[apache#2239] feat(server): Add the role operation (apache#2956)

### What changes were proposed in this pull request?

Add the operations for the role.

### Why are the changes needed?


Fix: apache#2239 

### Does this PR introduce _any_ user-facing change?
Yes,  I will add the open api and the document in the later pr.

### How was this patch tested?
Add a new UT.

Co-authored-by: Heng Qin <[email protected]>

api/src/main/java/com/datastrato/gravitino/authorization/SecurableObjects.java

@@ -4,11 +4,16 @@
  */
 package com.datastrato.gravitino.authorization;
 
+import com.google.common.base.Splitter;
+import com.google.common.collect.Iterables;
 import java.util.Objects;
+import org.apache.commons.lang3.StringUtils;
 
 /** The helper class for {@link SecurableObject}. */
 public class SecurableObjects {
 
+  private static final Splitter DOT = Splitter.on('.');
+
   /**
    * Create the {@link SecurableObject} with the given names.
    *
@@ -186,4 +191,23 @@ public boolean equals(Object other) {
           && Objects.equals(name, otherSecurableObject.name());
     }
   }
+
+  /**
+   * Create a {@link SecurableObject} from the given identifier string.
+   *
+   * @param securableObjectIdentifier The identifier string
+   * @return The created {@link SecurableObject}
+   */
+  public static SecurableObject parse(String securableObjectIdentifier) {
+    if ("*".equals(securableObjectIdentifier)) {
+      return SecurableObjects.ofAllCatalogs();
+    }
+
+    if (StringUtils.isBlank(securableObjectIdentifier)) {
+      throw new IllegalArgumentException("securable object identifier can't be blank");
+    }
+
+    Iterable<String> parts = DOT.split(securableObjectIdentifier);
+    return SecurableObjects.of(Iterables.toArray(parts, String.class));
+  }
 }

common/src/main/java/com/datastrato/gravitino/dto/authorization/RoleDTO.java

@@ -0,0 +1,231 @@
+/*
+ * Copyright 2024 Datastrato Pvt Ltd.
+ * This software is licensed under the Apache License version 2.
+ */
+package com.datastrato.gravitino.dto.authorization;
+
+import com.datastrato.gravitino.Audit;
+import com.datastrato.gravitino.authorization.Privilege;
+import com.datastrato.gravitino.authorization.Privileges;
+import com.datastrato.gravitino.authorization.Role;
+import com.datastrato.gravitino.authorization.SecurableObject;
+import com.datastrato.gravitino.authorization.SecurableObjects;
+import com.datastrato.gravitino.dto.AuditDTO;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.google.common.base.Preconditions;
+import java.util.Collections;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.stream.Collectors;
+import javax.annotation.Nullable;
+import org.apache.commons.collections4.CollectionUtils;
+import org.apache.commons.lang3.StringUtils;
+
+/** Represents a Role Data Transfer Object (DTO). */
+public class RoleDTO implements Role {
+
+  @JsonProperty("name")
+  private String name;
+
+  @JsonProperty("audit")
+  private AuditDTO audit;
+
+  @Nullable
+  @JsonProperty("properties")
+  private Map<String, String> properties;
+
+  @JsonProperty("privileges")
+  private List<String> privileges;
+
+  @JsonProperty("securableObject")
+  private String securableObject;
+
+  /** Default constructor for Jackson deserialization. */
+  protected RoleDTO() {}
+
+  /**
+   * Creates a new instance of RoleDTO.
+   *
+   * @param name The name of the Role DTO.
+   * @param properties The properties of the Role DTO.
+   * @param privileges The privileges of the Role DTO.
+   * @param securableObject The securable object of the Role DTO.
+   * @param audit The audit information of the Role DTO.
+   */
+  protected RoleDTO(
+      String name,
+      Map<String, String> properties,
+      List<String> privileges,
+      String securableObject,
+      AuditDTO audit) {
+    this.name = name;
+    this.audit = audit;
+    this.properties = properties;
+    this.privileges = privileges;
+    this.securableObject = securableObject;
+  }
+
+  /** @return The name of the Role DTO. */
+  @Override
+  public String name() {
+    return name;
+  }
+
+  /**
+   * The properties of the role. Note, this method will return null if the properties are not set.
+   *
+   * @return The properties of the role.
+   */
+  @Override
+  public Map<String, String> properties() {
+    return properties;
+  }
+
+  /**
+   * The privileges of the role. All privileges belong to one resource. For example: If the resource
+   * is a table, the privileges could be `READ TABLE`, `WRITE TABLE`, etc. If a schema has the
+   * privilege of `LOAD TABLE`. It means the role can all tables of the schema.
+   *
+   * @return The privileges of the role.
+   */
+  @Override
+  public List<Privilege> privileges() {
+    return privileges.stream().map(Privileges::fromString).collect(Collectors.toList());
+  }
+
+  /**
+   * The resource represents a special kind of entity with a unique identifier. All resources are
+   * organized by tree structure. For example: If the resource is a table, the identifier may be
+   * `catalog1.schema1.table1`.
+   *
+   * @return The securable object of the role.
+   */
+  @Override
+  public SecurableObject securableObject() {
+    return SecurableObjects.parse(securableObject);
+  }
+
+  /** @return The audit information of the Role DTO. */
+  @Override
+  public Audit auditInfo() {
+    return audit;
+  }
+
+  /**
+   * Creates a new Builder for constructing a Role DTO.
+   *
+   * @return A new Builder instance.
+   */
+  public static Builder builder() {
+    return new Builder();
+  }
+
+  /**
+   * Builder class for constructing a RoleDTO instance.
+   *
+   * @param <S> The type of the builder instance.
+   */
+  public static class Builder<S extends Builder> {
+
+    /** The name of the role. */
+    protected String name;
+
+    /** The privileges of the role. */
+    protected List<Privilege> privileges = Collections.emptyList();
+
+    /** The audit information of the role. */
+    protected AuditDTO audit;
+
+    /** The properties of the role. */
+    protected Map<String, String> properties;
+
+    /** The securable object of the role. */
+    protected SecurableObject securableObject;
+
+    /**
+     * Sets the name of the role.
+     *
+     * @param name The name of the role.
+     * @return The builder instance.
+     */
+    public S withName(String name) {
+      this.name = name;
+      return (S) this;
+    }
+
+    /**
+     * Sets the privileges of the role.
+     *
+     * @param privileges The privileges of the role.
+     * @return The builder instance.
+     */
+    public S withPrivileges(List<Privilege> privileges) {
+      if (privileges != null) {
+        this.privileges = privileges;
+      }
+
+      return (S) this;
+    }
+
+    /**
+     * Sets the properties of the role.
+     *
+     * @param properties The properties of the role.
+     * @return The builder instance.
+     */
+    public S withProperties(Map<String, String> properties) {
+      if (properties != null) {
+        this.properties = properties;
+      }
+
+      return (S) this;
+    }
+
+    /**
+     * Sets the securable object of the role.
+     *
+     * @param securableObject The securableObject of the role.
+     * @return The builder instance.
+     */
+    public S withSecurableObject(SecurableObject securableObject) {
+      this.securableObject = securableObject;
+      return (S) this;
+    }
+
+    /**
+     * Sets the audit information of the role.
+     *
+     * @param audit The audit information of the role.
+     * @return The builder instance.
+     */
+    public S withAudit(AuditDTO audit) {
+      this.audit = audit;
+      return (S) this;
+    }
+
+    /**
+     * Builds an instance of RoleDTO using the builder's properties.
+     *
+     * @return An instance of RoleDTO.
+     * @throws IllegalArgumentException If the name or audit are not set.
+     */
+    public RoleDTO build() {
+      Preconditions.checkArgument(StringUtils.isNotBlank(name), "name cannot be null or empty");
+      Preconditions.checkArgument(audit != null, "audit cannot be null");
+      Preconditions.checkArgument(
+          !CollectionUtils.isEmpty(privileges), "privileges can't be empty");
+      Preconditions.checkArgument(securableObject != null, "securable object can't null");
+
+      return new RoleDTO(
+          name,
+          properties,
+          privileges.stream()
+              .map(Privilege::name)
+              .map(Objects::toString)
+              .collect(Collectors.toList()),
+          securableObject.toString(),
+          audit);
+    }
+  }
+}

