[
https://issues.apache.org/jira/browse/RANGER-1302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15819666#comment-15819666
]
Abhay Kulkarni commented on RANGER-1302:
----------------------------------------
[~bosco] Yes, Bosco. They are key-words, like USER (in RANGER-698).
> Support FILENAME and BASE_FILENAME tokens for HDFS plugin
> ---------------------------------------------------------
>
> Key: RANGER-1302
> URL: https://issues.apache.org/jira/browse/RANGER-1302
> Project: Ranger
> Issue Type: Improvement
> Components: plugins
> Affects Versions: 0.7.0
> Reporter: Abhay Kulkarni
> Assignee: Abhay Kulkarni
> Fix For: 0.7.0
>
> Original Estimate: 72h
> Remaining Estimate: 72h
>
> Use case:
> It should be possible to allow access only to files directly under the
> directory (say, "/data/oracle") , and not to files under subdirectories of it
> (such as "/data/oracle/PII"). This cannot be done using wildcards, such as
> "/data/oracle/*", because it allows access recursively to all files under
> "/data/oracle/" including those under its subdirectories.
> As Ranger supports tokens (introduced by RANGER-698), a Ranger policy for
> ("/data/oracle/{FILENAME}) will meet this need, if FILENAME token holds the
> value of file being accessed. Moreover, a more specific policy such as
> "/data/oracle/{BASE_FILENAME}.txt" can match only files with ".txt"
> extension, where "." is used to demarcate extension from base filename.
>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
