[ https://issues.apache.org/jira/browse/RANGER-2086?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16463245#comment-16463245
]
Don Bosco Durai commented on RANGER-2086:
-----------------------------------------
[~abhayk] , when there are conflicting policies, which takes preference?
Thanks
> Resource data mask policy overrides when both tag and resource datamask policies match
> --------------------------------------------------------------------------------------
>
> Key: RANGER-2086
> URL: https://issues.apache.org/jira/browse/RANGER-2086
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Affects Versions: 1.0.0, master
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Priority: Major
> Fix For: master, 1.1.0
>
>
> If both tag and resource data-mask policies match accessed hive resource, mask-specification
in the resource policy is always used. The audit log record is inconsistent in that it contains
tag-policy-id as determining data-mask policy, but the masking specification is from resource
policy.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
|