| { |
| "id":3, |
| "name": "hive", |
| "implClass": "org.apache.ranger.services.hive.RangerServiceHive", |
| "label": "Hive Server2", |
| "description": "Hive Server2", |
| "guid": "3e1afb5a-184a-4e82-9d9c-87a5cacc243c", |
| "resources": |
| [ |
| { |
| "itemId": 1, |
| "name": "database", |
| "type": "string", |
| "level": 10, |
| "parent": "", |
| "mandatory": true, |
| "lookupSupported": true, |
| "recursiveSupported": false, |
| "excludesSupported": true, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions": { "wildCard":true, "ignoreCase":true }, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Hive Database", |
| "description": "Hive Database", |
| "accessTypeRestrictions":["select", "update", "create", "drop", "alter", "lock"], |
| "isValidLeaf": true |
| }, |
| |
| { |
| "itemId": 2, |
| "name": "table", |
| "type": "string", |
| "level": 20, |
| "parent": "database", |
| "mandatory": true, |
| "lookupSupported": true, |
| "recursiveSupported": false, |
| "excludesSupported": true, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions": { "wildCard":true, "ignoreCase":true }, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Hive Table", |
| "description": "Hive Table", |
| "accessTypeRestrictions":["select", "update", "create", "drop", "alter", "index", "lock"], |
| "isValidLeaf": true |
| }, |
| |
| { |
| "itemId": 3, |
| "name": "udf", |
| "type": "string", |
| "level": 20, |
| "parent": "database", |
| "mandatory": true, |
| "lookupSupported": true, |
| "recursiveSupported": false, |
| "excludesSupported": true, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions": { "wildCard":true, "ignoreCase":true }, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Hive UDF", |
| "description": "Hive UDF", |
| "accessTypeRestrictions":["select", "update", "create", "drop", "alter"], |
| "isValidLeaf": true |
| }, |
| |
| { |
| "itemId": 4, |
| "name": "column", |
| "type": "string", |
| "level": 30, |
| "parent": "table", |
| "mandatory": true, |
| "lookupSupported": true, |
| "recursiveSupported": false, |
| "excludesSupported": true, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher", |
| "matcherOptions": { "wildCard":true, "ignoreCase":true }, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Hive Column", |
| "description": "Hive Column", |
| "accessTypeRestrictions":["select", "update", "alter", "lock"], |
| "isValidLeaf": true |
| }, |
| |
| { |
| "itemId": 5, |
| "name": "url", |
| "type": "string", |
| "level": 10, |
| "parent": "", |
| "mandatory": true, |
| "lookupSupported": false, |
| "recursiveSupported": true, |
| "excludesSupported": false, |
| "matcher": "org.apache.ranger.plugin.resourcematcher.RangerPathResourceMatcher", |
| "matcherOptions": { "wildCard":true, "ignoreCase":false }, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "URL", |
| "description": "URL", |
| "accessTypeRestrictions":["read", "write"], |
| "isValidLeaf": true |
| } |
| ], |
| |
| "accessTypes": |
| [ |
| { |
| "itemId": 1, |
| "name": "select", |
| "label": "select" |
| }, |
| |
| { |
| "itemId": 2, |
| "name": "update", |
| "label": "update" |
| }, |
| |
| { |
| "itemId": 3, |
| "name": "create", |
| "label": "Create" |
| }, |
| |
| { |
| "itemId": 4, |
| "name": "drop", |
| "label": "Drop" |
| }, |
| |
| { |
| "itemId": 5, |
| "name": "alter", |
| "label": "Alter" |
| }, |
| |
| { |
| "itemId": 6, |
| "name": "index", |
| "label": "Index" |
| }, |
| |
| { |
| "itemId": 7, |
| "name": "lock", |
| "label": "Lock" |
| }, |
| |
| { |
| "itemId": 8, |
| "name": "all", |
| "label": "All", |
| "impliedGrants": |
| [ |
| "select", |
| "update", |
| "create", |
| "drop", |
| "alter", |
| "index", |
| "lock", |
| "read", |
| "write" |
| ] |
| }, |
| |
| { |
| "itemId": 9, |
| "name": "read", |
| "label": "Read" |
| }, |
| |
| { |
| "itemId": 10, |
| "name": "write", |
| "label": "Write" |
| } |
| ], |
| |
| "configs": |
| [ |
| { |
| "itemId": 1, |
| "name": "username", |
| "type": "string", |
| "mandatory": true, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Username" |
| }, |
| |
| { |
| "itemId": 2, |
| "name": "password", |
| "type": "password", |
| "mandatory": true, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Password" |
| }, |
| |
| { |
| "itemId": 3, |
| "name": "jdbc.driverClassName", |
| "type": "string", |
| "mandatory": true, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "defaultValue": "org.apache.hive.jdbc.HiveDriver" |
| }, |
| |
| { |
| "itemId": 4, |
| "name": "jdbc.url", |
| "type": "string", |
| "mandatory": true, |
| "defaultValue": "", |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"" |
| }, |
| |
| { |
| "itemId": 5, |
| "name": "commonNameForCertificate", |
| "type": "string", |
| "mandatory": false, |
| "validationRegEx":"", |
| "validationMessage": "", |
| "uiHint":"", |
| "label": "Common Name for Certificate" |
| } |
| ], |
| |
| "enums": |
| [ |
| |
| ], |
| |
