Where are deny conditions in hive policies?

[#1]

This link (https://cwiki.apache.org/confluence/display/RANGER/Deny-conditions+and+excludes+in+Ranger+policies) has screenshots of hive policies with deny conditions. I have deny conditions enabled, but still it does not show up for the role based hive policies. Any idea why not?

[#2 · Accepted solution]

Please see https://community.hortonworks.com/articles/61208/how-to-enable-deny-conditions-and-excludes-in-rang.... for detailed How-To.

[#3]

By default a user is denied access to a hive table/column. A user must be given some access (SELECT, UPDATE, etc.) for a given schema/table/column, otherwise access is denied.