Hi, I have read the manual but I don't understand the behaviour of 2 policies I have regarding the same Hive table. Policy 15 is a global allow policy on all Hive tables, all columns: then I have policy 31 like this: But whatever I try, user raj_ops still can run 'select * from employee' and get results. Policy 31 is not evaluated as a 'deny' on the resource. I know you can add explicit Deny Conditons to the hive service, and I will try that. But the question is what the EXCLUDE switch (after the Hive column* box ) is good for when it is not picked up. ... View more

Hi, Can anyone post a working example of adding a trait to an entity with the REST API? So suppose I want to attach the tag 'CONF' to GUID 46c471f1-66ba-453c-9816-08ff144efde4 what is the syntax to do so? Tags / Traits also confuse me: If I understand it correctly Atlas traits are what tag based policies in Ranger are build upon. Way down in the Json response below it shows that what I added as a 'tag' in the Atlas WebUI is actually a 'trait_name' here. But the thing 'tag' is also there, but apparently another thing altogether. So what is the standing of a trait vs. a tag in Atlas? curl -u admin:admin http://sandbox.hortonworks.com:21000/api/atlas/v1/entities/46c471f1-66ba-453c-9816-08ff144efde4 gives me: [ { "href": "http://sandbox.hortonworks.com:21000/api/atlas/v1/entities/46c471f1-66ba-453c-9816-08ff144efde4", "name": "ssn", "id": "46c471f1-66ba-453c-9816-08ff144efde4", "type": "hive_column", "creation_time": "2016-10-12:21:06:11", "entityText": "hive_column type string table hive_table createTime Wed Oct 12 21:06:09 UTC 2016 lastAccessTime Wed Oct 12 21:06:09 UTC 2016 retention 0 parameters numFiles 0 COLUMN_STATS_ACCURATE {\"BASIC_STATS\":\"true\"} transient_lastDdlTime 1476306369 numRows 0 totalSize 0 rawDataSize 0 tableType MANAGED_TABLE temporary false qualifiedName default.employee@Sandbox name employee owner admin qualifiedName default.employee.ssn@Sandbox name ssn owner admin", "modified_time": "2016-10-17:19:26:21", "owner": "admin", "qualifiedName": "default.employee.ssn@Sandbox", "state": "ACTIVE", "version": 0, "super_types": [ "Asset", "DataSet", "Referenceable" ], "table": [ { "href": "http://sandbox.hortonworks.com:21000/api/atlas/v1/entities/170a5db7-7b32-4888-a361-448be4daa958", "name": "employee", "id": "170a5db7-7b32-4888-a361-448be4daa958", "type": "hive_table" } ], "tags": [], "trait_names": [ "PERS" ], "traits": [] } ] ... View more

Hi, I can't figure out what these pages are meant for exactly within the Ranger component: And the HDFS one: I am asking since the Ranger HDFS / HIVE plugins both seem to work fine, policies can be published but nonetheless the 'TEST Connection' on both service configs can fail without upsetting your Ranger setup. So, what is this about? ... View more