[ https://issues.apache.org/jira/browse/RANGER-3765?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Madhan Neethiraj updated RANGER-3765: ------------------------------------- Attachment: RANGER-3765.patch > tag-based policy masking to override resource-based policy > ---------------------------------------------------------- > > Key: RANGER-3765 > URL: https://issues.apache.org/jira/browse/RANGER-3765 > Project: Ranger > Issue Type: Bug > Components: plugins > Reporter: Madhan Neethiraj > Assignee: Madhan Neethiraj > Priority: Major > Fix For: 3.0.0 > > Attachments: RANGER-3765.patch > > > 1. consider following two masking policies - one tag-based policy and the > other resource-based: > {noformat} > tag-based policy: > id: 1, tag: TAG1, > users: [ user1 ], maskType: MASK_NULL > resource-based policy: > id: 2, database: db1, table: tbl1, column: col1, > users: [ user1 ], maskType: MASK_SHOW_LAST_4{noformat} > 2. consider that column {{db1.tbl1.col1}} has tag {{{}TAG1{}}}. > When {{user1}} accesses table {{{}db1.tbl1{}}}, the value of column {{col1}} > should be masked as specified in tag-based policy id=1; however, mask > specified in resource-based policy id=2 is applied instead. This should be > updated to choose the mask specified in tag-based policy when both tag-based > and resource-based policies have same priority. -- This message was sent by Atlassian Jira (v8.20.7#820007)