org.apache.drill.exec.impersonation.hive

Class TestStorageBasedHiveAuthorization

java.lang.Object

org.apache.drill.test.BaseTest

org.apache.drill.test.DrillTest

org.apache.drill.exec.ExecTest

org.apache.drill.test.BaseTestQuery

org.apache.drill.PlanTestBase

org.apache.drill.exec.impersonation.BaseTestImpersonation

org.apache.drill.exec.impersonation.hive.BaseTestHiveImpersonation

org.apache.drill.exec.impersonation.hive.TestStorageBasedHiveAuthorization

public class TestStorageBasedHiveAuthorization
extends BaseTestHiveImpersonation

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.drill.test.BaseTestQuery

BaseTestQuery.ClassicTestServices, BaseTestQuery.SilentListener, BaseTestQuery.TestResultSet

Nested classes/interfaces inherited from class org.apache.drill.test.DrillTest

DrillTest.MemWatcher

Field Summary

Fields inherited from class org.apache.drill.exec.impersonation.hive.BaseTestHiveImpersonation

hiveConf, hivePluginName, partitionStudentDef, studentData, studentDef, voterData, voterDef, whDir

Fields inherited from class org.apache.drill.exec.impersonation.BaseTestImpersonation

dfsCluster, dfsConf, fs, MINI_DFS_STORAGE_PLUGIN_NAME, miniDfsStoragePath, org1Groups, org1Users, org2Groups, org2Users, processUser

Fields inherited from class org.apache.drill.PlanTestBase

EXPECTED_NOT_FOUND, JSON_FORMAT, OPTIQ_FORMAT, UNEXPECTED_FOUND

Fields inherited from class org.apache.drill.test.BaseTestQuery

allocator, bits, client, config, serviceSet

Fields inherited from class org.apache.drill.exec.ExecTest

c, dirTestWatcher, optionManager

Fields inherited from class org.apache.drill.test.DrillTest

logOutcome, objectMapper, REPEAT_RULE, thrownException, TIMEOUT

Constructor Summary

Constructors

Constructor and Description
TestStorageBasedHiveAuthorization()

