Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

ranger access vs ranger masking

ranger access vs ranger masking

New Contributor

When user is trying to access data or view the data. Does ranger first check access policy or masking policy?

2 REPLIES 2

Re: ranger access vs ranger masking

Mentor

@Anpan K

Yes if these 2 conditions are fulfilled

  1. The Hive Ranger plugin MUST have been enabled and
  2. The Hive Security authorization MUST have been set to Ranger

With the above conditions, satisfied Ranger will ensure all the policies are met by a user when he tries to access a hive object.

HTH

Highlighted

Re: ranger access vs ranger masking

Cloudera Employee

Hi @Anpan,

Ranger always will first check access policy and then masking...

Cheers.