blob: 9327ead39206b6bdb6d4b024d962a9167aaf2d3c [file] [log] [blame]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.6"/>
<title>Impala: fe/src/main/java/com/cloudera/impala/catalog/AuthorizationPolicy.java Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="navtree.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="resize.js"></script>
<script type="text/javascript" src="navtree.js"></script>
<script type="text/javascript">
$(document).ready(initResizable);
$(window).load(resizeHeight);
</script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/search.js"></script>
<script type="text/javascript">
$(document).ready(function() { searchBox.OnSelectItem(0); });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td style="padding-left: 0.5em;">
<div id="projectname">Impala
</div>
<div id="projectbrief">Impalaistheopensource,nativeanalyticdatabaseforApacheHadoop.</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.6 -->
<script type="text/javascript">
var searchBox = new SearchBox("searchBox", "search",false,'Search');
</script>
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main&#160;Page</span></a></li>
<li><a href="namespaces.html"><span>Namespaces</span></a></li>
<li><a href="annotated.html"><span>Classes</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
<li>
<div id="MSearchBox" class="MSearchBoxInactive">
<span class="left">
<img id="MSearchSelect" src="search/mag_sel.png"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
alt=""/>
<input type="text" id="MSearchField" value="Search" accesskey="S"
onfocus="searchBox.OnSearchFieldFocus(true)"
onblur="searchBox.OnSearchFieldFocus(false)"
onkeyup="searchBox.OnSearchFieldChange(event)"/>
</span><span class="right">
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
</span>
</div>
</li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File&#160;List</span></a></li>
<li><a href="globals.html"><span>File&#160;Members</span></a></li>
</ul>
</div>
</div><!-- top -->
<div id="side-nav" class="ui-resizable side-nav-resizable">
<div id="nav-tree">
<div id="nav-tree-contents">
<div id="nav-sync" class="sync"></div>
</div>
</div>
<div id="splitbar" style="-moz-user-select:none;"
class="ui-resizable-handle">
</div>
</div>
<script type="text/javascript">
$(document).ready(function(){initNavTree('AuthorizationPolicy_8java_source.html','');});
</script>
<div id="doc-content">
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
<a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(0)"><span class="SelectionMark">&#160;</span>All</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(1)"><span class="SelectionMark">&#160;</span>Classes</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(2)"><span class="SelectionMark">&#160;</span>Namespaces</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(3)"><span class="SelectionMark">&#160;</span>Files</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(4)"><span class="SelectionMark">&#160;</span>Functions</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(5)"><span class="SelectionMark">&#160;</span>Variables</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(6)"><span class="SelectionMark">&#160;</span>Typedefs</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(7)"><span class="SelectionMark">&#160;</span>Enumerations</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(8)"><span class="SelectionMark">&#160;</span>Enumerator</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(9)"><span class="SelectionMark">&#160;</span>Friends</a><a class="SelectItem" href="javascript:void(0)" onclick="searchBox.OnSelectItem(10)"><span class="SelectionMark">&#160;</span>Macros</a></div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0"
name="MSearchResults" id="MSearchResults">
</iframe>
</div>
<div class="header">
<div class="headertitle">
<div class="title">AuthorizationPolicy.java</div> </div>
</div><!--header-->
<div class="contents">
<a href="AuthorizationPolicy_8java.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span>&#160;<span class="comment">// Copyright 2014 Cloudera Inc.</span></div>
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span>&#160;<span class="comment">//</span></div>
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span>&#160;<span class="comment">// Licensed under the Apache License, Version 2.0 (the &quot;License&quot;);</span></div>
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span>&#160;<span class="comment">// you may not use this file except in compliance with the License.</span></div>
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span>&#160;<span class="comment">// You may obtain a copy of the License at</span></div>
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span>&#160;<span class="comment">//</span></div>
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span>&#160;<span class="comment">// http://www.apache.org/licenses/LICENSE-2.0</span></div>
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span>&#160;<span class="comment">//</span></div>
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span>&#160;<span class="comment">// Unless required by applicable law or agreed to in writing, software</span></div>
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span>&#160;<span class="comment">// distributed under the License is distributed on an &quot;AS IS&quot; BASIS,</span></div>
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span>&#160;<span class="comment">// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.</span></div>
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span>&#160;<span class="comment">// See the License for the specific language governing permissions and</span></div>
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span>&#160;<span class="comment">// limitations under the License.</span></div>
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span>&#160;</div>
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span>&#160;<span class="keyword">package </span>com.cloudera.impala.catalog;</div>
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span>&#160;</div>
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span>&#160;<span class="keyword">import</span> java.util.List;</div>
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span>&#160;<span class="keyword">import</span> java.util.Map;</div>
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span>&#160;<span class="keyword">import</span> java.util.Set;</div>
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span>&#160;</div>
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span>&#160;<span class="keyword">import</span> org.apache.commons.net.ntp.TimeStamp;</div>
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span>&#160;<span class="keyword">import</span> org.apache.log4j.Logger;</div>
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span>&#160;<span class="keyword">import</span> org.apache.sentry.core.common.ActiveRoleSet;</div>
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span>&#160;<span class="keyword">import</span> org.apache.sentry.provider.cache.PrivilegeCache;</div>
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span>&#160;</div>