Method Summary

Modifier and Type	Method and Description
static void	setup()
void	showSchemas()
static void	shutdown()
void	user0_allowed_g_partitioned_student_u0_700() user0 is 700 owner
void	user0_allowed_g_student_all_755() table owned by user2 and group2, but user0 can access because Others allowed to read and execute
void	user0_allowed_g_student_u0_700() user0 is 700 owner
void	user0_allowed_g_student_u0g0_750() user0 is 750 owner
void	user0_allowed_g_voter_all_755() user0 allowed because others have r-x access.
void	user0_allowed_g_vw_u0_700_over_g_student_u0_700()
void	user0_allowed_u0_student_all_755() user0 is 755 owner
void	user0_allowed_u0_voter_all_755() user0 is 755 owner
void	user0_allowed_u0_vw_voter_all_755()
void	user0_allowed_v_partitioned_student_u0g0_750()
void	user0_allowed_v_student_u0g0_750()
void	user0_db_general_infoSchema()
void	user0_db_general_showTables() Should only contain the tables that the user has access to read.
void	user0_db_u0_only_infoSchema()
void	user0_db_u0_only_showTables()
void	user0_db_u1g1_only_infoSchema()
void	user0_db_u1g1_only_showTables() If the user has no read access to the db, the list will be always empty even if the user has read access to the tables inside the db.
void	user0_forbidden_g_voter_u1_700() user0 can't access because, user1 is 700 owner
void	user0_forbidden_g_voter_u2g1_750() user0 can't access, because only user2 and group1 members
void	user0_forbidden_u1g1_student_all_755() user0 doesn't have access to database db_u1g1_only
void	user0_forbidden_v_partitioned_student_u1g1_750()
void	user0_forbidden_v_student_u1g1_750()
void	user1_allowed_g_student_all_755() user1 allowed because Others have r-x access
void	user1_allowed_g_student_u0g0_750() user1 allowed because he's a member of group0
void	user1_allowed_g_voter_all_755() user1 is 755 owner
void	user1_allowed_g_voter_u1_700() user1 is 700 owner
void	user1_allowed_g_voter_u2g1_750() user1 allowed because he's member of group1
void	user1_allowed_v_partitioned_student_u0g0_750()
void	user1_allowed_v_partitioned_student_u1g1_750()
void	user1_allowed_v_student_u0g0_750()
void	user1_allowed_v_student_u1g1_750()
void	user1_db_general_infoSchema()
void	user1_db_general_showTables()
void	user1_db_u0_only_infoSchema()
void	user1_db_u0_only_showTables()
void	user1_db_u1g1_only_infoSchema()
void	user1_db_u1g1_only_showTables()
void	user1_forbidden_g_student_u0_700() user1 can't access, because user0 is 700 owner
void	user1_forbidden_g_vw_u0_700_over_g_student_u0_700()
void	user1_forbidden_u0_student_all_755() here access restricted at db level, only user0 can access db_u0_only
void	user1_forbidden_u0_voter_all_755() here access restricted at db level, only user0 can access db_u0_only
void	user1_forbidden_u0_vw_voter_all_755()
void	user2_allowed_g_student_all_755() user2 is 755 owner
void	user2_allowed_g_voter_all_755() user2 is member of group1
void	user2_allowed_g_voter_u2g1_750() user2 is 750 owner
void	user2_allowed_v_partitioned_student_u1g1_750()
void	user2_allowed_v_student_u1g1_750()
void	user2_db_general_infoSchema()
void	user2_db_general_showTables()
void	user2_db_u0_only_infoSchema()
void	user2_db_u0_only_showTables()
void	user2_db_u1g1_only_infoSchema()
void	user2_db_u1g1_only_showTables()
void	user2_forbidden_g_student_u0_700() user2 can't access, because user0 is 700 owner
void	user2_forbidden_g_student_u0g0_750() user2 can't access, only user0 and group0 members have access
void	user2_forbidden_g_voter_u1_700() user2 can't access, because user1 is 700 owner
void	user2_forbidden_g_vw_u0_700_over_g_student_u0_700()
void	user2_forbidden_u0_student_all_755() here access restricted at db level, only user0 can access db_u0_only
void	user2_forbidden_u0_voter_all_755() here access restricted at db level, only user0 can access db_u0_only
void	user2_forbidden_u0_vw_voter_all_755()
void	user2_forbidden_v_partitioned_student_u0g0_750()
void	user2_forbidden_v_student_u0g0_750()

Methods inherited from class org.apache.drill.exec.impersonation.hive.BaseTestHiveImpersonation

addHiveStoragePlugin, createHiveStoragePlugin, fromInfoSchemaHelper, getWhPathForHiveObject, prepHiveConfAndData, setUp, showTablesHelper, startHiveMetaStore, stopHiveMetaStore

Methods inherited from class org.apache.drill.exec.impersonation.BaseTestImpersonation

addMiniDfsBasedStorage, createAndAddWorkspace, createView, createView, getUserHome, getWSSchema, startDrillCluster, startDrillCluster, startMiniDfsCluster, startMiniDfsCluster, stopMiniDfsCluster

Methods inherited from class org.apache.drill.PlanTestBase

checkForMetadataFile, createMetadataDir, getPhysicalJsonPlan, getPlanInString, testPhysicalPlan, testPhysicalPlanExecutionBasedOnQuery, testPlanMatchingPatterns, testPlanMatchingPatterns, testPlanMatchingPatterns, testPlanMatchingPatterns, testPlanOneExcludedPattern, testPlanOneExpectedPattern, testPlanOneExpectedPatternOneExcluded, testPlanSubstrPatterns, testPlanWithAttributesMatchingPatterns, testRelLogicalJoinOrder, testRelLogicalPlanLevDigest, testRelLogicalPlanLevExplain, testRelPhysicalJoinOrder, testRelPhysicalPlanLevDigest, testRelPhysicalPlanLevExplain

