[HIVE-27643] Exclude compaction queries from ranger policies

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 4.0.0
• Labels: pull-request-available
• Assignee: László Végh
• Reporter: László Végh
• Created: 23/Aug/23 13:24
• Updated: 29/Mar/24 17:50
• Resolved: 07/Sep/23 07:41

Description

Applying masking or filtering Ranger policies on the compaction users cause data loss, as the policies will be applied to the compaction queries also.

While this is a kind of misconfiguration, the result is so bad, that the users should be protected from it by automatically excluding compaction queries from ALL ranger policies.

Issue Links

• links to: GitHub Pull Request #4626