[jira] [Commented] (RANGER-1488) Create Ranger plugin for gaiandb

["Nigel Jones (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-1488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16157116#comment-16157116 ] 

Nigel Jones commented on RANGER-1488:
-------------------------------------

An outline of the broader use cases within which the gaiandb ranger plugin would be used can be found at https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=69407333

However the plugin should be self-contained, and not dependent on the other ongoing work around atlas and open metadata. It should fundamentally work within the existing ranger framework, and not be dependent on the ongoing work in particular in atlas around open metadata, OMAS interfaces and any proposed changes to tagsync, metadata exchange etc.

the capabilities will include
 - simple permit/deny on data access
 - masking (**** is sufficient as a first step, but could be elaborate as in hive)
 - supporting both resource based policies & tag based policies

Not required by current use cases but a useful future enhancement would include
 - row filtering

A desire has also been expressed such that if a user were to do a 'select *' from a gaiandb virtual table, any columns the user cannot see should be stripped out. However this may cause inconsistencies with any metadata queries (which cannot be filtered by a ranger plugin since gaiandb does not yet support this). A consideration, but likely to be tricky at this time. 

> Create Ranger plugin for gaiandb
> --------------------------------
>
>                 Key: RANGER-1488
>                 URL: https://issues.apache.org/jira/browse/RANGER-1488
>             Project: Ranger
>          Issue Type: New Feature
>          Components: plugins
>            Reporter: Nigel Jones
>            Assignee: Nigel Jones
>              Labels: VirtualDataConnector
>
> GaianDB is a distributed, federated database built on Apache Derby.
> The documentation is at https://github.com/gaiandb/gaiandb/blob/master/README.md - navigate up for the source.
> As part of a Virtual Connector Project based on Atlas we are using gaianDB to provide a virtualization layer. We need to control access to underlying resources and will be building a Ranger plugin for gaiandb to support this. GaianDB already has support for a form of policy plugin which allows the SQL to be intercepted.
> It is unclear if this code will sit
>  - external to ranger/atlas ie in the gaianDB sources
>  - as a sample in the Atlas project (so that we collate what is needed for the virtual connector project)
>  - as a sample, or component in the Ranger project
> However it seems helpful to describe the proposal here and get feedback/dialogue in the ranger community :-)



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)