All, Apache Ranger enhancements to support tag-based policies (RANGER-274) is available in tag-policy branch. An overview of the implementation, along with couple of usecases example, is available in Apache wiki page here. Please review.
In addition, the tag-policy branch has policy model enhancements that support explicit deny and allow/deny exceptions in policies. Documentation for this enhancement will be available in the wiki shortly. Thanks, Madhan
