Support Questions

Find answers, ask questions, and share your expertise
Announcements
Welcome to the upgraded Community! Read this blog to see What’s New!

Can we do column value level restriction in Apache ranger ?

avatar
Rising Star

Can we create policy for value of a selected column ( in a hive table ) in Ranger.

1 ACCEPTED SOLUTION

avatar
11 REPLIES 11

avatar

avatar
Rising Star

@Sagar Shimpi

Thank you, do you have the doc which lists all the functionalities of Ranger and ATLAS.

avatar
Expert Contributor

@Dinesh Das

Row Filtering and Column masking are supported in Ranger. This may cater your use case of column value level restriction. Please check it out and let us know is this what you were looking for?

https://cwiki.apache.org/confluence/display/RANGER/Row-level+filtering+and+column-masking+using+Apac...

avatar
Rising Star

@Ramesh Mani Sure, Thanks for the post let me try all these

avatar
Rising Star

@Ramesh Mani

Restriction through Ranger is neither working on HIVE CLI nor BEELINE CLI. I can able to fetch full data when am using select command in hive/beeline cli . Its only working in Hive view. am I doing anything wrong here !?

avatar
Expert Contributor

@Dinesh Das Ranger is not supported in HIVE CLI. What version of HDP are using? If Ranger Policy is not in effective may be the plugin is not enabled correctly or something wrong. Do you get any audit in Ranger admin? Also as @svenkat requested please provide your use case that will help us.

avatar
Rising Star

@Ramesh Mani

Yes am able to do audit in ranger and am using HDP 2.5

avatar
Explorer

@Dinesh Das, can you explain what is your exact use case with one or more concrete examples of what you are trying to do exactly? Your problem statement is somewhat vague.

avatar
Rising Star

@svenkat

Am trying to create a policy in ranger for restricting certain rows of a hive table, I found the policy is working well with hive view. But when am checking the same in hive CLI ( hive command prompt ) , seems the policy is not working I can able to see the restricted data and same scenario for beeline CLI as well.

avatar
Contributor

@Dinesh Das: Can you pls put screenshots of the policy(s) you are creating for the same. You will need an access level policy which will grant access to your user on the Hive resources and then a Row level filter policy if you want to filter out certain rows. Also what is the select statement you are using in beeline cli?

Labels