common/src/main/java/com/datastrato/gravitino/dto/requests/RoleCreateRequest.java

@@ -0,0 +1,82 @@
+/*
+ * Copyright 2024 Datastrato Pvt Ltd.
+ * This software is licensed under the Apache License version 2.
+ */
+package com.datastrato.gravitino.dto.requests;
+
+import com.datastrato.gravitino.rest.RESTRequest;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.google.common.base.Preconditions;
+import java.util.List;
+import java.util.Map;
+import javax.annotation.Nullable;
+import lombok.Builder;
+import lombok.EqualsAndHashCode;
+import lombok.Getter;
+import lombok.ToString;
+import lombok.extern.jackson.Jacksonized;
+import org.apache.commons.collections4.CollectionUtils;
+import org.apache.commons.lang3.StringUtils;
+
+/** Represents a request to create a role. */
+@Getter
+@EqualsAndHashCode
+@ToString
+@Builder
+@Jacksonized
+public class RoleCreateRequest implements RESTRequest {
+
+  @JsonProperty("name")
+  private final String name;
+
+  @Nullable
+  @JsonProperty("properties")
+  private Map<String, String> properties;
+
+  @JsonProperty("privileges")
+  private List<String> privileges;
+
+  @JsonProperty("securableObject")
+  private String securableObject;
+
+  /** Default constructor for RoleCreateRequest. (Used for Jackson deserialization.) */
+  public RoleCreateRequest() {
+    this(null, null, null, null);
+  }
+
+  /**
+   * Creates a new RoleCreateRequest.
+   *
+   * @param name The name of the role.
+   * @param properties The properties of the role.
+   * @param securableObject The securable object of the role.
+   * @param privileges The privileges of the role.
+   */
+  public RoleCreateRequest(
+      String name,
+      Map<String, String> properties,
+      List<String> privileges,
+      String securableObject) {
+    super();
+    this.name = name;
+    this.properties = properties;
+    this.privileges = privileges;
+    this.securableObject = securableObject;
+  }
+
+  /**
+   * Validates the {@link RoleCreateRequest} request.
+   *
+   * @throws IllegalArgumentException If the request is invalid, this exception is thrown.
+   */
+  @Override
+  public void validate() throws IllegalArgumentException {
+    Preconditions.checkArgument(
+        StringUtils.isNotBlank(name), "\"name\" field is required and cannot be empty");
+
+    Preconditions.checkArgument(
+        !CollectionUtils.isEmpty(privileges), "\"privileges\" can't be empty");
+
+    Preconditions.checkArgument(securableObject != null, "\"securableObject\" can't null");
+  }
+}