[HIVE-13125] Support masking and filtering of rows/columns

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.1.0
• Component/s: Security
• Assignee: Pengcheng Xiong
• Reporter: Pengcheng Xiong
• Created: 23/Feb/16 15:29
• Updated: 21/Jul/17 05:13
• Resolved: 20/Mar/16 17:54

Description

Traditionally, access control at the row and column level is implemented through views. Using views as an access control method works well only when access rules, restrictions, and conditions are monolithic and simple. It however becomes ineffective when view definitions become too complex because of the complexity and granularity of privacy and security policies. It also becomes costly when a large number of views must be manually updated and maintained. In addition, the ability to update views proves to be challenging. As privacy and security policies evolve, required updates to views may negatively affect the security logic particularly when database applications reference the views directly by name. HIVE row and column access control helps resolve all these problems.

Issue Links

• Dependent: RANGER-895 Ranger Hive plugin to support column-masking
• is duplicated by: HIVE-4046 Column masking
• relates to: HIVE-13568 Add UDFs to support column-masking
• links to: RB

Sub-Tasks

• deal with ACID operations (insert, update, delete): Open