Created 11-02-2016 12:24 AM
What is the intended use of Atlas tag attributes? You have to apply a value to an attribute when you attach a tag to an entity.
What is a real world example of how attributes would be used.
Created 11-02-2016 05:16 AM
@Carolyn, an example that leverages tag attributes is concept of a data lease or duration in which the entity is valid. For example, we could have tags called ACTIVE_AFTER, EXPIRES_ON both of which can have an attribute effective_date. On different entities we could then set different values of the effective_date attribute once we tag them with ACTIVE_AFTER or EXPIRES_ON tags. So different entities could have different validity dates through the values set for effective_date on the entity. This can be used to manage the period during which an asset is effective. Once entities are tagged, the tags and attributes flow down to Ranger and you can write a single security policy to prevent specific groups of users from accessing all assets tagged with EXPIRES_ON after the effective_date without having to write 1 policy per entity. Hope this helps.
Created 11-02-2016 01:43 AM
From what I understand, Tags can be used for enforcing policies and filtering purpose.
For example:
AFAIK, filtering at the tag attribute level is not yet supported in Atlas.
Created 11-02-2016 05:16 AM
@Carolyn, an example that leverages tag attributes is concept of a data lease or duration in which the entity is valid. For example, we could have tags called ACTIVE_AFTER, EXPIRES_ON both of which can have an attribute effective_date. On different entities we could then set different values of the effective_date attribute once we tag them with ACTIVE_AFTER or EXPIRES_ON tags. So different entities could have different validity dates through the values set for effective_date on the entity. This can be used to manage the period during which an asset is effective. Once entities are tagged, the tags and attributes flow down to Ranger and you can write a single security policy to prevent specific groups of users from accessing all assets tagged with EXPIRES_ON after the effective_date without having to write 1 policy per entity. Hope this helps.
Created 11-02-2016 12:38 PM
Once Atlas has ingested data , say hive table, one can use Atlas to specify security policies on it through Ranger. How does Ranger know which entities to apply policies on ? By using "tags" .An entity(hive table for example) can be tagged . This tag appears in Ranger and you can enforce policies on entities tagged with that tag.
Please refer http://hortonworks.com/hadoop-tutorial/tag-based-policies-atlas-ranger/