HOw do i define AND in the Ranger Hive access- allow condition ?
(QA Cluster) AND (published zone) AND (Default Data group) à Allow Access per the permissions set in the policy.
If a user is not part of ALL THREE groups, then they would not be granted access.
What we’ve seen is whether we build the policy with all three groups in the same Allow policy row, or add them as successive Allow rows under the same policy, in both cases Ranger treats these as logical “OR” cases, where we need it to be a logical “AND”.