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span>&#160;<span class="keyword">import</span> com.cloudera.impala.thrift.TColumn;</div>
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>&#160;<span class="keyword">import</span> com.cloudera.impala.thrift.TPrivilege;</div>
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span>&#160;<span class="keyword">import</span> com.cloudera.impala.thrift.TResultRow;</div>
<div class="line"><a name="l00029"></a><span class="lineno"> 29</span>&#160;<span class="keyword">import</span> com.cloudera.impala.thrift.TResultSet;</div>
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span>&#160;<span class="keyword">import</span> com.cloudera.impala.thrift.TResultSetMetadata;</div>
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span>&#160;<span class="keyword">import</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1util_1_1TResultRowBuilder.html">com.cloudera.impala.util.TResultRowBuilder</a>;</div>
<div class="line"><a name="l00032"></a><span class="lineno"> 32</span>&#160;<span class="keyword">import</span> com.google.common.base.Strings;</div>
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span>&#160;<span class="keyword">import</span> com.google.common.collect.Lists;</div>
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span>&#160;<span class="keyword">import</span> com.google.common.collect.Maps;</div>
<div class="line"><a name="l00035"></a><span class="lineno"> 35</span>&#160;<span class="keyword">import</span> com.google.common.collect.Sets;</div>
<div class="line"><a name="l00036"></a><span class="lineno"> 36</span>&#160;</div>
<div class="line"><a name="l00055"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html"> 55</a></span>&#160;<span class="keyword">public</span> <span class="keyword">class </span><a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html">AuthorizationPolicy</a> <span class="keyword">implements</span> PrivilegeCache {</div>
<div class="line"><a name="l00056"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a95fe22747a681959fd7d4d1cb8ee190a"> 56</a></span>&#160; <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> Logger <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a95fe22747a681959fd7d4d1cb8ee190a">LOG</a> = Logger.getLogger(AuthorizationPolicy.class);</div>
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span>&#160;</div>
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span>&#160; <span class="comment">// Cache of role names (case-insensitive) to role objects.</span></div>
<div class="line"><a name="l00059"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a196220e7d99b4d8099407154818c6ed2"> 59</a></span>&#160; <span class="keyword">private</span> <span class="keyword">final</span> CatalogObjectCache&lt;Role&gt; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a196220e7d99b4d8099407154818c6ed2">roleCache_</a> = <span class="keyword">new</span> CatalogObjectCache&lt;Role&gt;();</div>
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>&#160;</div>
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span>&#160; <span class="comment">// Map of role ID -&gt; role name. Used to match privileges to roles.</span></div>
<div class="line"><a name="l00062"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5fc0c4fe859a4bcb51ac43ea12b73e15"> 62</a></span>&#160; Map&lt;Integer, String&gt; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5fc0c4fe859a4bcb51ac43ea12b73e15">roleIds_</a> = Maps.newHashMap();</div>
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span>&#160;</div>
<div class="line"><a name="l00064"></a><span class="lineno"> 64</span>&#160; <span class="comment">// Map of group name (case sensitive) to set of role names (case insensitive) that</span></div>
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span>&#160; <span class="comment">// have been granted to this group. Kept in sync with roleCache_. Provides efficient</span></div>
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>&#160; <span class="comment">// lookups of Role by group name.</span></div>
<div class="line"><a name="l00067"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a47d624f1f2aa8d775733cce3203c8e7f"> 67</a></span>&#160; Map&lt;String, Set&lt;String&gt;&gt; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a47d624f1f2aa8d775733cce3203c8e7f">groupsToRoles_</a> = Maps.newHashMap();</div>
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span>&#160;</div>
<div class="line"><a name="l00075"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#aaa8a5227ec70a87ef05ffaed81413d99"> 75</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <span class="keywordtype">void</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#aaa8a5227ec70a87ef05ffaed81413d99">addRole</a>(<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role) {</div>
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> existingRole = roleCache_.get(role.getName());</div>
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>&#160; <span class="comment">// There is already a newer version of this role in the catalog, ignore</span></div>
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>&#160; <span class="comment">// just return.</span></div>
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>&#160; <span class="keywordflow">if</span> (existingRole != null &amp;&amp;</div>
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>&#160; existingRole.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#a5642096f2701e9fafc324bdcf85b66d4">getCatalogVersion</a>() &gt;= role.getCatalogVersion()) <span class="keywordflow">return</span>;</div>
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span>&#160;</div>
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span>&#160; <span class="comment">// If there was an existing role that was replaced we first need to remove it.</span></div>
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>&#160; <span class="keywordflow">if</span> (existingRole != null) {</div>
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>&#160; <span class="comment">// Remove the role. This will also clean up the grantGroup mappings.</span></div>
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a478a3d589b4e419839d3408153de0bfa">removeRole</a>(existingRole.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#ab2ae227789fd8e14df2f032759a19211">getName</a>());</div>
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>&#160; <span class="keywordflow">if</span> (existingRole.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#a29f61a0b3dab3dde8a29d8081ec0b5ec">getId</a>() == role.getId()) {</div>
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span>&#160; <span class="comment">// Copy the privileges from the existing role.</span></div>
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span>&#160; <span class="keywordflow">for</span> (<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> p: existingRole.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#a15f753a259b835b28e28162f1413db31">getPrivileges</a>()) {</div>
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span>&#160; role.addPrivilege(p);</div>
