blob: 32d92b003fc92f3c21190e5e768cbe1aeaa65b5b [file] [log] [blame]
{
"id":3,
"name": "hive",
"implClass": "org.apache.ranger.services.hive.RangerServiceHive",
"label": "Hive Server2",
"description": "Hive Server2",
"guid": "3e1afb5a-184a-4e82-9d9c-87a5cacc243c",
"resources":
[
{
"itemId": 1,
"name": "database",
"type": "string",
"level": 10,
"parent": "",
"mandatory": true,
"lookupSupported": true,
"recursiveSupported": false,
"excludesSupported": true,
"matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
"matcherOptions": { "wildCard":true, "ignoreCase":true },
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Hive Database",
"description": "Hive Database",
"accessTypeRestrictions":["select", "update", "create", "drop", "alter", "lock"],
"isValidLeaf": true
},
{
"itemId": 2,
"name": "table",
"type": "string",
"level": 20,
"parent": "database",
"mandatory": true,
"lookupSupported": true,
"recursiveSupported": false,
"excludesSupported": true,
"matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
"matcherOptions": { "wildCard":true, "ignoreCase":true },
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Hive Table",
"description": "Hive Table",
"accessTypeRestrictions":["select", "update", "create", "drop", "alter", "index", "lock"],
"isValidLeaf": true
},
{
"itemId": 3,
"name": "udf",
"type": "string",
"level": 20,
"parent": "database",
"mandatory": true,
"lookupSupported": true,
"recursiveSupported": false,
"excludesSupported": true,
"matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
"matcherOptions": { "wildCard":true, "ignoreCase":true },
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Hive UDF",
"description": "Hive UDF",
"accessTypeRestrictions":["select", "update", "create", "drop", "alter"],
"isValidLeaf": true
},
{
"itemId": 4,
"name": "column",
"type": "string",
"level": 30,
"parent": "table",
"mandatory": true,
"lookupSupported": true,
"recursiveSupported": false,
"excludesSupported": true,
"matcher": "org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher",
"matcherOptions": { "wildCard":true, "ignoreCase":true },
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Hive Column",
"description": "Hive Column",
"accessTypeRestrictions":["select", "update", "alter", "lock"],
"isValidLeaf": true
},
{
"itemId": 5,
"name": "url",
"type": "string",
"level": 10,
"parent": "",
"mandatory": true,
"lookupSupported": false,
"recursiveSupported": true,
"excludesSupported": false,
"matcher": "org.apache.ranger.plugin.resourcematcher.RangerPathResourceMatcher",
"matcherOptions": { "wildCard":true, "ignoreCase":false },
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "URL",
"description": "URL",
"accessTypeRestrictions":["read", "write"],
"isValidLeaf": true
}
],
"accessTypes":
[
{
"itemId": 1,
"name": "select",
"label": "select"
},
{
"itemId": 2,
"name": "update",
"label": "update"
},
{
"itemId": 3,
"name": "create",
"label": "Create"
},
{
"itemId": 4,
"name": "drop",
"label": "Drop"
},
{
"itemId": 5,
"name": "alter",
"label": "Alter"
},
{
"itemId": 6,
"name": "index",
"label": "Index"
},
{
"itemId": 7,
"name": "lock",
"label": "Lock"
},
{
"itemId": 8,
"name": "all",
"label": "All",
"impliedGrants":
[
"select",
"update",
"create",
"drop",
"alter",
"index",
"lock",
"read",
"write"
]
},
{
"itemId": 9,
"name": "read",
"label": "Read"
},
{
"itemId": 10,
"name": "write",
"label": "Write"
}
],
"configs":
[
{
"itemId": 1,
"name": "username",
"type": "string",
"mandatory": true,
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Username"
},
{
"itemId": 2,
"name": "password",
"type": "password",
"mandatory": true,
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Password"
},
{
"itemId": 3,
"name": "jdbc.driverClassName",
"type": "string",
"mandatory": true,
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"defaultValue": "org.apache.hive.jdbc.HiveDriver"
},
{
"itemId": 4,
"name": "jdbc.url",
"type": "string",
"mandatory": true,
"defaultValue": "",
"validationRegEx":"",
"validationMessage": "",
"uiHint":""
},
{
"itemId": 5,
"name": "commonNameForCertificate",
"type": "string",
"mandatory": false,
"validationRegEx":"",
"validationMessage": "",
"uiHint":"",
