Smit,

 

I suggest to consider implementing a context enricher that deals with 
retrieving tags from your tag store and sets tags for the resource in the 
request-context, with a call to 
RangerAccessRequestUtil.setRequestTagsInContext(context, tags). Tag service-def 
should be updated to register this context enricher, instead of current 
enricher implementation (RangerAdminTagRetriever).

 

Hope this helps.

 

Madhan

 

 

 

From: Smit Shah <[email protected]>
Date: Wednesday, August 26, 2020 at 3:59 PM
To: "[email protected]" <[email protected]>
Cc: "[email protected]" <[email protected]>, "[email protected]" 
<[email protected]>, "[email protected]" <[email protected]>
Subject: Help: Tag based policy for non-Atlas solution

 

cc: Team Members who created Confluence wiki pages that I have referred

 

Hi Apache Ranger Dev Team, 

I am Smit Shah, working at Zillow as a Data Engineer. My team is working on 
Data Governance around Apache Hive. We came across Apache Ranger and one of the 
key feature we like is Tag Based Policies, and really interested to leverage 
this. :)

Now, when going through the documentation for Tag Based Policies, I found that 
Tag Sync has native support for Apache Atlas. Now, our team already has our own 
tag store and trying to avoid adding another layer. So, checking with the team 
if there are any examples/blogs/documentation that you can share which can help 
to: 
1. Store tags
2. How to make tag based policy work in Apache Ranger for non Apache Atlas 
solution 

Some web-pages that I came across during my initial investigation: 
1. Context enrichers – Not sure if this is important for my use-case
2. Installing Tag Synchronizer – How to make this work for non-Atlas solution
3. Ranger API – This might be needed for storing tags, like we can create 
service which calls this end-point which takes data from our tag store and 
store it in Ranger in required format. 


You help/details will be really helpful to us. Sending email seemed like the 
best way to reach out to the team. Thank you very much in advance. :)

 

SMIT SHAH
SDE, Big Data
Pronouns: he/him/his
 

Reply via email to