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span>&#160; }</div>
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>&#160; }</div>
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>&#160; }</div>
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>&#160; roleCache_.add(role);</div>
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span>&#160;</div>
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span>&#160; <span class="comment">// Add new grants</span></div>
<div class="line"><a name="l00096"></a><span class="lineno"> 96</span>&#160; <span class="keywordflow">for</span> (String groupName: role.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#ab21b41c9a467f3b3ae751ce84db98981">getGrantGroups</a>()) {</div>
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span>&#160; Set&lt;String&gt; grantedRoles = groupsToRoles_.get(groupName);</div>
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>&#160; <span class="keywordflow">if</span> (grantedRoles == null) {</div>
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span>&#160; grantedRoles = Sets.newHashSet();</div>
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span>&#160; groupsToRoles_.put(groupName, grantedRoles);</div>
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span>&#160; }</div>
<div class="line"><a name="l00102"></a><span class="lineno"> 102</span>&#160; grantedRoles.add(role.getName().toLowerCase());</div>
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span>&#160; }</div>
<div class="line"><a name="l00104"></a><span class="lineno"> 104</span>&#160;</div>
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>&#160; <span class="comment">// Add this role to the role ID mapping</span></div>
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span>&#160; roleIds_.put(role.getId(), role.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#ab2ae227789fd8e14df2f032759a19211">getName</a>());</div>
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span>&#160; }</div>
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span>&#160;</div>
<div class="line"><a name="l00114"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a4e61c2bc160a8d66baee7e02ce1a1ecd"> 114</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <span class="keywordtype">void</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a4e61c2bc160a8d66baee7e02ce1a1ecd">addPrivilege</a>(<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> privilege)</div>
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span>&#160; <span class="keywordflow">throws</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a> {</div>
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span>&#160; LOG.trace(<span class="stringliteral">&quot;Adding privilege: &quot;</span> + privilege.getName() +</div>
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span>&#160; <span class="stringliteral">&quot; role ID: &quot;</span> + privilege.getRoleId());</div>
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5c959f32f8279dbcb8e8a0c3df152107">getRole</a>(privilege.getRoleId());</div>
<div class="line"><a name="l00119"></a><span class="lineno"> 119</span>&#160; <span class="keywordflow">if</span> (role == null) {</div>
<div class="line"><a name="l00120"></a><span class="lineno"> 120</span>&#160; <span class="keywordflow">throw</span> <span class="keyword">new</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a>(String.format(<span class="stringliteral">&quot;Error adding privilege: %s. Role ID &quot;</span> +</div>
<div class="line"><a name="l00121"></a><span class="lineno"> 121</span>&#160; <span class="stringliteral">&quot;&#39;%d&#39; does not exist.&quot;</span>, privilege.getName(), privilege.getRoleId()));</div>
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>&#160; }</div>
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span>&#160; LOG.trace(<span class="stringliteral">&quot;Adding privilege: &quot;</span> + privilege.getName() + <span class="stringliteral">&quot; to role: &quot;</span> +</div>
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>&#160; role.getName() + <span class="stringliteral">&quot;ID: &quot;</span> + role.getId());</div>
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>&#160; role.addPrivilege(privilege);</div>
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>&#160; }</div>
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>&#160;</div>
<div class="line"><a name="l00134"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ad3016e60c31d93ff74dc448eaeaac22f"> 134</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ad3016e60c31d93ff74dc448eaeaac22f">removePrivilege</a>(<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> privilege)</div>
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span>&#160; <span class="keywordflow">throws</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a> {</div>
<div class="line"><a name="l00136"></a><span class="lineno"> 136</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5c959f32f8279dbcb8e8a0c3df152107">getRole</a>(privilege.getRoleId());</div>
<div class="line"><a name="l00137"></a><span class="lineno"> 137</span>&#160; <span class="keywordflow">if</span> (role == null) {</div>
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span>&#160; <span class="keywordflow">throw</span> <span class="keyword">new</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a>(String.format(<span class="stringliteral">&quot;Error removing privilege: %s. Role ID &quot;</span> +</div>
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>&#160; <span class="stringliteral">&quot;&#39;%d&#39; does not exist.&quot;</span>, privilege.getName(), privilege.getRoleId()));</div>
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>&#160; }</div>
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>&#160; LOG.trace(<span class="stringliteral">&quot;Removing privilege: &#39;&quot;</span> + privilege.getName() + <span class="stringliteral">&quot;&#39; from Role ID: &quot;</span> +</div>
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>&#160; privilege.getRoleId() + <span class="stringliteral">&quot; Role Name: &quot;</span> + role.getName());</div>
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>&#160; <span class="keywordflow">return</span> role.removePrivilege(privilege.getName());</div>
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>&#160; }</div>
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>&#160;</div>
<div class="line"><a name="l00149"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ae9328ea0537c0d76d25f2ebffb39b626"> 149</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> List&lt;Role&gt; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ae9328ea0537c0d76d25f2ebffb39b626">getAllRoles</a>() {</div>
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span>&#160; <span class="keywordflow">return</span> roleCache_.getValues();</div>
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>&#160; }</div>
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>&#160;</div>
