How to use

getGrantOption

method

in

org.apache.sentry.provider.db.service.thrift.TSentryPrivilege

String uri = tSentryPrivilege.getURI();
String action = tSentryPrivilege.getAction();
String grantOption = (tSentryPrivilege.getGrantOption() == TSentryGrantOption.TRUE ? "true"
  : "false");
if (!StringUtils.isEmpty(serverName)) {

String uri = tSentryPrivilege.getURI();
String action = tSentryPrivilege.getAction();
String grantOption = (tSentryPrivilege.getGrantOption() == TSentryGrantOption.TRUE ? "true"
    : "false");
if (!StringUtils.isEmpty(serverName)) {

if (privilege.getGrantOption() == TSentryGrantOption.TRUE) {
 sb.append(" WITH GRANT OPTION");

public Object getFieldValue(_Fields field) {
 switch (field) {
 case PRIVILEGE_SCOPE:
  return getPrivilegeScope();
 case SERVER_NAME:
  return getServerName();
 case DB_NAME:
  return getDbName();
 case TABLE_NAME:
  return getTableName();
 case URI:
  return getURI();
 case ACTION:
  return getAction();
 case CREATE_TIME:
  return Long.valueOf(getCreateTime());
 case GRANT_OPTION:
  return getGrantOption();
 case COLUMN_NAME:
  return getColumnName();
 }
 throw new IllegalStateException();
}

static String writeGrantInfo(Set<TSentryPrivilege> privileges, String roleName) {
 if (privileges == null || privileges.isEmpty()) {
  return "";
 }
 StringBuilder builder = new StringBuilder();
 for (TSentryPrivilege privilege : privileges) {
  if (PrivilegeScope.URI.name().equalsIgnoreCase(
    privilege.getPrivilegeScope())) {
   appendNonNull(builder, privilege.getURI(), true);
  } else if(PrivilegeScope.SERVER.name().equalsIgnoreCase(
    privilege.getPrivilegeScope())) {
   appendNonNull(builder, "*", true);//Db column would show * if it is a server level privilege
  } else {
   appendNonNull(builder, privilege.getDbName(), true);
  }
  appendNonNull(builder, privilege.getTableName());
  appendNonNull(builder, null);//getPartValues()
  appendNonNull(builder, privilege.getColumnName());//getColumnName()
  appendNonNull(builder, roleName);//getPrincipalName()
  appendNonNull(builder, "ROLE");//getPrincipalType()
  appendNonNull(builder, privilege.getAction());
  appendNonNull(builder,
    TSentryGrantOption.TRUE.equals(privilege.getGrantOption()));
  appendNonNull(builder, privilege.getCreateTime() * 1000L);
  appendNonNull(builder, "--");
 }
 LOG.info("builder.toString(): " + builder.toString());
 return builder.toString();
}

@Override
public void execute(SentryPolicyServiceClient client, String requestorName) throws Exception {
 TSentryPrivilege tSentryPrivilege = CommandUtil.convertToTSentryPrivilege(privilegeStr);
 boolean grantOption = tSentryPrivilege.getGrantOption().equals(TSentryGrantOption.TRUE) ? true : false;
 if (ServiceConstants.PrivilegeScope.SERVER.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
  client.revokeServerPrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
      grantOption);
 } else if (ServiceConstants.PrivilegeScope.DATABASE.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
  client.revokeDatabasePrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
      tSentryPrivilege.getDbName(), tSentryPrivilege.getAction(), grantOption);
 } else if (ServiceConstants.PrivilegeScope.TABLE.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
  client.revokeTablePrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
      tSentryPrivilege.getDbName(), tSentryPrivilege.getTableName(),
      tSentryPrivilege.getAction(), grantOption);
 } else if (ServiceConstants.PrivilegeScope.COLUMN.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
  client.revokeColumnPrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
      tSentryPrivilege.getDbName(), tSentryPrivilege.getTableName(),
      tSentryPrivilege.getColumnName(), tSentryPrivilege.getAction(), grantOption);
 } else if (ServiceConstants.PrivilegeScope.URI.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
  client.revokeURIPrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
      tSentryPrivilege.getURI(), grantOption);
 }
}

