# LakeFormation资源权限支持列表与策略项
 #### LakeFormation SQL资源权限支持列表
DLI支持SQL资源鉴权的操作列表请参考[数据权限列表](https://support.huaweicloud.com/sqlref-spark-dli/dli_08_0140.html)。
LakeFormation SQL资源权限支持列表请参考[表1]。
 表1LakeFormation SQL资源权限支持列表 
| 资源类型       | 权限类型         |
|:---|:---|
| Database   | ALL          |
| Database   | ALTER        |
| Database   | DROP         |
| Database   | DESCRIBE     |
| Database   | LIST_TABLE   |
| Database   | LIST_FUNC    |
| Database   | CREATE_TABLE |
| Database   | CREATE_FUNC  |
| Table/View | ALL          |
| Table/View | ALTER        |
| Table/View | DROP         |
| Table/View | DESCRIBE     |
| Table/View | UPDATE       |
| Table/View | INSERT       |
| Table/View | SELECT       |
| Table/View | DELETE       |
| Column     | SELECT       |
| Function   | ALL          |
| Function   | ALTER        |
| Function   | DROP         |
| Function   | DESCRIBE     |
| Function   | EXEC         |
   
#### LakeFormation权限策略（Spark）
表2LakeFormation权限策略 
| 类型           | SQL语句                                                                 | 元数据IAM鉴权权限                                                                                                                                                    | SQL资源鉴权权限                                                                                                                                                                                                                  |
|:---|:---|:---|:---|
| DDL语句        | ALTER DATABASE                                                        | database:describe database:alter                                                                                               | database:DESCRIBE database:ALTER                                                                                                                                                              |
| DDL语句        | ALTER TABLE                                                           | database:describe table:describe table:alter database:create           | database:DESCRIBE table:DESCRIBE table:ALTER database:CREATE_TABLE column:SELECT或table:SELECT |
| DDL语句        | ALTER VIEW                                                            | database:describe table:describe table:alter                                                    | database:DESCRIBE table:DESCRIBE column:SELECT table:ALTER                                                                     |
| DDL语句        | CREATE DATABASE                                                       | database:describe database:create                                                                                                | database:DESCRIBE catalog:CREATE_DATABASE                                                                                                                                                     |
| DDL语句        | CREATE OR REPLACE FUNCTION (CREATE)                                   | database:describe function:create                                                                                               | database:DESCRIBE database:CREATE_FUNC                                                                                                                                                       |
| DDL语句        | CREATE OR REPLACE FUNCTION (REPLACE)                                  | database:describe function:describe function:alter                                                 | database:CREATE_FUNC database:DESCRIBE function:DESCRIBE function:ALTER                                                        |
| DDL语句        | CREATE TABLE                                                          | database:describe table:describe table:create                                                       | database:DESCRIBE database:CREATE_TABLE                                                                                                                                                      |
| DDL语句        | CREATE VIEW                                                           | database:describe table:describe table:drop table:create            | database:CREATE_TABLE table:DESCRIBE（source\\target） table:DROP(target) column:SELECT                                       |
| DDL语句        | DROP DATABASE                                                         | database:describe database:drop                                                                                                 | database:DESCRIBE database:DROP                                                                                                                                                             |
| DDL语句        | DROP FUNCTION                                                         | database:describe function:describe function:drop                                                  | database:DESCRIBE function:DESCRIBE function:DROP                                                                                                            |
| DDL语句        | DROP TABLE                                                            | database:describe table:describe credential:describe table:drop    | database:DESCRIBE table:DESCRIBE table:DROP                                                                                                                      |
| DDL语句        | DROP VIEW                                                             | database:describe table:describe table:drop                                                      | database:DESCRIBE table:DESCRIBE(target\\source) table:DROP(target)                                                                                          |
| DDL语句        | REPAIR TABLE                                                          | database:describe table:describe credential:describe table:alter    | database:DESCRIBE table:DESCRIBE table:ALTER table:SELECT                                                                      |
| DDL语句        | TRUNCATE TABLE                                                        | database:describe table:describe table:alter                                                    | database:DESCRIBE table:DESCRIBE table:SELECT table:UPDATE                                                                           |
| DML语句        | INSERT TABLE     | database:describe table:describe table:alter credential:describe     | database:DESCRIBE table:DESCRIBE table:ALTER table:INSERT column:SELECT或table:SELECT            |
| DML语句        | LOAD DATA                    | database:describe table:describe credential:describe                                           | database:DESCRIBE table:DESCRIBE table:UPDATE table:ALTER table:SELECT                            |