<div class="line"><a name="l00156"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a61e2df243ab2d7063bc60dc67bbdf830"> 156</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> Set&lt;String&gt; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a61e2df243ab2d7063bc60dc67bbdf830">getAllRoleNames</a>() {</div>
<div class="line"><a name="l00157"></a><span class="lineno"> 157</span>&#160; <span class="keywordflow">return</span> Sets.newHashSet(roleCache_.keySet());</div>
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>&#160; }</div>
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span>&#160;</div>
<div class="line"><a name="l00163"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5c959f32f8279dbcb8e8a0c3df152107"> 163</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5c959f32f8279dbcb8e8a0c3df152107">getRole</a>(String roleName) {</div>
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>&#160; <span class="keywordflow">return</span> roleCache_.get(roleName);</div>
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>&#160; }</div>
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>&#160;</div>
<div class="line"><a name="l00170"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#abd484f504ed603865f65d487aaa4141b"> 170</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#abd484f504ed603865f65d487aaa4141b">getRole</a>(<span class="keywordtype">int</span> roleId) {</div>
<div class="line"><a name="l00171"></a><span class="lineno"> 171</span>&#160; String roleName = roleIds_.get(roleId);</div>
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>&#160; <span class="keywordflow">if</span> (roleName == null) <span class="keywordflow">return</span> null;</div>
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span>&#160; <span class="keywordflow">return</span> roleCache_.get(roleName);</div>
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span>&#160; }</div>
<div class="line"><a name="l00175"></a><span class="lineno"> 175</span>&#160;</div>
<div class="line"><a name="l00180"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a751760e462ccb6ba1db9e14663bba852"> 180</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a751760e462ccb6ba1db9e14663bba852">getPrivilege</a>(<span class="keywordtype">int</span> roleId, String privilegeName) {</div>
<div class="line"><a name="l00181"></a><span class="lineno"> 181</span>&#160; String roleName = roleIds_.get(roleId);</div>
<div class="line"><a name="l00182"></a><span class="lineno"> 182</span>&#160; <span class="keywordflow">if</span> (roleName == null) <span class="keywordflow">return</span> null;</div>
<div class="line"><a name="l00183"></a><span class="lineno"> 183</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = roleCache_.get(roleName);</div>
<div class="line"><a name="l00184"></a><span class="lineno"> 184</span>&#160; <span class="keywordflow">return</span> role.getPrivilege(privilegeName);</div>
<div class="line"><a name="l00185"></a><span class="lineno"> 185</span>&#160; }</div>
<div class="line"><a name="l00186"></a><span class="lineno"> 186</span>&#160;</div>
<div class="line"><a name="l00190"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#adce9fc52e72302306473566ca792bb6b"> 190</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> List&lt;Role&gt; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#adce9fc52e72302306473566ca792bb6b">getGrantedRoles</a>(String groupName) {</div>
<div class="line"><a name="l00191"></a><span class="lineno"> 191</span>&#160; List&lt;Role&gt; grantedRoles = Lists.newArrayList();</div>
<div class="line"><a name="l00192"></a><span class="lineno"> 192</span>&#160; Set&lt;String&gt; roleNames = groupsToRoles_.get(groupName);</div>
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span>&#160; <span class="keywordflow">if</span> (roleNames != null) {</div>
<div class="line"><a name="l00194"></a><span class="lineno"> 194</span>&#160; <span class="keywordflow">for</span> (String roleName: roleNames) {</div>
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>&#160; <span class="comment">// TODO: verify they actually exist.</span></div>
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = roleCache_.get(roleName);</div>
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span>&#160; <span class="keywordflow">if</span> (role != null) grantedRoles.add(roleCache_.get(roleName));</div>
<div class="line"><a name="l00198"></a><span class="lineno"> 198</span>&#160; }</div>
<div class="line"><a name="l00199"></a><span class="lineno"> 199</span>&#160; }</div>
<div class="line"><a name="l00200"></a><span class="lineno"> 200</span>&#160; <span class="keywordflow">return</span> grantedRoles;</div>
<div class="line"><a name="l00201"></a><span class="lineno"> 201</span>&#160; }</div>
<div class="line"><a name="l00202"></a><span class="lineno"> 202</span>&#160;</div>
<div class="line"><a name="l00207"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a478a3d589b4e419839d3408153de0bfa"> 207</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a478a3d589b4e419839d3408153de0bfa">removeRole</a>(String roleName) {</div>
<div class="line"><a name="l00208"></a><span class="lineno"> 208</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> removedRole = roleCache_.remove(roleName);</div>
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span>&#160; <span class="keywordflow">if</span> (removedRole == null) <span class="keywordflow">return</span> null;</div>
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span>&#160; <span class="comment">// Cleanup grant groups</span></div>
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>&#160; <span class="keywordflow">for</span> (String grantGroup: removedRole.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#ab21b41c9a467f3b3ae751ce84db98981">getGrantGroups</a>()) {</div>
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>&#160; <span class="comment">// Remove this role from all of its grant groups.</span></div>
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span>&#160; Set&lt;String&gt; roles = groupsToRoles_.get(grantGroup);</div>
<div class="line"><a name="l00214"></a><span class="lineno"> 214</span>&#160; <span class="keywordflow">if</span> (roles != null) roles.remove(roleName.toLowerCase());</div>
<div class="line"><a name="l00215"></a><span class="lineno"> 215</span>&#160; }</div>
<div class="line"><a name="l00216"></a><span class="lineno"> 216</span>&#160; <span class="comment">// Cleanup role id.</span></div>
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>&#160; roleIds_.remove(removedRole.getId());</div>
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span>&#160; <span class="keywordflow">return</span> removedRole;</div>
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span>&#160; }</div>
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>&#160;</div>
<div class="line"><a name="l00226"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ab5d01bfc15651e3dec9b366a4d1dbbcf"> 226</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ab5d01bfc15651e3dec9b366a4d1dbbcf">addGrantGroup</a>(String roleName, String groupName)</div>
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>&#160; <span class="keywordflow">throws</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a> {</div>
