Filter Option with Ranger for Hive Tables

[#1]

Hello,

When we use a Filter with Ranger on Hive tables: is it possible to define a dynamic value ?

My use case :

I have different groups on my application. Each group has at least one user.

Data could be accessed by only an appropriate group.

My SQL request : select * from table t1, table t2 where t1.id=t2.id and t2.group="group_admin".

Instead of "group_admin" I would like to put a dynamic value.

Is it possible or any suggestions ?

Thks for your helps

[#2]

@Smart Data Starting in HDP 2.6.0 you can use variables in ranger policies. So you could do a row-level filtering using where user={user}. I am not sure of the full range of variables that you can use (or if it is limited to user only) so you may want to try where group_admin={group}. [See comment for using additional variables]

Useful references:

• From release notes: Support for $username variable in Ranger policies (RANGER-698).
• Ranger documentation: https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.1/bk_security/content/user_variable_ref.html
• https://community.hortonworks.com/questions/102532/set-user-user-in-ranger-policy.html

You may also want to look at this post: https://community.hortonworks.com/articles/59582/create-dynamic-row-level-filter-in-ranger.html

[#3]

@Smart Data

See this post for using variables other than {user}: https://community.hortonworks.com/questions/118123/hdp-26-allows-user-variable-in-ranger-policies-ar...

[#4]

Hi @Greg Keys

Thks so much for your comment. I will try your advices and let you know.