Hi Munna, Ranger 2.5.0 was released about 6 months back. Trino release 466 and later include Ranger authorization plugin out of the box. Documentation to setup Ranger as authorizer is available at https://trino.io/docs/current/security/ranger-access-control.html.
To use tag-based authorization:
1. Update Ranger with tags associated with Trino
catalogs/schemas/tables/columns, using REST API endpoint "PUT
/public/v2/api/service/{serviceName}/tags". An example of the payload is
available at
https://github.com/apache/ranger/blob/ranger-2.5/dev-support/ranger-docker/scripts/ranger-tagsync-tags.json.
2. Setup tag-based policies in Ranger to allow/deny access to resources based
on tags associated with them. Look for tile named 'Tag based policies' in
Ranger UI.
Hope this helps.
Madhan
On 2/6/25, 7:58 AM, "shaikmadarv...@gmail.com
<mailto:shaikmadarv...@gmail.com> <mailto:shaikmadarv...@gmail.com
<mailto:shaikmadarv...@gmail.com>>" <shaikmadarvali...@gmail.com
<mailto:shaikmadarvali...@gmail.com> <mailto:shaikmadarvali...@gmail.com
<mailto:shaikmadarvali...@gmail.com>>> wrote:
Hi Team,
I hope you're doing well. Could you please provide an update on the release
of version 2.5.0, specifically regarding the tag-based policies? We are
planning to implement ABAC with Starburst Enterprises and Ranger, and we
would appreciate any relevant documentation.
If there are additional blogs or resources available that could help,
please share them with us. I’m also happy to hop on a call if needed.
*https://ranger.apache.org/blogs/dynamic_expressions.html
<https://ranger.apache.org/blogs/dynamic_expressions.html>
<https://ranger.apache.org/blogs/dynamic_expressions.html>
<https://ranger.apache.org/blogs/dynamic_expressions.html>>
<https://ranger.apache.org/blogs/dynamic_expressions.html>https://ranger.apache.org/blogs/policy_model.html
<https://ranger.apache.org/blogs/dynamic_expressions.html>https://ranger.apache.org/blogs/policy_model.html>
<https://ranger.apache.org/blogs/dynamic_expressions.html>https://ranger.apache.org/blogs/policy_model.html>
<https://ranger.apache.org/blogs/dynamic_expressions.html&gt;https://ranger.apache.org/blogs/policy_model.html>>
<https://ranger.apache.org/blogs/policy_model.html>
<https://ranger.apache.org/blogs/policy_model.html>>
<https://ranger.apache.org/blogs/policy_model.html>>
<https://ranger.apache.org/blogs/policy_model.html&gt;>>*
Thank you for your assistance!
Best regards,
Munna
