...

HDFS policy that allows all finance group users to access contents of /finance folder:

 Image Added

Hive policy that allows all finance group users to access contents of finance database:

 Image Added

2.2 Enhanced Policy model

...

HDFS policy that allows all finance group users to access contents of /finance folder, but denies access to users in interns group. Users in interns group will be denied the access even if they are part of finance group.

 Image Added

Hive policy that allows all finance group users to access contents of finance database, but denies access to users in interns group. Users in interns group will be denied the access even if they are part of finance group.

 Image Added

Let’s say one of the users in interns group, scott,  is working on an assignment that requires select access to finance database . To support this, the authorization policy for the database should be updated by adding a deny-exception, as shown below:

 Image Added

3       Policy Evaluation

...

To upgrade an existing Apache Ranger 0.5 version deployment, please do the following:-      

• stop ranger-admin and ranger-usersync applications

...

• backup existing database schemas used by Apache Ranger (for policy and audit stores)

...

• follow the instructions in the previous section (“Install Apache Ranger”) to install Apache Ranger from tag-policy branch. While installing Apache Ranger components, make sure to specify existing database schema details in install.properties. This will upgrade the database schemas with necessary changes.

5       Backward compatibility

...