Ranger - HBase Namespace

[#1]

Is ranger able to control security at a namespace level within hbase?

[#2 · Accepted solution]

Yes! Please refer this JIRA https://issues.apache.org/jira/browse/RANGER-202

[#3]

@Sunile Manjee

See this

Demo

my_ns1:my_table - demouser can access it

hbase(main):005:0> scan "my_ns1:my_table"

ROW COLUMN+CELL

0 row(s) in 0.0340 seconds

hbase(main):006:0>

I removed demouser in policy

hbase(main):006:0> scan "my_ns1:my_table"

ROW COLUMN+CELL

ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user ‘demouser',action: scannerOpen, tableName:my_ns1:my_table, family:fam.

Here is some help for this command: