[jira] [Commented] (RANGER-2154) Data Masking - against everyone EXCEPT certain groups/users

["Madhan Neethiraj (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-2154?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17048827#comment-17048827 ] 

Madhan Neethiraj commented on RANGER-2154:
------------------------------------------

[~toopt4] - this usecase should already be possible; just by listing the users and groups in right order. For example, to apply masking for everyone except for users in 'group1', order the policy-items as given below:

# group=group1, maskType=unmasked
# group=public, maskType=mask

For column-masking and row-filter policies, Ranger evaluates the policy-items in the order listed in the policy; the first item that matches the current request (user, group, ..) is used to determine the mask/filter to be applied.

> Data Masking - against everyone EXCEPT certain groups/users
> -----------------------------------------------------------
>
>                 Key: RANGER-2154
>                 URL: https://issues.apache.org/jira/browse/RANGER-2154
>             Project: Ranger
>          Issue Type: Improvement
>          Components: Ranger
>    Affects Versions: 1.1.0
>            Reporter: t oo
>            Priority: Major
>
> Right now Ranger just lets you apply masking against certain groups (INCLUDE ONLY RULE). Would be great to specify a column is masked for EVERYONE, except those that should specifically be able to see unmasked data (EXCLUDE ONLY RULE).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)