question Re: How to apply different policy conditions in Rangers Tag Based Policies then the default expiry date / expires_on? in Archives of Support Questions (Read Only)

How to apply different policy conditions in Rangers Tag Based Policies then the default expiry date / expires_on?

bronxmaster — Wed, 06 Sep 2017 18:17:12 GMT

Hello community,

Iam using HDP 2.6.0 Sandbox with Ranger 0.7.0 and I would love to know if (and eventually 'how') it is possible to add policy conditions inside the "allow / deny conditions" window while applying Tag Based Policies. I found a statement in the documentation below that says:

"Currently "Accessed after expiry_date? (yes/no)" is the only available policy condition" Source

Is this statement still up to date? And is it eventually possible to do something here through the Ranger REST API?

I kindly appreciate any further information towards this topic.

Thanks a lot and best regards:-)

Re: How to apply different policy conditions in Rangers Tag Based Policies then the default expiry date / expires_on?

vperiasamy — Tue, 12 Sep 2017 00:01:02 GMT

Please see https://issues.apache.org/jira/browse/RANGER-1647 - is this what you are interested in?

Re: How to apply different policy conditions in Rangers Tag Based Policies then the default expiry date / expires_on?

bronxmaster — Tue, 12 Sep 2017 23:22:40 GMT

That looks promising. Yes I think thats what I was looking for. Thanks a lot!

Re: How to apply different policy conditions in Rangers Tag Based Policies then the default expiry date / expires_on?

bronxmaster — Wed, 13 Sep 2017 16:27:30 GMT

Quick followup question, since Iam stuck here: Do I understand it correctly, that I need to apply this patch trough "git apply" to the recent ranger.git? I tried out a lot and somehow it doesnt want to work. Am I on the right track? I appreciate every hint. Huge thanks!