[==========] Running 22 tests from 3 test suites.
[----------] Global test environment set-up.
[----------] 19 tests from RangerClientTest
[ RUN ] RangerClientTest.TestAuthorizeCreateTableUnauthorized
[ OK ] RangerClientTest.TestAuthorizeCreateTableUnauthorized (2 ms)
[ RUN ] RangerClientTest.TestAuthorizeCreateTableAuthorized
[ OK ] RangerClientTest.TestAuthorizeCreateTableAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeListNoTables
[ OK ] RangerClientTest.TestAuthorizeListNoTables (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeListNoTablesAuthorized
[ OK ] RangerClientTest.TestAuthorizeListNoTablesAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeMetadataSubsetOfTablesAuthorized
[ OK ] RangerClientTest.TestAuthorizeMetadataSubsetOfTablesAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeMetadataAllAuthorized
[ OK ] RangerClientTest.TestAuthorizeMetadataAllAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeMetadataAllNonRanger
WARNING: Logging before InitGoogleLogging() is written to STDERR
W20260618 14:04:14.139569 14202 ranger_client.cc:528] Denying action on table with invalid name .bar. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
W20260618 14:04:14.139683 14202 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[ OK ] RangerClientTest.TestAuthorizeMetadataAllNonRanger (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeMetadataNoneAuthorizedContainsNonRanger
W20260618 14:04:14.140153 14202 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
W20260618 14:04:14.140190 14202 ranger_client.cc:528] Denying action on table with invalid name .bar. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[ OK ] RangerClientTest.TestAuthorizeMetadataNoneAuthorizedContainsNonRanger (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeMetadataAllAuthorizedContainsNonRanger
W20260618 14:04:14.140623 14202 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[ OK ] RangerClientTest.TestAuthorizeMetadataAllAuthorizedContainsNonRanger (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeScanSubsetAuthorized
[ OK ] RangerClientTest.TestAuthorizeScanSubsetAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeScanAllColumnsAuthorized
[ OK ] RangerClientTest.TestAuthorizeScanAllColumnsAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeScanNoColumnsAuthorized
[ OK ] RangerClientTest.TestAuthorizeScanNoColumnsAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeActionsNoneAuthorized
[ OK ] RangerClientTest.TestAuthorizeActionsNoneAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeActionsSomeAuthorized
[ OK ] RangerClientTest.TestAuthorizeActionsSomeAuthorized (0 ms)
[ RUN ] RangerClientTest.TestAuthorizeActionsAllAuthorized
[ OK ] RangerClientTest.TestAuthorizeActionsAllAuthorized (0 ms)
[ RUN ] RangerClientTest.TestInvalidJARFails
E20260618 14:04:14.143816 14202 ranger_client.cc:390] --ranger_jar_path has invalid JAR file path: /this/is/not/a/real/location/hopefully.jar
[ OK ] RangerClientTest.TestInvalidJARFails (0 ms)
[ RUN ] RangerClientTest.TestEmptyKeytabFile
E20260618 14:04:14.144302 14202 ranger_client.cc:397] --keytab_file is not set
[ OK ] RangerClientTest.TestEmptyKeytabFile (0 ms)
[ RUN ] RangerClientTest.TestMultipleInvalidJARsLeftUnchecked
[ OK ] RangerClientTest.TestMultipleInvalidJARsLeftUnchecked (0 ms)
[ RUN ] RangerClientTest.TestDefaultJARPath
[ OK ] RangerClientTest.TestDefaultJARPath (0 ms)
[----------] 19 tests from RangerClientTest (10 ms total)
[----------] 2 tests from RangerClientTestExtraJVMArgs
[ RUN ] RangerClientTestExtraJVMArgs.SmokeTest
I20260618 14:04:14.145536 14202 mini_postgres.cc:62] Running initdb...
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.
The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".
Data page checksums are disabled.
creating directory /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok
initdb: warning: enabling "trust" authentication for local connections
initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.
Success. You can now start the database server using:
/tmp/dist-test-task_uppBT/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/postgres -l logfile start
2026-06-18 14:04:16.625 UTC [14219] LOG: starting PostgreSQL 17.2 on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0, 64-bit
2026-06-18 14:04:16.625 UTC [14219] LOG: listening on IPv4 address "127.0.0.1", port 53271
2026-06-18 14:04:16.629 UTC [14219] LOG: listening on Unix socket "/tmp/.s.PGSQL.53271"
2026-06-18 14:04:16.634 UTC [14224] LOG: database system was shut down at 2026-06-18 14:04:15 UTC
2026-06-18 14:04:16.639 UTC [14219] LOG: database system is ready to accept connections
I20260618 14:04:18.404965 14202 mini_postgres.cc:96] Postgres bound to 53271
2026-06-18 14:04:18.409 UTC [14230] FATAL: database "slave" does not exist
127.0.0.1:53271 - accepting connections
I20260618 14:04:18.410184 14202 mini_ranger.cc:162] Starting Ranger...
