setComponent(SEARCH)
  .setAction(SolrConstants.QUERY)
  .setService(SERVICE)
  .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME),new Field(FIELD_NAME)))
  .build();
PrivilegeObject updatePrivilege = new Builder(queryPrivilege)
  .setAction(SolrConstants.UPDATE)
  .build();
PrivilegeObject allPrivilege = new Builder(queryPrivilege)
  .setAction(SolrConstants.ALL)
  .build();

 public PrivilegeObject build() {
  Preconditions.checkNotNull(component);
  Preconditions.checkNotNull(service);
  Preconditions.checkNotNull(action);
  //CaseInsensitive authorizable name
  List<? extends Authorizable> newAuthorizable = toLowerAuthorizableName(authorizables);
  return new PrivilegeObject(component.toLowerCase(),
                  service.toLowerCase(),
                  action.toLowerCase(),
                  grantOption,
                  newAuthorizable);
 }
}

PrivilegeObject queryPrivilege = new Builder()
 .setComponent(component)
 .setAction(SearchConstants.QUERY)
 .setService(SERVICE)
 .setAuthorizables(Collections.singletonList(new Collection(COLLECTION_NAME)))
 .withGrantOption(null)
 .build();
       sentryStore.getPrivilegesByRole(component, Sets.newHashSet(roleName)));
PrivilegeObject queryPrivilegeWithOption = new Builder()
 .setComponent(component)
 .setAction(SearchConstants.QUERY)
 .setService(SERVICE)
 .setAuthorizables(Collections.singletonList(new Collection(COLLECTION_NAME)))
 .withGrantOption(true)
 .build();
       sentryStore.getPrivilegesByRole(component, Sets.newHashSet(roleName)));
PrivilegeObject queryPrivilegeWithNoOption = new Builder()
 .setComponent(component)
 .setAction(SearchConstants.QUERY)
 .setService(SERVICE)
 .setAuthorizables(Collections.singletonList(new Collection(COLLECTION_NAME)))
 .withGrantOption(false)
 .build();

PrivilegeObject queryPrivilege = new Builder()
  .setComponent(SEARCH)
  .setAction(SearchConstants.QUERY)
  .setService(SERVICE)
  .setAuthorizables(Arrays.asList(new Collection(COLLECTION_NAME), new Field(FIELD_NAME)))
  .build();
PrivilegeObject updatePrivilege = new Builder(queryPrivilege)
  .setAction(SearchConstants.UPDATE)
  .build();

Most used methods

<init>
build
setAction
setAuthorizables
setComponent
setService
withGrantOption
toLowerAuthorizableName
TolowerCase the authorizable name, the authorizable type is define when it was created. Take the Sol

Popular in Java

Reading from database using SQL prepared statement
setRequestProperty (URLConnection)
addToBackStack (FragmentTransaction)
runOnUiThread (Activity)
MalformedURLException (java.net)
This exception is thrown when a program attempts to create an URL from an incorrect specification.
Charset (java.nio.charset)
A charset is a named mapping between Unicode characters and byte sequences. Every Charset can decode
Date (java.util)
A specific moment in time, with millisecond precision. Values typically come from System#currentTime
Callable (java.util.concurrent)
A task that returns a result and may throw an exception. Implementors define a single method with no
Project (org.apache.tools.ant)
Central representation of an Ant project. This class defines an Ant project with all of its targets,
DateTimeFormat (org.joda.time.format)
Factory that creates instances of DateTimeFormatter from patterns and styles. Datetime formatting i

Best Java code snippets using org.apache.sentry.provider.db.generic.service.persistent.PrivilegeObject$Builder (Showing top 20 results out of 315)