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = roleCache_.get(roleName);</div>
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>&#160; <span class="keywordflow">if</span> (role == null) <span class="keywordflow">throw</span> <span class="keyword">new</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a>(<span class="stringliteral">&quot;Role does not exist: &quot;</span> + roleName);</div>
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span>&#160; role.addGrantGroup(groupName);</div>
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>&#160; Set&lt;String&gt; grantedRoles = groupsToRoles_.get(groupName);</div>
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>&#160; <span class="keywordflow">if</span> (grantedRoles == null) {</div>
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>&#160; grantedRoles = Sets.newHashSet();</div>
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span>&#160; groupsToRoles_.put(groupName, grantedRoles);</div>
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>&#160; }</div>
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span>&#160; grantedRoles.add(roleName.toLowerCase());</div>
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span>&#160; <span class="keywordflow">return</span> role;</div>
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span>&#160; }</div>
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span>&#160;</div>
<div class="line"><a name="l00245"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a7aa785d446462a9346fc87bde23dbd3c"> 245</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a7aa785d446462a9346fc87bde23dbd3c">removeGrantGroup</a>(String roleName, String groupName)</div>
<div class="line"><a name="l00246"></a><span class="lineno"> 246</span>&#160; <span class="keywordflow">throws</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a> {</div>
<div class="line"><a name="l00247"></a><span class="lineno"> 247</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = roleCache_.get(roleName);</div>
<div class="line"><a name="l00248"></a><span class="lineno"> 248</span>&#160; <span class="keywordflow">if</span> (role == null) <span class="keywordflow">throw</span> <span class="keyword">new</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">CatalogException</a>(<span class="stringliteral">&quot;Role does not exist: &quot;</span> + roleName);</div>
<div class="line"><a name="l00249"></a><span class="lineno"> 249</span>&#160; role.removeGrantGroup(groupName);</div>
<div class="line"><a name="l00250"></a><span class="lineno"> 250</span>&#160; Set&lt;String&gt; grantedRoles = groupsToRoles_.get(groupName);</div>
<div class="line"><a name="l00251"></a><span class="lineno"> 251</span>&#160; <span class="keywordflow">if</span> (grantedRoles != null) {</div>
<div class="line"><a name="l00252"></a><span class="lineno"> 252</span>&#160; grantedRoles.remove(roleName.toLowerCase());</div>
<div class="line"><a name="l00253"></a><span class="lineno"> 253</span>&#160; }</div>
<div class="line"><a name="l00254"></a><span class="lineno"> 254</span>&#160; <span class="keywordflow">return</span> role;</div>
<div class="line"><a name="l00255"></a><span class="lineno"> 255</span>&#160; }</div>
<div class="line"><a name="l00256"></a><span class="lineno"> 256</span>&#160;</div>
<div class="line"><a name="l00260"></a><span class="lineno"> 260</span>&#160; @Override</div>
<div class="line"><a name="l00261"></a><span class="lineno"> 261</span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> Set&lt;String&gt;</div>
<div class="line"><a name="l00262"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#afafb7c938550eacf2a12b9b0bda83941"> 262</a></span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#afafb7c938550eacf2a12b9b0bda83941">listPrivileges</a>(Set&lt;String&gt; groups, ActiveRoleSet roleSet) {</div>
<div class="line"><a name="l00263"></a><span class="lineno"> 263</span>&#160; Set&lt;String&gt; privileges = Sets.newHashSet();</div>
<div class="line"><a name="l00264"></a><span class="lineno"> 264</span>&#160; <span class="keywordflow">if</span> (roleSet != ActiveRoleSet.ALL) {</div>
<div class="line"><a name="l00265"></a><span class="lineno"> 265</span>&#160; <span class="keywordflow">throw</span> <span class="keyword">new</span> UnsupportedOperationException(<span class="stringliteral">&quot;Impala does not support role subsets.&quot;</span>);</div>
<div class="line"><a name="l00266"></a><span class="lineno"> 266</span>&#160; }</div>
<div class="line"><a name="l00267"></a><span class="lineno"> 267</span>&#160;</div>
<div class="line"><a name="l00268"></a><span class="lineno"> 268</span>&#160; <span class="comment">// Collect all privileges granted to all roles.</span></div>
<div class="line"><a name="l00269"></a><span class="lineno"> 269</span>&#160; <span class="keywordflow">for</span> (String groupName: groups) {</div>
<div class="line"><a name="l00270"></a><span class="lineno"> 270</span>&#160; List&lt;Role&gt; grantedRoles = <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#adce9fc52e72302306473566ca792bb6b">getGrantedRoles</a>(groupName);</div>
<div class="line"><a name="l00271"></a><span class="lineno"> 271</span>&#160; <span class="keywordflow">for</span> (<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role: grantedRoles) {</div>
<div class="line"><a name="l00272"></a><span class="lineno"> 272</span>&#160; <span class="keywordflow">for</span> (<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> privilege: role.getPrivileges()) {</div>
<div class="line"><a name="l00273"></a><span class="lineno"> 273</span>&#160; String authorizeable = privilege.getName();</div>
<div class="line"><a name="l00274"></a><span class="lineno"> 274</span>&#160; <span class="keywordflow">if</span> (authorizeable == null) {</div>
<div class="line"><a name="l00275"></a><span class="lineno"> 275</span>&#160; LOG.trace(<span class="stringliteral">&quot;Ignoring invalid privilege: &quot;</span> + privilege.getName());</div>
<div class="line"><a name="l00276"></a><span class="lineno"> 276</span>&#160; <span class="keywordflow">continue</span>;</div>
<div class="line"><a name="l00277"></a><span class="lineno"> 277</span>&#160; }</div>
<div class="line"><a name="l00278"></a><span class="lineno"> 278</span>&#160; privileges.add(authorizeable);</div>
<div class="line"><a name="l00279"></a><span class="lineno"> 279</span>&#160; }</div>
<div class="line"><a name="l00280"></a><span class="lineno"> 280</span>&#160; }</div>
<div class="line"><a name="l00281"></a><span class="lineno"> 281</span>&#160; }</div>
<div class="line"><a name="l00282"></a><span class="lineno"> 282</span>&#160; <span class="keywordflow">return</span> privileges;</div>
<div class="line"><a name="l00283"></a><span class="lineno"> 283</span>&#160; }</div>
<div class="line"><a name="l00284"></a><span class="lineno"> 284</span>&#160;</div>
<div class="line"><a name="l00285"></a><span class="lineno"> 285</span>&#160; @Override</div>
<div class="line"><a name="l00286"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#af7a02993c6d9ae99397104f2bbbf72a6"> 286</a></span>&#160; <span class="keyword">public</span> <span class="keywordtype">void</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#af7a02993c6d9ae99397104f2bbbf72a6">close</a>() {</div>
