How to restrict few tables and columns in Druid

[kalwa rakesh]

Hello Team,

I am very new to Druid, Trying to explore capabilities of Druid.

1. Can we restrict particular table or column to access for user specific? 

2. Are there are any Ranger specific restrictions available in Druid?

Thanks in Advance,

Rakesh

[Nishant Bangarwa]

Hi Rakesh, 

You can implement table/datasource level authorization in druid by implementing an extension following the steps here - https://groups.google.com/d/msgid/druid-user/de5db44e-9331-4538-a707-88506bb93c45%40googlegroups.com

Row/Column level security and ranger integration is still not there in Druid.

Easy way to achieve above is to use Apache HIVE to query druid (For details refer - https://cwiki.apache.org/confluence/display/Hive/Druid+Integration)

this will allow you to use the security capabilities of HIVE to define Row/Column level access restrictions using Ranger. (https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.1/bk_data-access/content/config_authorization.html) 

--
You received this message because you are subscribed to the Google Groups "Druid User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to druid-user+...@googlegroups.com.
To post to this group, send email to druid...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/druid-user/0671e375-40ce-48c7-8778-430ce3cd1006%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Madhav Puri]

Hello,

We have a use case to implement row level filtering and column masking with Druid. 

I came across this old thread and wondering if the suggestion of using Hive + Druid is still the best? I found Druid docs listing support for Apache Ranger [here] but I am not sure if that includes support for row level filtering and column masking through Ranger policies.

Appreciate your inputs on this.

Thank you.

--

Madhav

[skneeli]

Recently we implemented Ldap authentication using which we r restricting data source level access. We r also trying to to extend it to  column level restrictions any inputs will be appreciated.

Sent from my Galaxy

To view this discussion on the web visit https://groups.google.com/d/msgid/druid-user/1bcfa55e-7af6-4959-93e8-66a6ce999ec6n%40googlegroups.com.