[
https://issues.apache.org/jira/browse/IMPALA-9352?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on IMPALA-9352 started by Kris Hahn.
-----------------------------------------
> Impala doc: Document Impala Column Masking Support
> --------------------------------------------------
>
> Key: IMPALA-9352
> URL: https://issues.apache.org/jira/browse/IMPALA-9352
> Project: IMPALA
> Issue Type: Documentation
> Reporter: Quanlong Huang
> Assignee: Kris Hahn
> Priority: Critical
>
> Impala supports Ranger column masking in the comming release version
> (Impala-3.4). The feature is disabled by default. It can be turned on by
> adding --enable_column_masking flag to all coordinators.
> The behavior is the same as Hive column masking. All builtin mask types are
> supported:
> |*Type*|*Name*|*Description*|*Transformer*|
> |MASK|Redact|Replace lowercase with 'x', uppercase with 'X', digits with
> '0'|mask(\{col})|
> |MASK_SHOW_LAST_4|Partial mask: show last 4|Show last 4 characters; replace
> rest with 'x'|mask_show_last_n(\{col}, 4, 'x', 'x', 'x', -1, '1')|
> |MASK_SHOW_FIRST_4|Partial mask: show first 4|Show first 4 characters;
> replace rest with 'x'|mask_show_first_n(\{col}, 4, 'x', 'x', 'x', -1, '1')|
> |MASK_HASH|Hash|Hash the value|mask_hash(\{col})|
> |MASK_NULL|Nullify|Replace with NULL| |
> |MASK_NONE|Unmasked (retain original value)|No masking| |
> |MASK_DATE_SHOW_YEAR|Date: show only year|Date: show only year|mask(\{col},
> 'x', 'x', 'x', -1, '1', 1, 0, -1)|
> |CUSTOM|Custom|Custom| |
> For more about column masking policies, see
> [https://cwiki.apache.org/confluence/display/RANGER/Row-level+filtering+and+column-masking+using+Apache+Ranger+policies+in+Apache+Hive]
> Known issues:
> * Column masking policies on tables containing nested types would fail to
> apply (IMPALA-9329, IMPALA-9230).
> * Column masking policies require users to have SELECT privileges for all
> columns of a masked table (IMPALA-9223).
> * Ranger audits for applying column masking policies are not produced
> (IMPALA-9350).
> The work for fixing these issues is on-going. It's possible that some of them
> be fixed before the release then we can remove them.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