Methods inherited from class org.apache.drill.test.BaseTestQuery

alterSession, cloneDefaultTestConfigProperties, closeClient, errorMsgTestHelper, getAllocator, getDrillbitContext, getFile, getPhysicalFileFromResource, getResultString, getUserPort, logResult, newTest, parseErrorHelper, printResult, resetAllSessionOptions, resetDrillbitCount, resetSessionOption, runSQL, setColumnWidth, setColumnWidths, setSessionOption, setSessionOption, setSessionOption, setSessionOption, setupDefaultTestCluster, test, test, testBuilder, testLogicalWithResults, testNoResult, testNoResult, testPhysical, testPhysicalFromFile, testPhysicalWithResults, testPreparedStatement, testRunAndPrint, testRunAndReturn, testSql, testSqlWithResults, testWithListener, updateClient, updateClient, updateClient, updateTestCluster, updateTestCluster

Methods inherited from class org.apache.drill.exec.ExecTest

clear, getLocalFileSystem, mockDrillbitContext, mockUsDateFormatSymbols, mockUtcDateTimeZone, parseExpr, setupOptionManager

Methods inherited from class org.apache.drill.test.DrillTest

escapeJsonString, finishDrillTest, initDrillTest

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TestStorageBasedHiveAuthorization

public TestStorageBasedHiveAuthorization()

Method Detail

setup

public static void setup()
                  throws Exception

Throws:

Exception

showSchemas

public void showSchemas()
                 throws Exception

Throws:

Exception

user0_db_general_showTables

public void user0_db_general_showTables()
                                 throws Exception

Should only contain the tables that the user has access to read.

Throws:

Exception

user0_db_u0_only_showTables

public void user0_db_u0_only_showTables()
                                 throws Exception

Throws:

Exception

user0_db_u1g1_only_showTables

public void user0_db_u1g1_only_showTables()
                                   throws Exception

If the user has no read access to the db, the list will be always empty even if the user has read access to the tables inside the db.

Throws:

Exception

user0_db_general_infoSchema

public void user0_db_general_infoSchema()
                                 throws Exception

Throws:

Exception

user0_db_u0_only_infoSchema

public void user0_db_u0_only_infoSchema()
                                 throws Exception

Throws:

Exception

user0_db_u1g1_only_infoSchema

public void user0_db_u1g1_only_infoSchema()
                                   throws Exception

Throws:

Exception

user0_allowed_g_student_u0_700

public void user0_allowed_g_student_u0_700()
                                    throws Exception

user0 is 700 owner

Throws:

Exception

user0_allowed_g_vw_u0_700_over_g_student_u0_700

public void user0_allowed_g_vw_u0_700_over_g_student_u0_700()
                                                     throws Exception

Throws:

Exception

user1_forbidden_g_vw_u0_700_over_g_student_u0_700

public void user1_forbidden_g_vw_u0_700_over_g_student_u0_700()
                                                       throws Exception

Throws:

Exception

user2_forbidden_g_vw_u0_700_over_g_student_u0_700

public void user2_forbidden_g_vw_u0_700_over_g_student_u0_700()
                                                       throws Exception

Throws:

Exception

user0_allowed_u0_vw_voter_all_755

public void user0_allowed_u0_vw_voter_all_755()
                                       throws Exception

Throws:

Exception

user1_forbidden_u0_vw_voter_all_755

public void user1_forbidden_u0_vw_voter_all_755()
                                         throws Exception

Throws:

Exception

user2_forbidden_u0_vw_voter_all_755

public void user2_forbidden_u0_vw_voter_all_755()
                                         throws Exception

Throws:

Exception

user0_allowed_g_student_u0g0_750

public void user0_allowed_g_student_u0g0_750()
                                      throws Exception

user0 is 750 owner

Throws:

