How to apply different policy conditions in Rangers Tag Based Policies then the default expiry date / expires_on?

[#1]

Hello community,

Iam using HDP 2.6.0 Sandbox with Ranger 0.7.0 and I would love to know if (and eventually 'how') it is possible to add policy conditions inside the "allow / deny conditions" window while applying Tag Based Policies. I found a statement in the documentation below that says:

"Currently "Accessed after expiry_date? (yes/no)" is the only available policy condition" Source

Is this statement still up to date? And is it eventually possible to do something here through the Ranger REST API?

I kindly appreciate any further information towards this topic.

Thanks a lot and best regards:-)

[#2 · Accepted solution]

Please see https://issues.apache.org/jira/browse/RANGER-1647 - is this what you are interested in?

[#3]

That looks promising. Yes I think thats what I was looking for. Thanks a lot!

[#4]

Quick followup question, since Iam stuck here: Do I understand it correctly, that I need to apply this patch trough "git apply" to the recent ranger.git? I tried out a lot and somehow it doesnt want to work. Am I on the right track? I appreciate every hint. Huge thanks!