ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Madhan Neethiraj <mad...@apache.org>
Subject Review Request 51680: RANGER-1100: Hive authorizer does not block update operations if one of the masked columns has mask-type as 'Unmasked' for the user
Date Tue, 06 Sep 2016 23:01:05 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/51680/
-----------------------------------------------------------

Review request for ranger, Don Bosco Durai, Gautam Borad, Abhay Kulkarni, Ramesh Mani, Selvamohan
Neethiraj, and Velmurugan Periasamy.


Bugs: RANGER-1100
    https://issues.apache.org/jira/browse/RANGER-1100


Repository: ranger


Description
-------

Updated the authorizer to block updates if any of the columns have masking specified for the
user


Diffs
-----

  agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPolicy.java d8e19b7 
  agents-common/src/main/java/org/apache/ranger/plugin/policyengine/RangerPolicyEngineImpl.java
9a63516 
  hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuditHandler.java
a6bb357 
  hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
166e95a 

Diff: https://reviews.apache.org/r/51680/diff/


Testing
-------

Verified that the authorizer blocks update operations even when a column as mask-type as 'Unmasked'
for a column but a different mask is specified for another column.


Thanks,

Madhan Neethiraj


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message