You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Abhishek Jain (Jira)" <ji...@apache.org> on 2025/02/13 07:54:00 UTC

[jira] [Created] (RANGER-5144) [Column Masking] : Exposing Data Secrecy by Displaying lowercase/uppercase patterns in Masked Column Data

Abhishek Jain created RANGER-5144:
-------------------------------------

             Summary: [Column Masking] : Exposing Data Secrecy by Displaying lowercase/uppercase patterns in Masked Column Data
                 Key: RANGER-5144
                 URL: https://issues.apache.org/jira/browse/RANGER-5144
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 2.4.0
            Reporter: Abhishek Jain


The data secrecy is exposed by displaying the lowercase/uppercase pattern when the column masking is applied.

Each uppercase letter in a string is masked with 'X' (capital 'X') and each lowercase letter is masked with 'x' (small 'x') which exposes the datapattern in that column.

{_}*Example*{_}: 

 
{code:java}
ABHIshek -> XXXXxxxx
abhishek -> xxxxxxxx
{code}
The masking rule should be uniform for both lower/upper case letters.

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)