 @Override
 public void execute(SentryPolicyServiceClient client, String requestorName) throws Exception {
  TSentryPrivilege tSentryPrivilege = CommandUtil.convertToTSentryPrivilege(privilegeStr);
  boolean grantOption = tSentryPrivilege.getGrantOption().equals(TSentryGrantOption.TRUE) ? true : false;
  if (ServiceConstants.PrivilegeScope.SERVER.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
   client.grantServerPrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
       tSentryPrivilege.getAction(), grantOption);
  } else if (ServiceConstants.PrivilegeScope.DATABASE.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
   client.grantDatabasePrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
       tSentryPrivilege.getDbName(), tSentryPrivilege.getAction(), grantOption);
  } else if (ServiceConstants.PrivilegeScope.TABLE.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
   client.grantTablePrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
       tSentryPrivilege.getDbName(), tSentryPrivilege.getTableName(),
       tSentryPrivilege.getAction(), grantOption);
  } else if (ServiceConstants.PrivilegeScope.COLUMN.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
   client.grantColumnPrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
       tSentryPrivilege.getDbName(), tSentryPrivilege.getTableName(),
       tSentryPrivilege.getColumnName(), tSentryPrivilege.getAction(), grantOption);
  } else if (ServiceConstants.PrivilegeScope.URI.toString().equals(tSentryPrivilege.getPrivilegeScope())) {
   client.grantURIPrivilege(requestorName, roleName, tSentryPrivilege.getServerName(),
       tSentryPrivilege.getURI(), grantOption);
  }
 }
}

/**
 * Converts thrift object to model object. Additionally does normalization
 * such as trimming whitespace and setting appropriate case.
 * @throws SentryInvalidInputException
 */
private MSentryPrivilege convertToMSentryPrivilege(TSentryPrivilege privilege)
  throws SentryInvalidInputException {
 MSentryPrivilege mSentryPrivilege = new MSentryPrivilege();
 mSentryPrivilege.setServerName(toNULLCol(safeTrimLower(privilege.getServerName())));
 mSentryPrivilege.setDbName(toNULLCol(safeTrimLower(privilege.getDbName())));
 mSentryPrivilege.setTableName(toNULLCol(safeTrimLower(privilege.getTableName())));
 mSentryPrivilege.setColumnName(toNULLCol(safeTrimLower(privilege.getColumnName())));
 mSentryPrivilege.setPrivilegeScope(safeTrim(privilege.getPrivilegeScope()));
 mSentryPrivilege.setAction(toNULLCol(safeTrimLower(privilege.getAction())));
 mSentryPrivilege.setCreateTime(System.currentTimeMillis());
 mSentryPrivilege.setURI(toNULLCol(safeTrim(privilege.getURI())));
 if ( !privilege.getGrantOption().equals(TSentryGrantOption.UNSET) ) {
  mSentryPrivilege.setGrantOption(Boolean.valueOf(privilege.getGrantOption().toString()));
 } else {
  mSentryPrivilege.setGrantOption(null);
 }
 return mSentryPrivilege;
}
private static String safeTrim(String s) {

private MSentryPrivilege getMSentryPrivilege(TSentryPrivilege tPriv, PersistenceManager pm) {
 Query query = pm.newQuery(MSentryPrivilege.class);
 query.setFilter("this.serverName == \"" + toNULLCol(safeTrimLower(tPriv.getServerName())) + "\" "
   + "&& this.dbName == \"" + toNULLCol(safeTrimLower(tPriv.getDbName())) + "\" "
   + "&& this.tableName == \"" + toNULLCol(safeTrimLower(tPriv.getTableName())) + "\" "
   + "&& this.columnName == \"" + toNULLCol(safeTrimLower(tPriv.getColumnName())) + "\" "
   + "&& this.URI == \"" + toNULLCol(safeTrim(tPriv.getURI())) + "\" "
   + "&& this.grantOption == grantOption "
   + "&& this.action == \"" + toNULLCol(safeTrimLower(tPriv.getAction())) + "\"");
 query.declareParameters("Boolean grantOption");
 query.setUnique(true);
 Boolean grantOption = null;
 if (tPriv.getGrantOption().equals(TSentryGrantOption.TRUE)) {
  grantOption = true;
 } else if (tPriv.getGrantOption().equals(TSentryGrantOption.FALSE)) {
  grantOption = false;
 }
 Object obj = query.execute(grantOption);
 if (obj != null) {
  return (MSentryPrivilege) obj;
 }
 return null;
}

 return false;
if (!tSentryPrivilege1.getGrantOption().equals(tSentryPrivilege2.getGrantOption())) {
 return false;

Set<MSentryPrivilege> privileges = role.getPrivileges();
assertEquals(privileges.toString(), 1, privileges.size());
assertEquals(Boolean.valueOf(privilege.getGrantOption().toString()), Iterables.get(privileges, 0).getGrantOption());
assertEquals(seqId + 2, sentryStore.alterSentryRoleRevokePrivilege(grantor, roleName, privilege)
  .getSequenceId());