[RANGER-3865] support for using user attributes in masking expressions

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.4.0
• Component/s: plugins
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 24/Aug/22 13:02
• Updated: 24/Aug/22 17:15
• Resolved: 24/Aug/22 17:12

Description

RANGER-3550 introduced support for referencing user attributes in row-filter expressions.

Extending use of user attributes in masking expressions can help address more use cases, including the following:

Restrict users to see email address of customers in user's country only; email address of other customers must be masked:

CASE WHEN country = '${{USER.country}}' THEN {col} ELSE mask({col}) END