Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Why does ranger have both allow/exclude and deny/exclude conditions (seems redundant)?

Why does ranger have both allow/exclude and deny/exclude conditions (seems redundant)?

Rising Star

Wondering why apache ranger has both allow/exclude and deny/exclude conditions when setting policies. Eg. tried setting an HDFS access policy such that only user user1 had access. However, when testing, found that it basically had no effect and others could access the HDFS location as well. Only worked as intended after setting a public group deny condition on the policy. 110277-1565302353476.png

Given this, when would ranger ever use the allow conditions and not just do something like "deny public, but exclude from this user1." It seems redundant as it is now, so I'm wondering if I am misunderstanding how it is intended to be used or not seeing a potential use case where this would come into play. Could anyone clarify this for me?

1 REPLY 1
Highlighted

Re: Why does ranger have both allow/exclude and deny/exclude conditions (seems redundant)?

New Contributor

Security and Happiness

When you have an investment in one country and your family is in another you will find out that you feel a little unsecured. This is because you might have to travel from time to time to check on your family and spend some time with them. Sometimes you have to rush back to business to avoid anything going wrong. Also, you might not really be happy because your role in the family is being missed. But with a second citizen program, this issue will be well taken care of. This is because your family can freely come to live with you in the new country of your investment.

https://www.saadahsan.com/citizenship-by-investment-programs/

https://www.onhaxcrack.me/ableton-live-crack/

https://procracksoft.com/cobra-driver-crack-pack/

https://munichmotorworks.ae/

http://www.munichcartrading.ae/

Don't have an account?
Coming from Hortonworks? Activate your account here