question Re: Ranger for phoenix in Archives of Support Questions (Read Only)

Ranger for phoenix

sunile_manjee — Wed, 17 Feb 2016 10:14:15 GMT

Does ranger enforce policies on phoenix which are created via ranger for hbase?

Re: Ranger for phoenix

nsabharwal — Wed, 17 Feb 2016 10:15:23 GMT

@Sunile Manjee

Yes..there is a demo https://community.hortonworks.com/articles/12682/apache-ranger-and-hbase.html

Re: Ranger for phoenix

rgelhausen — Wed, 17 Feb 2016 10:16:19 GMT

Hi Sunile, unfortunately you cannot directly manage "Phoenix table" permissions via Ranger. However, creating a Phoenix table creates an underlying HBase table of the same name.

To answer your question directly, yes, setting Ranger permissions on those underlying HBase tables (as in Neeraj's demo) protects data in your Phoenix tables. Note that Phoenix also uses a series of "SYSTEM" HBase tables (SYSTEM.CATALOG, SYSTEM.STATS, etc) which you may also want to secure with Ranger policies.

Re: Ranger for phoenix

nsabharwal — Thu, 18 Feb 2016 08:27:30 GMT

@Sunile Manjee

Did you get chance to see the demo ? 🙂

Re: Ranger for phoenix

sunile_manjee — Thu, 18 Feb 2016 13:23:20 GMT

@Neeraj Sabharwal

Yes I did and it was very helpful. Appreciate you providing the awesome insights.