How to use

createCmdForRevokeGMPrivilege

method

in

org.apache.sentry.provider.db.log.util.CommandUtil

public JsonLogEntity createJsonLogEntity(
  org.apache.sentry.api.generic.thrift.TAlterSentryRoleRevokePrivilegeRequest request,
  org.apache.sentry.api.generic.thrift.TAlterSentryRoleRevokePrivilegeResponse response,
  Configuration conf) {
 GMAuditMetadataLogEntity gmamle = createCommonGMAMLE(conf, response.getStatus(),
   request.getRequestorUserName(), request.getClass().getName(), request.getComponent());
 if (request.getPrivilege() != null) {
  List<TAuthorizable> authorizables = request.getPrivilege().getAuthorizables();
  Map<String, String> privilegesMap = new LinkedHashMap<String, String>();
  if (authorizables != null) {
   for (TAuthorizable authorizable : authorizables) {
    privilegesMap.put(authorizable.getType(), authorizable.getName());
   }
  }
  gmamle.setPrivilegesMap(privilegesMap);
 }
 gmamle.setOperationText(CommandUtil.createCmdForRevokeGMPrivilege(request));
 return gmamle;
}

public JsonLogEntity createJsonLogEntity(
  org.apache.sentry.provider.db.generic.service.thrift.TAlterSentryRoleRevokePrivilegeRequest request,
  org.apache.sentry.provider.db.generic.service.thrift.TAlterSentryRoleRevokePrivilegeResponse response,
  Configuration conf) {
 GMAuditMetadataLogEntity gmamle = createCommonGMAMLE(conf, response.getStatus(),
   request.getRequestorUserName(), request.getClass().getName(), request.getComponent());
 if (request.getPrivilege() != null) {
  List<TAuthorizable> authorizables = request.getPrivilege().getAuthorizables();
  Map<String, String> privilegesMap = new LinkedHashMap<String, String>();
  if (authorizables != null) {
   for (TAuthorizable authorizable : authorizables) {
    privilegesMap.put(authorizable.getType(), authorizable.getName());
   }
  }
  gmamle.setPrivilegesMap(privilegesMap);
 }
 gmamle.setOperationText(CommandUtil.createCmdForRevokeGMPrivilege(request));
 return gmamle;
}

@Test
public void testCreateCmdForGrantOrRevokeGMPrivilege1() {
 org.apache.sentry.api.generic.thrift.TAlterSentryRoleGrantPrivilegeRequest grantRequest = getGrantGMPrivilegeRequest();
 org.apache.sentry.api.generic.thrift.TAlterSentryRoleRevokePrivilegeRequest revokeRequest = getRevokeGMPrivilegeRequest();
 org.apache.sentry.api.generic.thrift.TSentryPrivilege privilege = getGMPrivilege();
 grantRequest.setPrivilege(privilege);
 revokeRequest.setPrivilege(privilege);
 String createGrantPrivilegeCmdResult = CommandUtil.createCmdForGrantGMPrivilege(grantRequest);
 String createGrantPrivilegeCmdExcepted = "GRANT ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 TO ROLE testRole";
 String createRevokePrivilegeCmdResult = CommandUtil
   .createCmdForRevokeGMPrivilege(revokeRequest);
 String createRevokePrivilegeCmdExcepted = "REVOKE ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 FROM ROLE testRole";
 assertEquals(createGrantPrivilegeCmdExcepted, createGrantPrivilegeCmdResult);
 assertEquals(createRevokePrivilegeCmdExcepted, createRevokePrivilegeCmdResult);
}

