ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Madhan Neethiraj (Jira)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-2154) Data Masking - against everyone EXCEPT certain groups/users
Date Mon, 02 Mar 2020 06:42:00 GMT

    [ https://issues.apache.org/jira/browse/RANGER-2154?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17048827#comment-17048827
] 

Madhan Neethiraj commented on RANGER-2154:
------------------------------------------

[~toopt4] - this usecase should already be possible; just by listing the users and groups
in right order. For example, to apply masking for everyone except for users in 'group1', order
the policy-items as given below:

# group=group1, maskType=unmasked
# group=public, maskType=mask

For column-masking and row-filter policies, Ranger evaluates the policy-items in the order
listed in the policy; the first item that matches the current request (user, group, ..) is
used to determine the mask/filter to be applied.

> Data Masking - against everyone EXCEPT certain groups/users
> -----------------------------------------------------------
>
>                 Key: RANGER-2154
>                 URL: https://issues.apache.org/jira/browse/RANGER-2154
>             Project: Ranger
>          Issue Type: Improvement
>          Components: Ranger
>    Affects Versions: 1.1.0
>            Reporter: t oo
>            Priority: Major
>
> Right now Ranger just lets you apply masking against certain groups (INCLUDE ONLY RULE).
Would be great to specify a column is masked for EVERYONE, except those that should specifically
be able to see unmasked data (EXCLUDE ONLY RULE).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Mime
View raw message