<div class="line"><a name="l00287"></a><span class="lineno"> 287</span>&#160; <span class="comment">// Nothing to do, but required by PrivilegeCache.</span></div>
<div class="line"><a name="l00288"></a><span class="lineno"> 288</span>&#160; }</div>
<div class="line"><a name="l00289"></a><span class="lineno"> 289</span>&#160;</div>
<div class="line"><a name="l00295"></a><span class="lineno"><a class="line" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a3ba1eab853c1529958a461e972c5c8f7"> 295</a></span>&#160; <span class="keyword">public</span> <span class="keyword">synchronized</span> TResultSet <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a3ba1eab853c1529958a461e972c5c8f7">getRolePrivileges</a>(String roleName, TPrivilege filter) {</div>
<div class="line"><a name="l00296"></a><span class="lineno"> 296</span>&#160; TResultSet result = <span class="keyword">new</span> TResultSet();</div>
<div class="line"><a name="l00297"></a><span class="lineno"> 297</span>&#160; result.setSchema(<span class="keyword">new</span> TResultSetMetadata());</div>
<div class="line"><a name="l00298"></a><span class="lineno"> 298</span>&#160; result.getSchema().addToColumns(<span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;scope&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">STRING</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00299"></a><span class="lineno"> 299</span>&#160; result.getSchema().addToColumns(<span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;database&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">STRING</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00300"></a><span class="lineno"> 300</span>&#160; result.getSchema().addToColumns(<span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;table&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">STRING</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00301"></a><span class="lineno"> 301</span>&#160; result.getSchema().addToColumns(<span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;uri&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">STRING</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00302"></a><span class="lineno"> 302</span>&#160; result.getSchema().addToColumns(<span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;privilege&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">STRING</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00303"></a><span class="lineno"> 303</span>&#160; result.getSchema().addToColumns(</div>
<div class="line"><a name="l00304"></a><span class="lineno"> 304</span>&#160; <span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;grant_option&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a37db9c01d07455b2b47d3fa9b678e661">BOOLEAN</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00305"></a><span class="lineno"> 305</span>&#160; result.getSchema().addToColumns(<span class="keyword">new</span> TColumn(<span class="stringliteral">&quot;create_time&quot;</span>, <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">Type</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">STRING</a>.<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">toThrift</a>()));</div>
<div class="line"><a name="l00306"></a><span class="lineno"> 306</span>&#160; result.setRows(Lists.&lt;TResultRow&gt;newArrayList());</div>
<div class="line"><a name="l00307"></a><span class="lineno"> 307</span>&#160;</div>
<div class="line"><a name="l00308"></a><span class="lineno"> 308</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">Role</a> role = <a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5c959f32f8279dbcb8e8a0c3df152107">getRole</a>(roleName);</div>
<div class="line"><a name="l00309"></a><span class="lineno"> 309</span>&#160; <span class="keywordflow">if</span> (role == null) <span class="keywordflow">return</span> result;</div>
<div class="line"><a name="l00310"></a><span class="lineno"> 310</span>&#160; <span class="keywordflow">for</span> (<a class="code" href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">RolePrivilege</a> p: role.getPrivileges()) {</div>
<div class="line"><a name="l00311"></a><span class="lineno"> 311</span>&#160; TPrivilege privilege = p.toThrift();</div>
<div class="line"><a name="l00312"></a><span class="lineno"> 312</span>&#160; <span class="keywordflow">if</span> (filter != null) {</div>
<div class="line"><a name="l00313"></a><span class="lineno"> 313</span>&#160; <span class="comment">// Check if the privileges are targeting the same object.</span></div>
<div class="line"><a name="l00314"></a><span class="lineno"> 314</span>&#160; filter.setPrivilege_level(privilege.getPrivilege_level());</div>
<div class="line"><a name="l00315"></a><span class="lineno"> 315</span>&#160; String privName = RolePrivilege.buildRolePrivilegeName(filter);</div>
<div class="line"><a name="l00316"></a><span class="lineno"> 316</span>&#160; <span class="keywordflow">if</span> (!privName.equalsIgnoreCase(privilege.getPrivilege_name())) <span class="keywordflow">continue</span>;</div>
<div class="line"><a name="l00317"></a><span class="lineno"> 317</span>&#160; }</div>
<div class="line"><a name="l00318"></a><span class="lineno"> 318</span>&#160; <a class="code" href="classcom_1_1cloudera_1_1impala_1_1util_1_1TResultRowBuilder.html">TResultRowBuilder</a> rowBuilder = <span class="keyword">new</span> <a class="code" href="classcom_1_1cloudera_1_1impala_1_1util_1_1TResultRowBuilder.html">TResultRowBuilder</a>();</div>
<div class="line"><a name="l00319"></a><span class="lineno"> 319</span>&#160; rowBuilder.add(privilege.getScope().toString());</div>
<div class="line"><a name="l00320"></a><span class="lineno"> 320</span>&#160; rowBuilder.add(Strings.nullToEmpty(privilege.getDb_name()));</div>
<div class="line"><a name="l00321"></a><span class="lineno"> 321</span>&#160; rowBuilder.add(Strings.nullToEmpty(privilege.getTable_name()));</div>
<div class="line"><a name="l00322"></a><span class="lineno"> 322</span>&#160; rowBuilder.add(Strings.nullToEmpty(privilege.getUri()));</div>
<div class="line"><a name="l00323"></a><span class="lineno"> 323</span>&#160; rowBuilder.add(privilege.getPrivilege_level().toString());</div>
<div class="line"><a name="l00324"></a><span class="lineno"> 324</span>&#160; rowBuilder.add(Boolean.toString(privilege.isHas_grant_opt()));</div>
<div class="line"><a name="l00325"></a><span class="lineno"> 325</span>&#160; <span class="keywordflow">if</span> (privilege.getCreate_time_ms() == -1) {</div>
<div class="line"><a name="l00326"></a><span class="lineno"> 326</span>&#160; rowBuilder.add(null);</div>
<div class="line"><a name="l00327"></a><span class="lineno"> 327</span>&#160; } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00328"></a><span class="lineno"> 328</span>&#160; rowBuilder.add(</div>
<div class="line"><a name="l00329"></a><span class="lineno"> 329</span>&#160; TimeStamp.getNtpTime(privilege.getCreate_time_ms()).toDateString());</div>
<div class="line"><a name="l00330"></a><span class="lineno"> 330</span>&#160; }</div>
