Trino uses Jdk11. To build the plugin on JDK11 .This commit includes
patch from RANGER-2317 and apache#71

This reverts commit 14385fa.

Signed-off-by: Mehul Parikh <[email protected]>

In TrinoClient the initConnection needs to decrypt the password which is
retrieved from ranger admin UI and pass it to trino properties before
initializing the connection. This will fix the autosuggestion bug in
trino plugin for ranger

From trino version 359 onwards, log4j and jackson-core jar file is necessary to be
present in classpath of ranger-trino plugin. Along with these changes
log4j.properties file is also necessary to be present in classpath for
the class RangerConfiguration.

As part of log4j zeroday RCE vulnerability fix

deprecated checkCanCreateTable is still being called
for CREATE TABLE statements without any properties specified

Incorporate following changes

Allow returning multiple filters and masks in SystemAccessControl
trinodb/trino@ae66a8b

Incorporated following changes to spi

Add access control for functions based on full qualified name
trinodb/trino@3553eab

Incorporate following changes

Introduce access control for functions based on FunctionKind
trinodb/trino#12544
trinodb/trino@12dda62

Incorporate following changes

Remove obsolete row filter and column mask methods
trinodb/trino#12998
trinodb/trino@ac8d2d4

Incorporate following changes

Add support for COMMENT ON VIEW statement
trinodb/trino#11359
trinodb/trino@241e0be

Incorporate following changes

Add access control for views with table functions
trinodb/trino#13944
trinodb/trino@7426d9c

Incorporate following changes

Pass properties when checking access for CREATE SCHEMA
trinodb/trino#15153
trinodb/trino@e16620f

Support ALTER COLUMN SET DATA TYPE statement
trinodb/trino#11608
trinodb/trino@ef94c0d

Incorporate following changes

Remove deprecated checkCanCreateSchema
trinodb/trino#15618
trinodb/trino@0fac087

Disallow multiple masks on a given column
trinodb/trino#15680
trinodb/trino@bdd1cb5

Incorporate following changes

Add security checks for CREATE/DROP catalog
trinodb/trino#13931
trinodb/trino@86ffb3e

Signed-off-by: Madhan Neethiraj <[email protected]>

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes

trinodb/trino#18911

Remove deprecated filterViewQueryOwnedBy overload
trinodb/trino@dc00946

Remove deprecated getColumnMasks variant
trinodb/trino@221a595

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes:

Add query start to SystemSecurityContext
trinodb/trino#19141
trinodb/trino@925f7e4

Distinguish SystemAccessControl methods not exposing query id
trinodb/trino#18973
trinodb/trino@1f46063

Signed-off-by: Utkarsh Saxena <[email protected]>

Signed-off-by: Utkarsh Saxena <[email protected]>

Ranger plugin access control class is injected via classloader, its
logger needs to go through trino's logger.

More details:

facebookarchive/swift#287 (comment)

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes:

Redesign function access control methods
trinodb/trino@051e53c

Remove function kind from function security checks
trinodb/trino@77e7ac5

Add security for function listing
trinodb/trino@f6a6c01

Remove unused checkCanGrantExecuteFunctionPrivilege method
trinodb/trino@7a9abbd

Convert ViewExpression constructor to a builder
trinodb/trino@0b5e8b3

Signed-off-by: Utkarsh Saxena <[email protected]>

Following not implemented:

Add CREATE FUNCTION and DROP FUNCTION
trinodb/trino@b892a70

Signed-off-by: Utkarsh Saxena <[email protected]>

Signed-off-by: Utkarsh Saxena <[email protected]>

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes:

Add syntax and APIs generalizing privilege grants
trinodb/trino@b5988bf

Signed-off-by: Utkarsh Saxena <[email protected]>

Not implemented following changes as they are not relevant:

Fix memory leak when loading SystemAccessControl in tests
trinodb/trino@995763b

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes:

Add QueryId to SystemAccessControl#checkCanExecuteQuery
trinodb/trino@7a2a4e8

Add QueryId to SystemAccessControl#checkCanSetSystemSessionProperty
trinodb/trino@c2f9cbb

Signed-off-by: Utkarsh Saxena <[email protected]>

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes:

Add SHOW CREATE FUNCTION
trinodb/trino@aaff6b5

Signed-off-by: Utkarsh Saxena <[email protected]>

Incorporates following changes:

Add access control SPI function for table column masks
trinodb/trino@5da64a9

Signed-off-by: Utkarsh Saxena <[email protected]>

Signed-off-by: Utkarsh Saxena <[email protected]>