Skip to content

UnityCatalogAuthorizer¶

UnityCatalogAuthorizer is an abstraction of authorizers.

Contract (Subset)¶

Authorize¶

boolean authorize(
  UUID principal,
  UUID resource,
  Privileges action)

See:

JCasbinAuthorizer

Used when:

PermissionService is requested for the authorizations
UnityAccessEvaluator is created

Authorize All Privileges¶

boolean authorizeAll(
  UUID principal,
  UUID resource,
  Privileges... actions)

See:

JCasbinAuthorizer

Used when:

UnityAccessEvaluator is created

Authorize Any Privileges¶

boolean authorizeAny(
  UUID principal,
  UUID resource,
  Privileges... actions)

See:

JCasbinAuthorizer

Used when:

UnityAccessEvaluator is created

Grant Authorization¶

boolean grantAuthorization(
  UUID principal,
  UUID resource,
  Privileges action)

See:

JCasbinAuthorizer

Used when:

UnityAccessUtil is requested to initializeAdmin
CatalogService is requested to initializeAuthorizations
FunctionService is requested to initializeAuthorizations
ModelService is requested to initializeAuthorizations
PermissionService is requested to updateAuthorization
SchemaService is requested to createAuthorizations
TableService is requested to initializeAuthorizations
VolumeService is requested to initializeAuthorizations

Implementations¶