You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@submarine.apache.org by "Tenneti Venkata Sri Harsha (Jira)" <ji...@apache.org> on 2020/09/25 16:11:00 UTC

[jira] [Created] (SUBMARINE-634) Spark-security ranger plugin should mask when a function is used around the column

Tenneti Venkata Sri Harsha created SUBMARINE-634:
----------------------------------------------------

             Summary: Spark-security ranger plugin should mask when a function is used around the column
                 Key: SUBMARINE-634
                 URL: https://issues.apache.org/jira/browse/SUBMARINE-634
             Project: Apache Submarine
          Issue Type: Improvement
          Components: Security
            Reporter: Tenneti Venkata Sri Harsha


When a column has masking policies configured and the column is called inside a function. The output of the function is not returning masked data.

For example, let's say if a column {{abc}} from table {{default_table}} has {{HASH_MASK}} policy configured for a user {{XYZ}}. Below are a couple of queries where the user might get actual {{abc}} value instead of masked value.
{code:java}
select substr(abc, 0, 100000000000)  from default_table
select concat(abc, '-', 'dummy') from default_table
{code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@submarine.apache.org
For additional commands, e-mail: dev-help@submarine.apache.org