Exception

user0_allowed_g_student_all_755

public void user0_allowed_g_student_all_755()
                                     throws Exception

table owned by user2 and group2, but user0 can access because Others allowed to read and execute

Throws:

Exception

user0_forbidden_g_voter_u1_700

public void user0_forbidden_g_voter_u1_700()
                                    throws Exception

user0 can't access because, user1 is 700 owner

Throws:

Exception

user0_forbidden_g_voter_u2g1_750

public void user0_forbidden_g_voter_u2g1_750()
                                      throws Exception

user0 can't access, because only user2 and group1 members

Throws:

Exception

user0_allowed_g_voter_all_755

public void user0_allowed_g_voter_all_755()
                                   throws Exception

user0 allowed because others have r-x access. Despite of user1 and group1 ownership over the table.

Throws:

Exception

user0_allowed_u0_student_all_755

public void user0_allowed_u0_student_all_755()
                                      throws Exception

user0 is 755 owner

Throws:

Exception

user0_allowed_u0_voter_all_755

public void user0_allowed_u0_voter_all_755()
                                    throws Exception

user0 is 755 owner

Throws:

Exception

user0_allowed_g_partitioned_student_u0_700

public void user0_allowed_g_partitioned_student_u0_700()
                                                throws Exception

user0 is 700 owner

Throws:

Exception

user0_forbidden_u1g1_student_all_755

public void user0_forbidden_u1g1_student_all_755()
                                          throws Exception

user0 doesn't have access to database db_u1g1_only

Throws:

Exception

user0_allowed_v_student_u0g0_750

public void user0_allowed_v_student_u0g0_750()
                                      throws Exception

Throws:

Exception

user0_forbidden_v_student_u1g1_750

public void user0_forbidden_v_student_u1g1_750()
                                        throws Exception

Throws:

Exception

user0_allowed_v_partitioned_student_u0g0_750

public void user0_allowed_v_partitioned_student_u0g0_750()
                                                  throws Exception

Throws:

Exception

user0_forbidden_v_partitioned_student_u1g1_750

public void user0_forbidden_v_partitioned_student_u1g1_750()
                                                    throws Exception

Throws:

Exception

user1_db_general_showTables

public void user1_db_general_showTables()
                                 throws Exception

Throws:

Exception

user1_db_u1g1_only_showTables

public void user1_db_u1g1_only_showTables()
                                   throws Exception

Throws:

Exception

user1_db_u0_only_showTables

public void user1_db_u0_only_showTables()
                                 throws Exception

Throws:

Exception

user1_db_general_infoSchema

public void user1_db_general_infoSchema()
                                 throws Exception

Throws:

Exception

user1_db_u1g1_only_infoSchema

public void user1_db_u1g1_only_infoSchema()
                                   throws Exception

Throws:

Exception

user1_db_u0_only_infoSchema

public void user1_db_u0_only_infoSchema()
                                 throws Exception

Throws:

Exception

user1_forbidden_g_student_u0_700

public void user1_forbidden_g_student_u0_700()
                                      throws Exception

user1 can't access, because user0 is 700 owner

Throws:

Exception

user1_allowed_g_student_u0g0_750

public void user1_allowed_g_student_u0g0_750()
                                      throws Exception

user1 allowed because he's a member of group0

Throws:

Exception

user1_allowed_g_student_all_755

public void user1_allowed_g_student_all_755()
                                     throws Exception

user1 allowed because Others have r-x access

Throws:

Exception

user1_allowed_g_voter_u1_700

public void user1_allowed_g_voter_u1_700()
                                  throws Exception

user1 is 700 owner

Throws:

Exception

user1_allowed_g_voter_u2g1_750

public void user1_allowed_g_voter_u2g1_750()
                                    throws Exception

user1 allowed because he's member of group1

Throws:

Exception

user1_allowed_g_voter_all_755

public void user1_allowed_g_voter_all_755()
                                   throws Exception

user1 is 755 owner

Throws:

Exception

user1_forbidden_u0_student_all_755

public void user1_forbidden_u0_student_all_755()
                                        throws Exception

here access restricted at db level, only user0 can access db_u0_only

Throws:

Exception

user1_forbidden_u0_voter_all_755

public void user1_forbidden_u0_voter_all_755()
                                      throws Exception

here access restricted at db level, only user0 can access db_u0_only

Throws:

Exception

user1_allowed_v_student_u0g0_750

public void user1_allowed_v_student_u0g0_750()
                                      throws Exception

Throws:

Exception

user1_allowed_v_student_u1g1_750

public void user1_allowed_v_student_u1g1_750()
                                      throws Exception

Throws:

Exception

user1_allowed_v_partitioned_student_u0g0_750

public void user1_allowed_v_partitioned_student_u0g0_750()
                                                  throws Exception

Throws:

Exception

user1_allowed_v_partitioned_student_u1g1_750

public void user1_allowed_v_partitioned_student_u1g1_750()
                                                  throws Exception

Throws:

Exception

user2_db_general_showTables

public void user2_db_general_showTables()
                                 throws Exception

Throws:

Exception

user2_db_u1g1_only_showTables

public void user2_db_u1g1_only_showTables()
                                   throws Exception

Throws:

Exception

user2_db_u0_only_showTables

public void user2_db_u0_only_showTables()
                                 throws Exception

Throws:

Exception

user2_db_general_infoSchema

public void user2_db_general_infoSchema()
                                 throws Exception

Throws:

Exception

user2_db_u1g1_only_infoSchema

public void user2_db_u1g1_only_infoSchema()
                                   throws Exception

Throws:

Exception

user2_db_u0_only_infoSchema

public void user2_db_u0_only_infoSchema()
                                 throws Exception

Throws:

Exception

user2_forbidden_g_student_u0_700

public void user2_forbidden_g_student_u0_700()
                                      throws Exception

user2 can't access, because user0 is 700 owner

Throws:

Exception

user2_forbidden_g_student_u0g0_750

public void user2_forbidden_g_student_u0g0_750()
                                        throws Exception

user2 can't access, only user0 and group0 members have access

Throws:

Exception

user2_allowed_g_student_all_755

public void user2_allowed_g_student_all_755()
                                     throws Exception

user2 is 755 owner

Throws:

Exception

user2_forbidden_g_voter_u1_700

public void user2_forbidden_g_voter_u1_700()
                                    throws Exception

user2 can't access, because user1 is 700 owner

Throws:

Exception

user2_allowed_g_voter_u2g1_750

public void user2_allowed_g_voter_u2g1_750()
                                    throws Exception

user2 is 750 owner

Throws:

Exception

user2_allowed_g_voter_all_755

public void user2_allowed_g_voter_all_755()
                                   throws Exception

user2 is member of group1

Throws:

Exception

user2_forbidden_u0_student_all_755

public void user2_forbidden_u0_student_all_755()
                                        throws Exception

here access restricted at db level, only user0 can access db_u0_only

Throws:

Exception

user2_forbidden_u0_voter_all_755

public void user2_forbidden_u0_voter_all_755()
                                      throws Exception

here access restricted at db level, only user0 can access db_u0_only

Throws:

Exception

user2_forbidden_v_student_u0g0_750

public void user2_forbidden_v_student_u0g0_750()
                                        throws Exception

Throws:

Exception

user2_allowed_v_student_u1g1_750

public void user2_allowed_v_student_u1g1_750()
                                      throws Exception

Throws:

Exception

user2_forbidden_v_partitioned_student_u0g0_750

public void user2_forbidden_v_partitioned_student_u0g0_750()
                                                    throws Exception

Throws:

Exception

user2_allowed_v_partitioned_student_u1g1_750

public void user2_allowed_v_partitioned_student_u1g1_750()
                                                  throws Exception

Throws:

Exception

shutdown

public static void shutdown()
                     throws Exception

Throws:

Exception