Madhan Neethiraj created RANGER-3765:
----------------------------------------
Summary: tag-based policy masking to override resource-based policy
Key: RANGER-3765
URL: https://issues.apache.org/jira/browse/RANGER-3765
Project: Ranger
Issue Type: Bug
Components: plugins
Reporter: Madhan Neethiraj
Assignee: Madhan Neethiraj
1. consider following two masking policies - one tag-based policy and the other
resource-based:
{noformat}
tag-based policy:
id: 1, tag: TAG1,
users: [ user1 ], maskType: MASK_NULL
resource-based policy:
id: 2, database: db1, table: tbl1, column: col1,
users: [ user1 ], maskType: MASK_SHOW_LAST_4{noformat}
2. consider that column {{db1.tbl1.col1}} has tag {{{}TAG1{}}}.
When {{user1}} accesses table {{{}db1.tbl1{}}}, the value of column {{col1}}
should be masked as specified in tag-based policy id=1; however, mask specified
in resource-based policy id=2 is applied instead. This should be updated to
choose the mask specified in tag-based policy when both tag-based and
resource-based policies have same priority.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