| DR语句         | SELECT                                                                | database:describe table:describe credential:describe                                             | database:DESCRIBE table:DESCRIBE column:SELECT                                                                                                                   |
| DR语句         | EXPLAIN                                                               | 取决于执行sql                                                                                                                                                      | 取决于执行sql                                                                                                                                                                                                                   |
| Auxiliary 语句 | ANALYZE TABLE                                                         | database:describe table:describe credential:describe table:alter | database:DESCRIBE table:DESCRIBE table:SELECT table:ALTER                                                                  |
| Auxiliary 语句 | DESCRIBE DATABASE                                                     | database:describe                                                                                                                                             | database:DESCRIBE                                                                                                                                                                                                          |
| Auxiliary 语句 | DESCRIBE FUNCTION                | database:describe function:describe                                                                                            | database:DESCRIBE function:DESCRIBE                                                                                                                                                         |
| Auxiliary 语句 | DESCRIBE QUERY                     | database:describe table:describe                                                                                                | database:DESCRIBE table:DESCRIBE table:SELECT                                                                                                                     |
| Auxiliary 语句 | DESCRIBE TABLE                                                        | database:describe table:describe                                                                                                | database:DESCRIBE table:DESCRIBE                                                                                                                                                             |
| Auxiliary 语句 | REFRESH TABLE                                                         | database:describe table:describe credential:describe                                              | database:DESCRIBE table:DESCRIBE table:SELECT                                                                                                                |
| Auxiliary 语句 | REFRESH FUNCTION                                                      | database:describe function:describe                                                                                            | database:DESCRIBE function:DESCRIBE                                                                                                                                                          |
| Auxiliary 语句 | SHOW COLUMNS                                                          | database:describe table:describe                                                                                               | database:DESCRIBE table:DESCRIBE                                                                                                                                                              |
| Auxiliary 语句 | SHOW CREATE TABLE                | database:describe table:describe                                                                                                | database:DESCRIBE table:DESCRIBE                                                                                                                                                               |
| Auxiliary 语句 | SHOW DATABASES                     | database:describe                                                                                                         | catalog:LIST_DATABASE database:DESCRIBE                                                                                                                                                       |
| Auxiliary 语句 | SHOW FUNCTIONS                     | database:describe function:describe                                                                                              | database:DESCRIBE                                                                                                                                                                      |
| Auxiliary 语句 | SHOW PARTITIONS                   | database:describe table:describe                                                                                              | database:DESCRIBE table:DESCRIBE                                                                                                                                                             |
| Auxiliary 语句 | SHOW TABLE EXTENDED                                                   | database:describe table:describe                                                                                               | catalog:LIST_DATABASE database:DESCRIBE table:DESCRIBE database:LIST_TABLE                                                          |
| Auxiliary 语句 | SHOW TABLES                  | database:describe table:describe                                                                                                 | catalog:LIST_DATABASE database:LIST_TABLE database:DESCRIBE                                                                                                    |
| Auxiliary 语句 | SHOW TBLPROPERTIES                | database:describe table:describe                                                                                                 | database:DESCRIBE table:DESCRIBE                                                                                                                                                             |
| Auxiliary 语句 | SHOW VIEWS                  | database:describe table:describe                                                           | catalog:LIST_DATABASE database:LIST_TABLE database:DESCRIBE                                                                                                   |