bowenliang123 commented on issue #3186: URL: https://github.com/apache/incubator-kyuubi/issues/3186#issuecomment-1211649380
> does ranger policy support the catalog field? or support creating a policy with a dot-separated database, for example, a database/namespace named `abc.efg` in Spark SQL? It depends on each ranger service type. For Hive service type, only `database`-`table`. For Presto(and Trino since 2.3.0), `catalog`-`database`-`table`. Currently ranger lacks of direct support for Spark engine in policy definition. In our planned senarios, we applied all the access/masking/rowfilter policies in Hive type serivce. As we mix usings Hive/Iceberg tables in one session catalog with one Hive metastore. And the tables with same policies will be shared with HiveServer2, Kyuubi and Trino (in Trino plugin, use chaining plugin feature or customized version to chain Hive policies and then Trino's). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
