RANGER-4690: updated Hive plugin to fix incorrect policy version in access audits in case of deny due to masking/row-filter policies
Signed-off-by: Madhan Neethiraj <madhan@apache.org>
diff --git a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
index 44c66df..9b25e2b 100644
--- a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
+++ b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
@@ -1068,6 +1068,7 @@
result.setIsAllowed(false);
result.setPolicyId(rowFilterResult.getPolicyId());
+ result.setPolicyVersion(rowFilterResult.getPolicyVersion());
result.setReason("User does not have access to all rows of the table");
} else {
// check if masking is enabled for any column in the table/view
@@ -1082,6 +1083,7 @@
result.setIsAllowed(false);
result.setPolicyId(dataMaskResult.getPolicyId());
+ result.setPolicyVersion(dataMaskResult.getPolicyVersion());
result.setReason("User does not have access to unmasked column values");
}
}
