Ranger for phoenix

[#1]

Does ranger enforce policies on phoenix which are created via ranger for hbase?

[#2]

@Sunile Manjee

Yes..there is a demo https://community.hortonworks.com/articles/12682/apache-ranger-and-hbase.html

[#3]

@Sunile Manjee

Did you get chance to see the demo ? 🙂

[#4]

@Neeraj Sabharwal

Yes I did and it was very helpful. Appreciate you providing the awesome insights.

[#5 · Accepted solution]

Hi Sunile, unfortunately you cannot directly manage "Phoenix table" permissions via Ranger. However, creating a Phoenix table creates an underlying HBase table of the same name.

To answer your question directly, yes, setting Ranger permissions on those underlying HBase tables (as in Neeraj's demo) protects data in your Phoenix tables. Note that Phoenix also uses a series of "SYSTEM" HBase tables (SYSTEM.CATALOG, SYSTEM.STATS, etc) which you may also want to secure with Ranger policies.