[ https://issues.apache.org/jira/browse/RANGER-3765?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17538288#comment-17538288 ]
Madhan Neethiraj commented on RANGER-3765: ------------------------------------------ [~rmani] - I would like to get this fix in Ranger 2.3 release. Can you please review and approve? > tag-based policy masking to override resource-based policy > ---------------------------------------------------------- > > Key: RANGER-3765 > URL: https://issues.apache.org/jira/browse/RANGER-3765 > Project: Ranger > Issue Type: Bug > Components: plugins > Reporter: Madhan Neethiraj > Assignee: Madhan Neethiraj > Priority: Major > Fix For: 3.0.0 > > Attachments: RANGER-3765.patch > > > 1. consider following two masking policies - one tag-based policy and the > other resource-based: > {noformat} > tag-based policy: > id: 1, tag: TAG1, > users: [ user1 ], maskType: MASK_NULL > resource-based policy: > id: 2, database: db1, table: tbl1, column: col1, > users: [ user1 ], maskType: MASK_SHOW_LAST_4{noformat} > 2. consider that column {{db1.tbl1.col1}} has tag {{{}TAG1{}}}. > When {{user1}} accesses table {{{}db1.tbl1{}}}, the value of column {{col1}} > should be masked as specified in tag-based policy id=1; however, mask > specified in resource-based policy id=2 is applied instead. This should be > updated to choose the mask specified in tag-based policy when both tag-based > and resource-based policies have same priority. -- This message was sent by Atlassian Jira (v8.20.7#820007)