<div class="line"><a name="l00331"></a><span class="lineno"> 331</span>&#160; result.addToRows(rowBuilder.get());</div>
<div class="line"><a name="l00332"></a><span class="lineno"> 332</span>&#160; }</div>
<div class="line"><a name="l00333"></a><span class="lineno"> 333</span>&#160; <span class="keywordflow">return</span> result;</div>
<div class="line"><a name="l00334"></a><span class="lineno"> 334</span>&#160; }</div>
<div class="line"><a name="l00335"></a><span class="lineno"> 335</span>&#160;}</div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a4e61c2bc160a8d66baee7e02ce1a1ecd"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a4e61c2bc160a8d66baee7e02ce1a1ecd">com.cloudera.impala.catalog.AuthorizationPolicy.addPrivilege</a></div><div class="ttdeci">synchronized void addPrivilege(RolePrivilege privilege)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00114">AuthorizationPolicy.java:114</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role_html_a15f753a259b835b28e28162f1413db31"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#a15f753a259b835b28e28162f1413db31">com.cloudera.impala.catalog.Role.getPrivileges</a></div><div class="ttdeci">List&lt; RolePrivilege &gt; getPrivileges()</div><div class="ttdef"><b>Definition:</b> <a href="Role_8java_source.html#l00062">Role.java:62</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1util_1_1TResultRowBuilder_html"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1util_1_1TResultRowBuilder.html">com.cloudera.impala.util.TResultRowBuilder</a></div><div class="ttdef"><b>Definition:</b> <a href="TResultRowBuilder_8java_source.html#l00024">TResultRowBuilder.java:24</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a3ba1eab853c1529958a461e972c5c8f7"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a3ba1eab853c1529958a461e972c5c8f7">com.cloudera.impala.catalog.AuthorizationPolicy.getRolePrivileges</a></div><div class="ttdeci">synchronized TResultSet getRolePrivileges(String roleName, TPrivilege filter)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00295">AuthorizationPolicy.java:295</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a5fc0c4fe859a4bcb51ac43ea12b73e15"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5fc0c4fe859a4bcb51ac43ea12b73e15">com.cloudera.impala.catalog.AuthorizationPolicy.roleIds_</a></div><div class="ttdeci">Map&lt; Integer, String &gt; roleIds_</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00062">AuthorizationPolicy.java:62</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a95fe22747a681959fd7d4d1cb8ee190a"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a95fe22747a681959fd7d4d1cb8ee190a">com.cloudera.impala.catalog.AuthorizationPolicy.LOG</a></div><div class="ttdeci">static final Logger LOG</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00056">AuthorizationPolicy.java:56</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type_html"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html">com.cloudera.impala.catalog.Type</a></div><div class="ttdef"><b>Definition:</b> <a href="Type_8java_source.html#l00042">Type.java:42</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type_html_a20128254897643f1f2a8bf575ffd8c41"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a20128254897643f1f2a8bf575ffd8c41">com.cloudera.impala.catalog.Type.STRING</a></div><div class="ttdeci">static final ScalarType STRING</div><div class="ttdef"><b>Definition:</b> <a href="Type_8java_source.html#l00053">Type.java:53</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_af7a02993c6d9ae99397104f2bbbf72a6"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#af7a02993c6d9ae99397104f2bbbf72a6">com.cloudera.impala.catalog.AuthorizationPolicy.close</a></div><div class="ttdeci">void close()</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00286">AuthorizationPolicy.java:286</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_ad3016e60c31d93ff74dc448eaeaac22f"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ad3016e60c31d93ff74dc448eaeaac22f">com.cloudera.impala.catalog.AuthorizationPolicy.removePrivilege</a></div><div class="ttdeci">synchronized RolePrivilege removePrivilege(RolePrivilege privilege)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00134">AuthorizationPolicy.java:134</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a7aa785d446462a9346fc87bde23dbd3c"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a7aa785d446462a9346fc87bde23dbd3c">com.cloudera.impala.catalog.AuthorizationPolicy.removeGrantGroup</a></div><div class="ttdeci">synchronized Role removeGrantGroup(String roleName, String groupName)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00245">AuthorizationPolicy.java:245</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_abd484f504ed603865f65d487aaa4141b"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#abd484f504ed603865f65d487aaa4141b">com.cloudera.impala.catalog.AuthorizationPolicy.getRole</a></div><div class="ttdeci">synchronized Role getRole(int roleId)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00170">AuthorizationPolicy.java:170</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html">com.cloudera.impala.catalog.AuthorizationPolicy</a></div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00055">AuthorizationPolicy.java:55</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type_html_a37db9c01d07455b2b47d3fa9b678e661"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Type.html#a37db9c01d07455b2b47d3fa9b678e661">com.cloudera.impala.catalog.Type.BOOLEAN</a></div><div class="ttdeci">static final ScalarType BOOLEAN</div><div class="ttdef"><b>Definition:</b> <a href="Type_8java_source.html#l00046">Type.java:46</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role_html"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html">com.cloudera.impala.catalog.Role</a></div><div class="ttdef"><b>Definition:</b> <a href="Role_8java_source.html#l00030">Role.java:30</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role_html_a5642096f2701e9fafc324bdcf85b66d4"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#a5642096f2701e9fafc324bdcf85b66d4">com.cloudera.impala.catalog.Role.getCatalogVersion</a></div><div class="ttdeci">synchronized long getCatalogVersion()</div><div class="ttdef"><b>Definition:</b> <a href="Role_8java_source.html#l00134">Role.java:134</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a47d624f1f2aa8d775733cce3203c8e7f"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a47d624f1f2aa8d775733cce3203c8e7f">com.cloudera.impala.catalog.AuthorizationPolicy.groupsToRoles_</a></div><div class="ttdeci">Map&lt; String, Set&lt; String &gt; &gt; groupsToRoles_</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00067">AuthorizationPolicy.java:67</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_ae9328ea0537c0d76d25f2ebffb39b626"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ae9328ea0537c0d76d25f2ebffb39b626">com.cloudera.impala.catalog.AuthorizationPolicy.getAllRoles</a></div><div class="ttdeci">synchronized List&lt; Role &gt; getAllRoles()</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00149">AuthorizationPolicy.java:149</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a196220e7d99b4d8099407154818c6ed2"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a196220e7d99b4d8099407154818c6ed2">com.cloudera.impala.catalog.AuthorizationPolicy.roleCache_</a></div><div class="ttdeci">final CatalogObjectCache&lt; Role &gt; roleCache_</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00059">AuthorizationPolicy.java:59</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a5c959f32f8279dbcb8e8a0c3df152107"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a5c959f32f8279dbcb8e8a0c3df152107">com.cloudera.impala.catalog.AuthorizationPolicy.getRole</a></div><div class="ttdeci">synchronized Role getRole(String roleName)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00163">AuthorizationPolicy.java:163</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException_html"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1CatalogException.html">com.cloudera.impala.catalog.CatalogException</a></div><div class="ttdef"><b>Definition:</b> <a href="CatalogException_8java_source.html#l00022">CatalogException.java:22</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_ab5d01bfc15651e3dec9b366a4d1dbbcf"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#ab5d01bfc15651e3dec9b366a4d1dbbcf">com.cloudera.impala.catalog.AuthorizationPolicy.addGrantGroup</a></div><div class="ttdeci">synchronized Role addGrantGroup(String roleName, String groupName)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00226">AuthorizationPolicy.java:226</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_adce9fc52e72302306473566ca792bb6b"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#adce9fc52e72302306473566ca792bb6b">com.cloudera.impala.catalog.AuthorizationPolicy.getGrantedRoles</a></div><div class="ttdeci">synchronized List&lt; Role &gt; getGrantedRoles(String groupName)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00190">AuthorizationPolicy.java:190</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role_html_ab21b41c9a467f3b3ae751ce84db98981"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#ab21b41c9a467f3b3ae751ce84db98981">com.cloudera.impala.catalog.Role.getGrantGroups</a></div><div class="ttdeci">Set&lt; String &gt; getGrantGroups()</div><div class="ttdef"><b>Definition:</b> <a href="Role_8java_source.html#l00125">Role.java:125</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a751760e462ccb6ba1db9e14663bba852"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a751760e462ccb6ba1db9e14663bba852">com.cloudera.impala.catalog.AuthorizationPolicy.getPrivilege</a></div><div class="ttdeci">synchronized RolePrivilege getPrivilege(int roleId, String privilegeName)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00180">AuthorizationPolicy.java:180</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType_html_a308146809139a7f4e8b1a0e4a92392b6"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1ScalarType.html#a308146809139a7f4e8b1a0e4a92392b6">com.cloudera.impala.catalog.ScalarType.toThrift</a></div><div class="ttdeci">void toThrift(TColumnType container)</div><div class="ttdef"><b>Definition:</b> <a href="ScalarType_8java_source.html#l00164">ScalarType.java:164</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_aaa8a5227ec70a87ef05ffaed81413d99"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#aaa8a5227ec70a87ef05ffaed81413d99">com.cloudera.impala.catalog.AuthorizationPolicy.addRole</a></div><div class="ttdeci">synchronized void addRole(Role role)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00075">AuthorizationPolicy.java:75</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a61e2df243ab2d7063bc60dc67bbdf830"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a61e2df243ab2d7063bc60dc67bbdf830">com.cloudera.impala.catalog.AuthorizationPolicy.getAllRoleNames</a></div><div class="ttdeci">synchronized Set&lt; String &gt; getAllRoleNames()</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00156">AuthorizationPolicy.java:156</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_a478a3d589b4e419839d3408153de0bfa"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#a478a3d589b4e419839d3408153de0bfa">com.cloudera.impala.catalog.AuthorizationPolicy.removeRole</a></div><div class="ttdeci">synchronized Role removeRole(String roleName)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00207">AuthorizationPolicy.java:207</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy_html_afafb7c938550eacf2a12b9b0bda83941"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1AuthorizationPolicy.html#afafb7c938550eacf2a12b9b0bda83941">com.cloudera.impala.catalog.AuthorizationPolicy.listPrivileges</a></div><div class="ttdeci">synchronized Set&lt; String &gt; listPrivileges(Set&lt; String &gt; groups, ActiveRoleSet roleSet)</div><div class="ttdef"><b>Definition:</b> <a href="AuthorizationPolicy_8java_source.html#l00262">AuthorizationPolicy.java:262</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege_html"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1RolePrivilege.html">com.cloudera.impala.catalog.RolePrivilege</a></div><div class="ttdef"><b>Definition:</b> <a href="RolePrivilege_8java_source.html#l00033">RolePrivilege.java:33</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role_html_a29f61a0b3dab3dde8a29d8081ec0b5ec"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#a29f61a0b3dab3dde8a29d8081ec0b5ec">com.cloudera.impala.catalog.Role.getId</a></div><div class="ttdeci">int getId()</div><div class="ttdef"><b>Definition:</b> <a href="Role_8java_source.html#l00132">Role.java:132</a></div></div>
<div class="ttc" id="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role_html_ab2ae227789fd8e14df2f032759a19211"><div class="ttname"><a href="classcom_1_1cloudera_1_1impala_1_1catalog_1_1Role.html#ab2ae227789fd8e14df2f032759a19211">com.cloudera.impala.catalog.Role.getName</a></div><div class="ttdeci">String getName()</div><div class="ttdef"><b>Definition:</b> <a href="Role_8java_source.html#l00131">Role.java:131</a></div></div>
</div><!-- fragment --></div><!-- contents -->
</div><!-- doc-content -->
<!-- start footer part -->
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
<ul>
<li class="navelem"><a class="el" href="dir_ca2797c59c2e868cd2eca72571423f6a.html">fe</a></li><li class="navelem"><a class="el" href="dir_9456c03c9c6e5a96e843b28fc5c6395b.html">src</a></li><li class="navelem"><a class="el" href="dir_31c8d7a6e8855be2d8d6fa4227c487c3.html">main</a></li><li class="navelem"><a class="el" href="dir_d2615d3423c50009d0fa2801d3e0150c.html">java</a></li><li class="navelem"><a class="el" href="dir_df2af9fb37a2f3aedd0dd3e7b116eedc.html">com</a></li><li class="navelem"><a class="el" href="dir_48ee7e70be44cce637301d7ac948c4e1.html">cloudera</a></li><li class="navelem"><a class="el" href="dir_c062777d65f1b5dc463ca31df638b83a.html">impala</a></li><li class="navelem"><a class="el" href="dir_3961720ebee40fc7eeb8c4cf66135aca.html">catalog</a></li><li class="navelem"><a class="el" href="AuthorizationPolicy_8java.html">AuthorizationPolicy.java</a></li>
<li class="footer">Generated on Thu May 7 2015 16:10:38 for Impala by
<a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.8.6 </li>
</ul>
</div>
</body>
</html>