Data Permissions List

Table 1 describes the SQL statement permission matrix in DLI in terms of permissions on databases, tables, and roles.

Table 1 Permission matrix

Category	SQL statement	Permission	Description
Database	DROP DATABASE db1	The DROP_DATABASE permission of database.db1	-
	CREATE TABLE tb1(...)	The CREATE_TABLE permission of database.db1	-
	CREATE VIEW v1	The CREATE_VIEW permission of database.db1	-
	EXPLAIN query	The EXPLAIN permission of database.db1	Depending on the permissions required by query statements.
Table	SHOW CREATE TABLE tb1	The SHOW_CREATE_TABLE permission of database.db1.tables.tb1	-
	DESCRIBE [EXTENDED|FORMATTED] tb1	The DESCRIBE_TABLE permission of databases.db1.tables.tb1	-
	DROP TABLE [IF EXISTS] tb1	The DROP_TABLE permission of database.db1.tables.tb1	-
	SELECT * FROM tb1	The SELECT permission of database.db1.tables.tb1	-
	SELECT count(*) FROM tb1	The SELECT permission of database.db1.tables.tb1	-
	SELECT * FROM view1	The SELECT permission of database.db1.tables.view1	-
	SELECT count(*) FROM view1	The SELECT permission of database.db1.tables.view1	-
	LOAD DLI TABLE	The INSERT_INTO_TABLE permission of database.db1.tables.tb1	-
	INSERT INTO TABLE	The INSERT_INTO_TABLE permission of database.db1.tables.tb1	-
	INSERT OVERWRITE TABLE	The INSERT_OVERWRITE_TABLE permission of database.db1.tables.tb1	-
	ALTER TABLE ADD COLUMNS	The ALTER_TABLE_ADD_COLUMNS permission of database.db1.tables.tb1	-
	ALTER TABLE RENAME	The ALTER_TABLE_RENAME permission of database.db1.tables.tb1	-
ROLE&PRIVILEGE	CREATE ROLE	The CREATE_ROLE permission of db	-
	DROP ROLE	The DROP_ROLE permission of db	-
	SHOW ROLES	The SHOW_ROLES permission of db	-
	GRANT ROLES	The GRANT_ROLE permission of db	-
	REVOKE ROLES	The REVOKE_ROLE permission of db	-
	GRANT PRIVILEGE	The GRANT_PRIVILEGE permission of db or table	-
	REVOKE PRIVILEGE	The REVOKE_PRIVILEGE permission of db or table	-
	SHOW GRANT	The SHOW_GRANT permission of db or table	-

For privilege granting or revocation on databases and tables, DLI supports the following permissions:

• Permissions that can be assigned or revoked on databases are as follows:

  • DROP_DATABASE (Deleting a database)

  • CREATE_TABLE (Creating a table)

  • CREATE_VIEW (Creating a view)

  • EXPLAIN (Explaining a SQL statement as an execution plan)

  • CREATE_ROLE (Creating a role)

  • DROP_ROLE (Deleting a role)

  • SHOW_ROLES (Displaying a role)

  • GRANT_ROLE (Bounding a role)

  • REVOKE_ROLE (Unbinding a role)

  • DESCRIBE_TABLE (Describing a table)

  • DROP_TABLE (Deleting a table)

  • Select (Querying a table)

  • INSERT_INTO_TABLE (Inserting)

  • INSERT_OVERWRITE_TABLE (Overwriting)

  • GRANT_PRIVILEGE (Granting permissions to a database)

  • REVOKE_PRIVILEGE (Revoking permissions from a database)

  • SHOW_PRIVILEGES (Viewing the database permissions of other users)

  • ALTER_TABLE_ADD_PARTITION (Adding partitions to a partitioned table)

  • ALTER_TABLE_DROP_PARTITION (Deleting partitions from a partitioned table)

  • ALTER_TABLE_RENAME_PARTITION (Renaming table partitions)

  • ALTER_TABLE_RECOVER_PARTITION (Restoring table partitions)

  • ALTER_TABLE_SET_LOCATION (Setting the path of a partition)

  • SHOW_PARTITIONS (Displaying all partitions)

  • SHOW_CREATE_TABLE (Viewing table creation statements)

• Permissions that can be assigned or revoked on tables are as follows:

  • DESCRIBE_TABLE (Describing a table)

  • DROP_TABLE (Deleting a table)

  • Select (Querying a table)

  • INSERT_INTO_TABLE (Inserting)

  • INSERT_OVERWRITE_TABLE (Overwriting)

  • GRANT_PRIVILEGE (Granting permissions to a table)

  • REVOKE_PRIVILEGE (Revoking permissions from a table)

  • SHOW_PRIVILEGES (Viewing the table permissions of other users)

  • ALTER_TABLE_ADD_COLUMNS (Adding a column)

  • ALTER_TABLE_RENAME (Renaming a table)

  • ALTER_TABLE_ADD_PARTITION (Adding partitions to a partitioned table)

  • ALTER_TABLE_DROP_PARTITION (Deleting partitions from a partitioned table)

  • ALTER_TABLE_RENAME_PARTITION (Renaming table partitions)

  • ALTER_TABLE_RECOVER_PARTITION (Restoring table partitions)

  • ALTER_TABLE_SET_LOCATION (Setting the path of a partition)

  • SHOW_PARTITIONS (Displaying all partitions)

  • SHOW_CREATE_TABLE (Viewing table creation statements)

last updated: 2024-12-10 15:25 UTC - commit: 9e0ebe18fe0b43010decd2c132af9f5362beb29e