Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-3765

tag-based policy masking to override resource-based policy

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 3.0.0, 2.3.0
    • 3.0.0, 2.3.0
    • plugins
    • None

    Description

      1. consider following two masking policies - one tag-based policy and the other resource-based:

      tag-based policy:
        id: 1, tag: TAG1,
          users: [ user1 ], maskType: MASK_NULL
      
      resource-based policy:
        id: 2, database: db1, table: tbl1, column: col1,
          users: [ user1 ], maskType: MASK_SHOW_LAST_4

      2. consider that column db1.tbl1.col1 has tag TAG1.

      When user1 accesses table db1.tbl1, the value of column col1 should be masked as specified in tag-based policy id=1; however, mask specified in resource-based policy id=2 is applied instead. This should be updated to choose the mask specified in tag-based policy when both tag-based and resource-based policies have same priority.

      Attachments

        1. RANGER-3765.patch
          13 kB
          Madhan Neethiraj

        Activity

          People

            madhan Madhan Neethiraj
            madhan Madhan Neethiraj
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: