Description
When a column has masking policies configured and the column is called inside a function. The output of the function is not returning masked data.
For example, let's say if a column abc from table default_table has HASH_MASK policy configured for a user XYZ. Below are a couple of queries where the user might get actual abc value instead of masked value.
select substr(abc, 0, 100000000000) from default_table select concat(abc, '-', 'dummy') from default_table
Attachments
Issue Links
- is fixed by
-
SUBMARINE-531 Submarine Spark Security Plugin -- masking policy do not work when using functions on fields
-
- Resolved
-