Support Questions
Find answers, ask questions, and share your expertise

ranger access vs ranger masking

When user is trying to access data or view the data. Does ranger first check access policy or masking policy?

2 REPLIES 2

Mentor

@Anpan K

Yes if these 2 conditions are fulfilled

  1. The Hive Ranger plugin MUST have been enabled and
  2. The Hive Security authorization MUST have been set to Ranger

With the above conditions, satisfied Ranger will ensure all the policies are met by a user when he tries to access a hive object.

HTH

Cloudera Employee

Hi @Anpan,

Ranger always will first check access policy and then masking...

Cheers.

; ;