[RANGER-1168] Add data masking for tag based policies

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: plugins
• Labels: VirtualDataConnector
• Assignee: Unassigned
• Reporter: Nigel Jones
• Created: 06/Sep/16 16:04
• Updated: 03/Apr/17 17:28

Description

Currently in Hive its possible to create tag based policies. For example a policy can prevent a user from accessing data in a column tagged as sensitive - with that classification likely coming from Apache Atlas.

In order to support the principle of applying a policy to a classification rather than an actual resort, we should extend Ranger & in particular the plugins such as hive to allow tag based policies to support

• data masking
• row filtering

I believe this is important to support the principle of Apache Atlas being used to centrally manage metadata & the classification of resources

Issue Links

• relates to: RANGER-1485 Ranger support for Virtual Data Connector Project (ATLAS)
• relates to: RANGER-1488 Create Ranger plugin for gaiandb

Sub-Tasks

• UI updates to support tag-based masking policies: Resolved
• Policy engine updates to support tag-based masking policies: Resolved
• Tag service-def updates to support masking policies: Resolved