"label": "Common Name for Certificate"
}
],
"enums":
[
],
"contextEnrichers":
[
{
"itemId":1,
"name" : "GeolocationEnricher_format_long",
"enricher" : "org.apache.ranger.plugin.contextenricher.RangerFileBasedGeolocationProvider",
"enricherOptions" : {
"FilePath":"/etc/ranger/geo/geo_long.txt", "ForceRead":"false", "IPInDotFormat":"false"
,"geolocation.meta.prefix": "FORMAT_LONG_"
}
},
{
"itemId":2,
"name" : "GeolocationEnricher_format_dot",
"enricher" : "org.apache.ranger.plugin.contextenricher.RangerFileBasedGeolocationProvider",
"enricherOptions" : {
"FilePath":"/etc/ranger/geo/geo.txt", "ForceRead":"false", "IPInDotFormat":"true"
,"geolocation.meta.prefix": "FORMAT_DOT_"
}
}
],
"policyConditions":
[
{
"itemId":1,
"name":"ScriptConditionEvaluator",
"evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator",
"evaluatorOptions" : {"engineName":"JavaScript"},
"label":"Script",
"description": "Script to execute"
}
,
{ "itemId": 2,
"name":"country",
"evaluator":"org.apache.ranger.plugin.conditionevaluator.RangerSimpleMatcher",
"evaluatorOptions":{"CONTEXT_NAME":"country"}
}
,
{
"itemId":3,
"name":"not-accessed-together",
"evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerHiveResourcesNotAccessedTogetherCondition",
"evaluatorOptions" : {},
"label":"Not Accessed Together?",
"description": "List of Hive resources"
}
,
{
"itemId":4,
"name":"accessed-together",
"evaluator": "org.apache.ranger.plugin.conditionevaluator.RangerHiveResourcesAccessedTogetherCondition",
"evaluatorOptions" : {"ui.isMultiline":"false" },
"label":"Accessed Together?",
"description": "List of Hive resources"
}
],
"dataMaskDef": {
"accessTypes": [
{
"name": "select"
}
],
"resources": [
{
"itemId": 1,
"name": "database",
"type": "string",
"level": 10,
"parent": "",
"mandatory": true,
"lookupSupported": true,
"matcherOptions": {
"wildCard": "false"
},
"uiHint":"{ \"singleValue\":true }",
"isValidLeaf": false
},
{
"itemId": 2,
"name": "table",
"type": "string",
"level": 20,
"parent": "database",
"mandatory": true,
"lookupSupported": true,
"matcherOptions": {
"wildCard": "false"
},
"uiHint":"{ \"singleValue\":true }",
"isValidLeaf": false
},
{
"itemId": 4,
"name": "column",
"type": "string",
"level": 30,
"parent": "table",
"mandatory": true,
"lookupSupported": true,
"matcherOptions": {
"wildCard": "false"
},
"uiHint":"{ \"singleValue\":true }",
"isValidLeaf": true
}
],
"maskTypes": [
{
"itemId": 1,
"name": "MASK",
"label": "Redact",
"description": "Replace lowercase with 'x', uppercase with 'X', digits with '0'",
"transformer": "mask({col})",
"dataMaskOptions": {
}
},
{
"itemId": 2,
"name": "MASK_SHOW_LAST_4",
"label": "Partial mask: show last 4",
"description": "Show last 4 characters; replace rest with 'x'",
"transformer": "mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')"
},
{
"itemId": 3,
"name": "MASK_SHOW_FIRST_4",
"label": "Partial mask: show first 4",
"description": "Show first 4 characters; replace rest with 'x'",
"transformer": "mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')"
},
{
"itemId": 4,
"name": "MASK_HASH",
"label": "Hash",
"description": "Hash the value",
"transformer": "mask_hash({col})"
},
{
"itemId": 5,
"name": "MASK_NULL",
"label": "Nullify",
"description": "Replace with NULL"
},
{
"itemId": 6,
"name": "MASK_NONE",
"label": "Unmasked (retain original value)",
"description": "No masking"
},
{
"itemId": 12,
"name": "MASK_DATE_SHOW_YEAR",
"label": "Date: show only year",
"description": "Date: show only year",
"transformer": "mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)"
},
{
"itemId": 13,
"name": "CUSTOM",
"label": "Custom",
"description": "Custom"
}
]
},
"rowFilterDef": {
"accessTypes": [
{
"name": "select"
}
],
"resources": [
{
"itemId": 1,
"name": "database",
"type": "string",
"level": 10,
"parent": "",
"mandatory": true,
"lookupSupported": true,
"matcherOptions": {
"wildCard": "false"
},
"uiHint": "{ \"singleValue\":true }",
"isValidLeaf": false
},
{
"itemId": 2,
"name": "table",
"type": "string",
"level": 20,
"parent": "database",
"mandatory": true,
"lookupSupported": true,
"matcherOptions": {
"wildCard": "false"
},
"uiHint": "{ \"singleValue\":true }",
"isValidLeaf": true
}
]
}
}