ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Don Bosco Durai (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-2086) Resource data mask policy overrides when both tag and resource datamask policies match
Date Fri, 04 May 2018 00:33:00 GMT

    [ https://issues.apache.org/jira/browse/RANGER-2086?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16463245#comment-16463245
] 

Don Bosco Durai commented on RANGER-2086:
-----------------------------------------

[~abhayk] , when there are conflicting policies, which takes preference?

Thanks

> Resource data mask policy overrides when both tag and resource datamask policies match
> --------------------------------------------------------------------------------------
>
>                 Key: RANGER-2086
>                 URL: https://issues.apache.org/jira/browse/RANGER-2086
>             Project: Ranger
>          Issue Type: Bug
>          Components: Ranger
>    Affects Versions: 1.0.0, master
>            Reporter: Abhay Kulkarni
>            Assignee: Abhay Kulkarni
>            Priority: Major
>             Fix For: master, 1.1.0
>
>
> If both tag and resource data-mask policies match accessed hive resource, mask-specification
in the resource policy is always used. The audit log record is inconsistent in that it contains
tag-policy-id as determining data-mask policy, but the masking specification is from resource
policy.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message