[
https://issues.apache.org/jira/browse/RANGER-2154?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17048827#comment-17048827
]
Madhan Neethiraj commented on RANGER-2154:
------------------------------------------
[~toopt4] - this usecase should already be possible; just by listing the users
and groups in right order. For example, to apply masking for everyone except
for users in 'group1', order the policy-items as given below:
# group=group1, maskType=unmasked
# group=public, maskType=mask
For column-masking and row-filter policies, Ranger evaluates the policy-items
in the order listed in the policy; the first item that matches the current
request (user, group, ..) is used to determine the mask/filter to be applied.
> Data Masking - against everyone EXCEPT certain groups/users
> -----------------------------------------------------------
>
> Key: RANGER-2154
> URL: https://issues.apache.org/jira/browse/RANGER-2154
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Affects Versions: 1.1.0
> Reporter: t oo
> Priority: Major
>
> Right now Ranger just lets you apply masking against certain groups (INCLUDE
> ONLY RULE). Would be great to specify a column is masked for EVERYONE, except
> those that should specifically be able to see unmasked data (EXCLUDE ONLY
> RULE).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