@Test
public void testCreateCmdForGrantOrRevokeGMPrivilege1() {
 org.apache.sentry.provider.db.generic.service.thrift.TAlterSentryRoleGrantPrivilegeRequest grantRequest = getGrantGMPrivilegeRequest();
 org.apache.sentry.provider.db.generic.service.thrift.TAlterSentryRoleRevokePrivilegeRequest revokeRequest = getRevokeGMPrivilegeRequest();
 org.apache.sentry.provider.db.generic.service.thrift.TSentryPrivilege privilege = getGMPrivilege();
 grantRequest.setPrivilege(privilege);
 revokeRequest.setPrivilege(privilege);
 String createGrantPrivilegeCmdResult = CommandUtil.createCmdForGrantGMPrivilege(grantRequest);
 String createGrantPrivilegeCmdExcepted = "GRANT ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 TO ROLE testRole";
 String createRevokePrivilegeCmdResult = CommandUtil
   .createCmdForRevokeGMPrivilege(revokeRequest);
 String createRevokePrivilegeCmdExcepted = "REVOKE ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 FROM ROLE testRole";
 assertEquals(createGrantPrivilegeCmdExcepted, createGrantPrivilegeCmdResult);
 assertEquals(createRevokePrivilegeCmdExcepted, createRevokePrivilegeCmdResult);
}

@Test
public void testCreateCmdForGrantOrRevokeGMPrivilege2() {
 org.apache.sentry.provider.db.generic.service.thrift.TAlterSentryRoleGrantPrivilegeRequest grantRequest = getGrantGMPrivilegeRequest();
 org.apache.sentry.provider.db.generic.service.thrift.TAlterSentryRoleRevokePrivilegeRequest revokeRequest = getRevokeGMPrivilegeRequest();
 org.apache.sentry.provider.db.generic.service.thrift.TSentryPrivilege privilege = getGMPrivilege();
 privilege
   .setGrantOption(org.apache.sentry.provider.db.generic.service.thrift.TSentryGrantOption.TRUE);
 grantRequest.setPrivilege(privilege);
 revokeRequest.setPrivilege(privilege);
 String createGrantPrivilegeCmdResult = CommandUtil.createCmdForGrantGMPrivilege(grantRequest);
 String createGrantPrivilegeCmdExcepted = "GRANT ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 TO ROLE testRole WITH GRANT OPTION";
 String createRevokePrivilegeCmdResult = CommandUtil
   .createCmdForRevokeGMPrivilege(revokeRequest);
 String createRevokePrivilegeCmdExcepted = "REVOKE ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 FROM ROLE testRole WITH GRANT OPTION";
 assertEquals(createGrantPrivilegeCmdExcepted, createGrantPrivilegeCmdResult);
 assertEquals(createRevokePrivilegeCmdExcepted, createRevokePrivilegeCmdResult);
}

@Test
public void testCreateCmdForGrantOrRevokeGMPrivilege2() {
 org.apache.sentry.api.generic.thrift.TAlterSentryRoleGrantPrivilegeRequest grantRequest = getGrantGMPrivilegeRequest();
 org.apache.sentry.api.generic.thrift.TAlterSentryRoleRevokePrivilegeRequest revokeRequest = getRevokeGMPrivilegeRequest();
 org.apache.sentry.api.generic.thrift.TSentryPrivilege privilege = getGMPrivilege();
 privilege
   .setGrantOption(org.apache.sentry.api.generic.thrift.TSentryGrantOption.TRUE);
 grantRequest.setPrivilege(privilege);
 revokeRequest.setPrivilege(privilege);
 String createGrantPrivilegeCmdResult = CommandUtil.createCmdForGrantGMPrivilege(grantRequest);
 String createGrantPrivilegeCmdExcepted = "GRANT ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 TO ROLE testRole WITH GRANT OPTION";
 String createRevokePrivilegeCmdResult = CommandUtil
   .createCmdForRevokeGMPrivilege(revokeRequest);
 String createRevokePrivilegeCmdExcepted = "REVOKE ACTION ON resourceType1 resourceName1 resourceType2 resourceName2 FROM ROLE testRole WITH GRANT OPTION";
 assertEquals(createGrantPrivilegeCmdExcepted, createGrantPrivilegeCmdResult);
 assertEquals(createRevokePrivilegeCmdExcepted, createRevokePrivilegeCmdResult);
}