question Re: What should I set to an "entity" access policy? in Archives of Support Questions (Read Only)

What should I set to an "entity" access policy?

toide — Thu, 13 Sep 2018 15:22:41 GMT

What should I set to an "entity" access policy?

As far as I tried, Atlas requires an "entity" access policy defined in Ranger must be "*".

If I set other than "*" for "entity", Atlas says "You are not authorized for READ on [ENTITY] : *".

I thought I can set the name of an entity like Hive table name to a value of an "entity" access policy.

Is this incorrect?

Re: What should I set to an "entity" access policy?

cravani — Fri, 14 Sep 2018 16:19:51 GMT

As of HDP 2.6.5 all resources of Atlas supports * for resources only in Ranger. There is an improvement for the granular level of access control in Ranger 1.1 which comes with HDP 3.0 onwards.

Re: What should I set to an "entity" access policy?

toide — Fri, 14 Sep 2018 16:37:33 GMT

Thanks, @Chiran Ravani

Re: What should I set to an "entity" access policy?

cravani — Fri, 14 Sep 2018 16:41:00 GMT

You're Welcome. I am unsure of the JIRA for which the change has been made, I believe it is https://issues.apache.org/jira/browse/RANGER-2004, https://issues.apache.org/jira/browse/ATLAS-2459

Having said that, I have tested in my lab env with 3.0 and it works 🙂