Package org.apache.polaris.persistence.nosql.authz.api

Interface Privilege

All Known Subinterfaces:

Privilege.AlternativePrivilege, Privilege.CompositePrivilege, Privilege.IndividualPrivilege, Privilege.InheritablePrivilege, Privilege.NonInheritablePrivilege

public interface Privilege

Represents an individual or composite privilege.

Composite privileges consist of multiple individual privileges.

External representations, for example, when serialized as JSON, prefer composite privileges over individual ones. This means that if a privilege set contains all privileges included in a composite privilege, only the composite privilege is serialized. If multiple composite privileges match, all matching ones are serialized.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static interface	Privilege.AlternativePrivilege	An "alternative privilege" represents a group of individual privileges.
static interface	Privilege.CompositePrivilege	A composite privilege represents a group of individual privileges.
static interface	Privilege.IndividualPrivilege
static interface	Privilege.InheritablePrivilege	Inheritable privileges apply to the checked entity and its child entities, if applied to the entity's ACL or any of its parents' ACLs.
static interface	Privilege.NonInheritablePrivilege	Non-inheritable privileges apply only to the checked entity if those are present in the entity's ACL.

Method Summary

Modifier and Type	Method	Description
default boolean	mustMatchAll()
String	name()
Set<Privilege.IndividualPrivilege>	resolved()

Method Details

name

String name()

resolved

Set<Privilege.IndividualPrivilege> resolved()

mustMatchAll

default boolean mustMatchAll()