| "contextEnrichers": |
| [ |
| { |
| "itemId":1, |
| "name" : "GeolocationEnricher_format_long", |
| "enricher" : "org.apache.ranger.plugin.contextenricher.RangerFileBasedGeolocationProvider", |
| "enricherOptions" : { |
| "FilePath":"/etc/ranger/geo/geo_long.txt", "ForceRead":"false", "IPInDotFormat":"false" |
| ,"geolocation.meta.prefix": "FORMAT_LONG_" |
| } |
| }, |
| { |
| "itemId":2, |
| "name" : "GeolocationEnricher_format_dot", |
| "enricher" : "org.apache.ranger.plugin.contextenricher.RangerFileBasedGeolocationProvider", |
| "enricherOptions" : { |
| "FilePath":"/etc/ranger/geo/geo.txt", "ForceRead":"false", "IPInDotFormat":"true" |
| ,"geolocation.meta.prefix": "FORMAT_DOT_" |
| } |
| } |
| ], |
| |
| "policyConditions": |
| [ |
| { |
| "itemId":1, |
| "name":"ScriptConditionEvaluator", |
| "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator", |
| "evaluatorOptions" : {"engineName":"JavaScript"}, |
| "label":"Script", |
| "description": "Script to execute" |
| } |
| , |
| { "itemId": 2, |
| "name":"country", |
| "evaluator":"org.apache.ranger.plugin.conditionevaluator.RangerSimpleMatcher", |
| "evaluatorOptions":{"CONTEXT_NAME":"country"} |
| } |
| , |
| { |
| "itemId":3, |
| "name":"not-accessed-together", |
| "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerHiveResourcesNotAccessedTogetherCondition", |
| "evaluatorOptions" : {}, |
| "label":"Not Accessed Together?", |
| "description": "List of Hive resources" |
| } |
| , |
| { |
| "itemId":4, |
| "name":"accessed-together", |
| "evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerHiveResourcesAccessedTogetherCondition", |
| "evaluatorOptions" : {"ui.isMultiline":"false" }, |
| "label":"Accessed Together?", |
| "description": "List of Hive resources" |
| } |
| ], |
| "dataMaskDef": { |
| "accessTypes": [ |
| { |
| "name": "select" |
| } |
| ], |
| "resources": [ |
| { |
| "itemId": 1, |
| "name": "database", |
| "type": "string", |
| "level": 10, |
| "parent": "", |
| "mandatory": true, |
| "lookupSupported": true, |
| "matcherOptions": { |
| "wildCard": "false" |
| }, |
| "uiHint":"{ \"singleValue\":true }", |
| "isValidLeaf": false |
| }, |
| { |
| "itemId": 2, |
| "name": "table", |
| "type": "string", |
| "level": 20, |
| "parent": "database", |
| "mandatory": true, |
| "lookupSupported": true, |
| "matcherOptions": { |
| "wildCard": "false" |
| }, |
| "uiHint":"{ \"singleValue\":true }", |
| "isValidLeaf": false |
| }, |
| { |
| "itemId": 4, |
| "name": "column", |
| "type": "string", |
| "level": 30, |
| "parent": "table", |
| "mandatory": true, |
| "lookupSupported": true, |
| "matcherOptions": { |
| "wildCard": "false" |
| }, |
| "uiHint":"{ \"singleValue\":true }", |
| "isValidLeaf": true |
| } |
| ], |
| "maskTypes": [ |
| { |
| "itemId": 1, |
| "name": "MASK", |
| "label": "Redact", |
| "description": "Replace lowercase with 'x', uppercase with 'X', digits with '0'", |
| "transformer": "mask({col})", |
| "dataMaskOptions": { |
| } |
| }, |
| { |
| "itemId": 2, |
| "name": "MASK_SHOW_LAST_4", |
| "label": "Partial mask: show last 4", |
| "description": "Show last 4 characters; replace rest with 'x'", |
| "transformer": "mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')" |
| }, |
| { |
| "itemId": 3, |
| "name": "MASK_SHOW_FIRST_4", |
| "label": "Partial mask: show first 4", |
| "description": "Show first 4 characters; replace rest with 'x'", |
| "transformer": "mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')" |
| }, |
| { |
| "itemId": 4, |
| "name": "MASK_HASH", |
| "label": "Hash", |
| "description": "Hash the value", |
| "transformer": "mask_hash({col})" |
| }, |
| { |
| "itemId": 5, |
| "name": "MASK_NULL", |
| "label": "Nullify", |
| "description": "Replace with NULL" |
| }, |
| { |
| "itemId": 6, |
| "name": "MASK_NONE", |
| "label": "Unmasked (retain original value)", |
| "description": "No masking" |
| }, |
| { |
| "itemId": 12, |
| "name": "MASK_DATE_SHOW_YEAR", |
| "label": "Date: show only year", |
| "description": "Date: show only year", |
| "transformer": "mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)" |
| }, |
| { |
| "itemId": 13, |
| "name": "CUSTOM", |
| "label": "Custom", |
| "description": "Custom" |
| } |
| ] |
| }, |
| "rowFilterDef": { |
| "accessTypes": [ |
| { |
| "name": "select" |
| } |
| ], |
| "resources": [ |
| { |
| "itemId": 1, |
| "name": "database", |
| "type": "string", |
| "level": 10, |
| "parent": "", |
| "mandatory": true, |
| "lookupSupported": true, |
| "matcherOptions": { |
| "wildCard": "false" |
| }, |
| "uiHint": "{ \"singleValue\":true }", |
| "isValidLeaf": false |
| }, |
| { |
| "itemId": 2, |
| "name": "table", |
| "type": "string", |
| "level": 20, |
| "parent": "database", |
| "mandatory": true, |
| "lookupSupported": true, |
| "matcherOptions": { |
| "wildCard": "false" |
| }, |
| "uiHint": "{ \"singleValue\":true }", |
| "isValidLeaf": true |
| } |
| ] |
| } |
| } |
| |