ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Abhay Kulkarni (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-1302) Support FILENAME and BASE_FILENAME tokens for HDFS plugin
Date Tue, 10 Jan 2017 00:52:58 GMT
Abhay Kulkarni created RANGER-1302:

             Summary: Support FILENAME and BASE_FILENAME tokens for HDFS plugin
                 Key: RANGER-1302
                 URL: https://issues.apache.org/jira/browse/RANGER-1302
             Project: Ranger
          Issue Type: Improvement
          Components: plugins
    Affects Versions: 0.7.0
            Reporter: Abhay Kulkarni
            Assignee: Abhay Kulkarni
             Fix For: 0.7.0

Use case:
It should be possible to allow access only to files directly under the directory (say, "/data/oracle")
, and not to files under subdirectories of it (such as "/data/oracle/PII"). This cannot be
done using wildcards, such as "/data/oracle/*", because it allows access recursively to all
files under "/data/oracle/" including those under its subdirectories.

As Ranger supports tokens (introduced by RANGER-698), a Ranger policy for ("/data/oracle/{FILENAME})
will meet this need, if FILENAME token holds the value of file being accessed. Moreover, a
more specific policy such as "/data/oracle/{BASE_FILENAME}.txt" can match only files with
".txt" extension, where "." is used to demarcate extension from base filename.


This message was sent by Atlassian JIRA

View raw message