rtrivedi12 commented on code in PR #6508: URL: https://github.com/apache/hive/pull/6508#discussion_r3338567770
########## ql/src/test/org/apache/hadoop/hive/ql/security/authorization/plugin/TestViewPartitionPrivilegeObjects.java: ########## @@ -0,0 +1,220 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +package org.apache.hadoop.hive.ql.security.authorization.plugin; + +import org.apache.hadoop.hive.conf.HiveConf; +import org.apache.hadoop.hive.conf.HiveConf.ConfVars; +import org.apache.hadoop.hive.conf.HiveConfForTest; +import org.apache.hadoop.hive.metastore.utils.TestTxnDbUtil; +import org.apache.hadoop.hive.ql.Driver; +import org.apache.hadoop.hive.ql.lockmgr.DbTxnManager; +import org.apache.hadoop.hive.ql.security.HiveAuthenticationProvider; +import org.apache.hadoop.hive.ql.session.SessionState; +import org.apache.hadoop.security.UserGroupInformation; +import org.junit.AfterClass; +import org.junit.Assert; +import org.junit.Before; +import org.junit.BeforeClass; +import org.junit.Test; +import org.mockito.ArgumentCaptor; +import org.mockito.Mockito; + +import java.util.Collections; +import java.util.List; + +import static org.mockito.ArgumentMatchers.any; +import static org.mockito.Mockito.atLeastOnce; +import static org.mockito.Mockito.reset; +import static org.mockito.Mockito.verify; + +/** + * Tests the {@link HivePrivilegeObject} inputs passed to {@link HiveAuthorizer#checkPrivileges} + * for view queries over partitioned base tables. + */ +public class TestViewPartitionPrivilegeObjects { + + static final String DATA_DB = "datadb"; + static final String VIEW_DB = "viewdb"; + static final String BASE_TABLE = "t1"; + static final String VIEW_NAME = "v1"; + static final String TARGET_TABLE = "insert_target"; + + protected static HiveConf conf; + protected static Driver driver; + static HiveAuthorizer mockedAuthorizer; + + static class MockedHiveAuthorizerFactory implements HiveAuthorizerFactory { + @Override + public HiveAuthorizer createHiveAuthorizer(HiveMetastoreClientFactory metastoreClientFactory, + HiveConf conf, HiveAuthenticationProvider authenticator, HiveAuthzSessionContext ctx) { + TestViewPartitionPrivilegeObjects.mockedAuthorizer = Mockito.mock(HiveAuthorizer.class); + return TestViewPartitionPrivilegeObjects.mockedAuthorizer; + } + } + + @BeforeClass + public static void beforeClass() throws Exception { + UserGroupInformation.setLoginUser(UserGroupInformation.createRemoteUser("hive")); + conf = new HiveConfForTest(TestViewPartitionPrivilegeObjects.class); + conf.setVar(ConfVars.HIVE_AUTHORIZATION_MANAGER, MockedHiveAuthorizerFactory.class.getName()); + conf.setBoolVar(ConfVars.HIVE_AUTHORIZATION_ENABLED, true); + conf.setBoolVar(ConfVars.HIVE_SERVER2_ENABLE_DOAS, false); + conf.setBoolVar(ConfVars.HIVE_SUPPORT_CONCURRENCY, true); + conf.setVar(ConfVars.HIVE_TXN_MANAGER, DbTxnManager.class.getName()); + conf.setVar(ConfVars.HIVE_MAPRED_MODE, "nonstrict"); + conf.setVar(ConfVars.DYNAMIC_PARTITIONING_MODE, "nonstrict"); + conf.setVar(ConfVars.HIVE_FETCH_TASK_CONVERSION, "none"); + conf.setVar(ConfVars.HIVE_EXECUTION_ENGINE, "mr"); + + TestTxnDbUtil.prepDb(conf); + SessionState.start(conf); + driver = new Driver(conf); + + runCmd("CREATE DATABASE IF NOT EXISTS " + DATA_DB); + runCmd("CREATE TABLE IF NOT EXISTS " + DATA_DB + "." + BASE_TABLE + + " (i INT) PARTITIONED BY (dept STRING)"); + runCmd("ALTER TABLE " + DATA_DB + "." + BASE_TABLE + " ADD IF NOT EXISTS PARTITION (dept='a')"); + runCmd("CREATE DATABASE IF NOT EXISTS " + VIEW_DB); + runCmd("CREATE VIEW IF NOT EXISTS " + VIEW_DB + "." + VIEW_NAME + + " AS SELECT * FROM " + DATA_DB + "." + BASE_TABLE); + // Target table used by INSERT OVERWRITE tests — non-partitioned to keep DML simple + runCmd("CREATE TABLE IF NOT EXISTS " + DATA_DB + "." + TARGET_TABLE + + " (i INT, dept STRING)"); Review Comment: @difin Thanks for the review! I see that existing tests in this package also use '+' for SQL commands and it makes the command more readable instead of `String.format(..)`. I have modified test class to reduce concatenations. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