I20260618 14:04:18.426784 14202 mini_ranger.cc:85] Created miniranger Postgres user
I20260618 14:04:18.489071 14202 mini_ranger.cc:88] Created ranger Postgres database
I20260618 14:04:18.489158 14202 mini_ranger.cc:179] Starting Ranger out of /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/ranger-admin
2026-06-18 14:04:18,853 [I] DB FLAVOR :POSTGRES
2026-06-18 14:04:18,853 [I] --------- Verifying Ranger DB connection ---------
2026-06-18 14:04:18,853 [I] Checking connection..
2026-06-18 14:04:18,853 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select 1;"
2026-06-18 14:04:19,206 [I] Checking connection passed.
2026-06-18 14:04:19,207 [I] --------- Verifying version history table ---------
2026-06-18 14:04:19,207 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-06-18 14:04:19,533 [I] Table x_db_version_h does not exist in database ranger
2026-06-18 14:04:19,534 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-06-18 14:04:19,850 [I] Table x_db_version_h does not exist in database ranger
2026-06-18 14:04:19,851 [I] Importing x_db_version_h table schema to database ranger from file: create_dbversion_catalog.sql
2026-06-18 14:04:19,851 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/db/postgres/create_dbversion_catalog.sql
2026-06-18 14:04:20.139 UTC [14346] WARNING: there is no transaction in progress
2026-06-18 14:04:20,152 [I] create_dbversion_catalog.sql file imported successfully
2026-06-18 14:04:20,152 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-06-18 14:04:20,454 [I] Table x_db_version_h already exists in database 'ranger'
2026-06-18 14:04:20,455 [I] --------- Importing Ranger Core DB Schema ---------
2026-06-18 14:04:20,455 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'Y';"
2026-06-18 14:04:20,786 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'N';"
2026-06-18 14:04:21,135 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('CORE_DB_SCHEMA', current_timestamp, 'Ranger 2.6.0', current_timestamp, 'dist-test-slave-xnbj.c.gcp-upstream.internal','N') ;"
2026-06-18 14:04:21,447 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-06-18 14:04:21,763 [I] Table x_portal_user does not exist in database ranger
2026-06-18 14:04:21,764 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-06-18 14:04:22,054 [I] Table x_policy_ref_group does not exist in database ranger
2026-06-18 14:04:22,055 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-06-18 14:04:22,350 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-06-18 14:04:22,624 [I] Importing DB schema to database ranger from file: ranger_core_db_postgres.sql
2026-06-18 14:04:22,624 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/db/postgres/optimized/current/ranger_core_db_postgres.sql
2026-06-18 14:04:23.485 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.499 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.510 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.521 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.531 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.542 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.587 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.593 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.603 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.613 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.622 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.632 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.640 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.649 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.655 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.663 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.670 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.676 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.681 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.687 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.691 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:23.695 UTC [14544] WARNING: there is no transaction in progress
2026-06-18 14:04:24,133 [I] ranger_core_db_postgres.sql file imported successfully
2026-06-18 14:04:24,133 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "update x_db_version_h set inst_by='Ranger 2.6.0' where active='Y' and updated_by='localhost';"
2026-06-18 14:04:24,450 [I] Patches status entries updated from base ranger version to current installed ranger version:Ranger 2.6.0
2026-06-18 14:04:24,450 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-06-18 14:04:24,802 [I] Table x_portal_user already exists in database 'ranger'
2026-06-18 14:04:24,803 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-06-18 14:04:25,163 [I] Table x_policy_ref_group already exists in database 'ranger'
2026-06-18 14:04:25,164 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-06-18 14:04:25,522 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-06-18 14:04:25,862 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "update x_db_version_h set active='Y' where version='CORE_DB_SCHEMA' and active='N' and updated_by='dist-test-slave-xnbj.c.gcp-upstream.internal';"
2026-06-18 14:04:26,165 [I] CORE_DB_SCHEMA import status has been updated
2026-06-18 14:04:26,166 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:53271/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'DB_PATCHES' and inst_by = 'Ranger 2.6.0' and active = 'Y';"
2026-06-18 14:04:26,529 [I] DB_PATCHES have already been applied
I20260618 14:04:26.535220 14202 mini_ranger.cc:192] Using Ranger class path: /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/ranger-admin:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/ews/lib/*:/usr/lib/jvm/temurin-17-jdk-amd64/lib/*:/tmp/dist-test-task_uppBT/thirdparty/src/hadoop-3.4.1/*:/tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/ews/webapp
I20260618 14:04:26.535288 14202 mini_ranger.cc:194] Using host: 127.0.0.1
I20260618 14:04:26.537151 14202 mini_ranger.cc:240] Ranger admin URL: http://127.0.0.1:35737
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer getKeyManagers
WARNING: Config 'ranger.keystore.file' or 'ranger.service.https.attrib.keystore.file' is not found or contains blank value
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer getTrustManagers
WARNING: Config 'ranger.truststore.file' is not found or contains blank value!
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Deriving webapp folder from catalina.base property. folder=/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/ranger-admin/ews/webapp
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Webapp file =/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/ranger-admin/ews/webapp, webAppName = /
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Adding webapp [/] = path [/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/ranger-admin/ews/webapp] .....
Jun 18, 2026 2:04:27 PM org.apache.catalina.core.StandardContext setPath
WARNING: A context path must either be an empty string or start with a '/' and do not end with a '/'. The path [/] does not meet these criteria and has been changed to []
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Finished init of webapp [/] = path [/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0/ranger-admin/ews/webapp].
Jun 18, 2026 2:04:27 PM org.apache.ranger.server.tomcat.EmbeddedServer startServer
INFO: Server Name : miniranger
Jun 18, 2026 2:04:27 PM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-35737"]
Jun 18, 2026 2:04:27 PM org.apache.catalina.util.LifecycleBase handleSubClassException
SEVERE: Failed to initialize component [Connector["http-nio-35737"]]
org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1027)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:122)
at org.apache.catalina.core.StandardService.initInternal(StandardService.java:525)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:122)
at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:986)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:122)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:155)
at org.apache.catalina.startup.Tomcat.start(Tomcat.java:438)
at org.apache.ranger.server.tomcat.EmbeddedServer.startServer(EmbeddedServer.java:351)
at org.apache.ranger.server.tomcat.EmbeddedServer.start(EmbeddedServer.java:317)
at org.apache.ranger.server.tomcat.EmbeddedServer.main(EmbeddedServer.java:95)
Caused by: java.net.BindException: Address already in use
at java.base/sun.nio.ch.Net.bind0(Native Method)
at java.base/sun.nio.ch.Net.bind(Net.java:567)
at java.base/sun.nio.ch.ServerSocketChannelImpl.netBind(ServerSocketChannelImpl.java:337)
at java.base/sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:294)
at org.apache.tomcat.util.net.NioEndpoint.initServerSocket(NioEndpoint.java:268)
at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:223)
at org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1373)
at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1386)
at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:663)
at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:80)
at org.apache.catalina.connector.Connector.initInternal(Connector.java:1025)
... 10 more
Jun 18, 2026 2:04:27 PM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Jun 18, 2026 2:04:27 PM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.98]
Jun 18, 2026 2:04:28 PM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
Jun 18, 2026 2:04:33 PM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Jun 18, 2026 2:04:33 PM org.apache.catalina.core.ApplicationContext log
INFO: Initializing Spring root WebApplicationContext
[EL Warning]: metadata: 2026-06-18 14:04:37.717--ServerSession(1308639016)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
Jun 18, 2026 2:04:57 PM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
org.apache.ranger.rest
org.apache.ranger.common
xa.rest
Jun 18, 2026 2:04:57 PM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
class org.apache.ranger.rest.SecurityZoneREST
class org.apache.ranger.rest.XKeyREST
class org.apache.ranger.rest.AssetREST
class org.apache.ranger.rest.TagREST
class org.apache.ranger.rest.XUserREST
class org.apache.ranger.rest.MetricsREST
class org.apache.ranger.rest.PublicAPIs
class org.apache.ranger.rest.PublicAPIsv2
class org.apache.ranger.rest.XAuditREST
class org.apache.ranger.rest.ServiceREST
class org.apache.ranger.rest.RoleREST
class org.apache.ranger.rest.UserREST
Jun 18, 2026 2:04:57 PM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Provider classes found:
class org.apache.ranger.common.RangerJsonMappingExceptionMapper
class org.apache.ranger.common.RangerJAXBContextResolver
class org.apache.ranger.common.RangerJsonParserExceptionMapper
class org.apache.ranger.common.RangerJsonProvider
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.servlet.SpringServlet getContext
INFO: Using default applicationContext
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonMappingExceptionMapper, of type org.apache.ranger.common.RangerJsonMappingExceptionMapper as a provider class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonParserExceptionMapper, of type org.apache.ranger.common.RangerJsonParserExceptionMapper as a provider class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonProvider, of type org.apache.ranger.common.RangerJsonProvider as a provider class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, assetREST, of type org.apache.ranger.rest.AssetREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, metricsREST, of type org.apache.ranger.rest.MetricsREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIs, of type org.apache.ranger.rest.PublicAPIs as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIsv2, of type org.apache.ranger.rest.PublicAPIsv2 as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, roleREST, of type org.apache.ranger.rest.RoleREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, securityZoneREST, of type org.apache.ranger.rest.SecurityZoneREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, serviceREST, of type org.apache.ranger.rest.ServiceREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, tagREST, of type org.apache.ranger.rest.TagREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, userREST, of type org.apache.ranger.rest.UserREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XAuditREST, of type org.apache.ranger.rest.XAuditREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XKeyREST, of type org.apache.ranger.rest.XKeyREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XUserREST, of type org.apache.ranger.rest.XUserREST as a root resource class
Jun 18, 2026 2:04:57 PM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.19.4 05/24/2017 03:20 PM'
Jun 18, 2026 2:04:58 PM com.sun.jersey.spi.inject.Errors processErrorMessages
WARNING: The following warnings have been detected with resource and/or provider classes:
WARNING: A HTTP GET method, public void org.apache.ranger.rest.RoleREST.getRolesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInExcel(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInCsv(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) throws java.io.IOException, MUST return a non-void type.
WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,java.lang.Boolean), MUST return a non-void type.
I20260618 14:06:26.575554 14202 mini_ranger.cc:161] Time spent starting Ranger: real 128.165s user 0.041s sys 0.034s
/home/jenkins-slave/workspace/build_and_test_flaky/src/kudu/ranger/ranger_client-test.cc:429: Failure
Failed
Bad status: Timed out: process with PID 14701 is not yet bound to any port at the specified addresses; last attempt running lsof returned 'Not found: could not find pattern of a bound port in lsof output: p14701
f334
n127.0.0.1:57102->127.0.0.1:53271
f335
n127.0.0.1:57116->127.0.0.1:53271
f336
n127.0.0.1:57122->127.0.0.1:53271
f337
n127.0.0.1:57134->127.0.0.1:53271
f338
n127.0.0.1:57136->127.0.0.1:53271'
I20260618 14:06:26.575771 14202 mini_ranger.cc:67] Stopping Ranger...
I20260618 14:06:26.606597 14202 mini_ranger.cc:69] Stopped Ranger
2026-06-18 14:06:26.606 UTC [14219] LOG: received smart shutdown request
2026-06-18 14:06:26.610 UTC [14219] LOG: background worker "logical replication launcher" (PID 14227) exited with exit code 1
2026-06-18 14:06:26.610 UTC [14222] LOG: shutting down
2026-06-18 14:06:26.612 UTC [14222] LOG: checkpoint starting: shutdown immediate
2026-06-18 14:06:27.028 UTC [14222] LOG: checkpoint complete: wrote 1511 buffers (9.2%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.023 s, sync=0.390 s, total=0.418 s; sync files=848, longest=0.004 s, average=0.001 s; distance=8863 kB, estimate=8863 kB; lsn=0/1D225F8, redo lsn=0/1D225F8
2026-06-18 14:06:27.034 UTC [14219] LOG: database system is shut down
I20260618 14:06:27.042114 14202 test_util.cc:182] -----------------------------------------------
I20260618 14:06:27.042203 14202 test_util.cc:183] Had failures, leaving test files at /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1781791454132221-14202-0
[ FAILED ] RangerClientTestExtraJVMArgs.SmokeTest (132896 ms)
[ RUN ] RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments
[WARNING] /home/jenkins-slave/workspace/build_and_test_flaky/thirdparty/src/googletest-release-1.12.1/googletest/src/gtest-death-test.cc:1108:: Death tests use fork(), which is unsafe particularly in a threaded context. For this test, Google Test detected 2 threads. See https://github.com/google/googletest/blob/master/docs/advanced.md#death-tests-and-threads for more explanation and suggested solutions, especially if this is the last message you see before your test times out.
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.
The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".
Data page checksums are disabled.
creating directory /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments.1781791454132221-14863-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok
Success. You can now start the database server using:
/tmp/dist-test-task_uppBT/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments.1781791454132221-14863-0/postgres -l logfile start
127.0.0.1:59663 - accepting connections
[EL Warning]: metadata: 2026-06-18 14:06:48.903--ServerSession(715564610)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
[ OK ] RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments (40654 ms)
[----------] 2 tests from RangerClientTestExtraJVMArgs (173551 ms total)
[----------] 1 test from RangerClientTestBase
[ RUN ] RangerClientTestBase.TestLogging
I20260618 14:07:07.697062 14202 mini_postgres.cc:62] Running initdb...
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.
The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".
Data page checksums are disabled.
creating directory /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok
initdb: warning: enabling "trust" authentication for local connections
initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.
Success. You can now start the database server using:
/tmp/dist-test-task_uppBT/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/postgres -l logfile start
2026-06-18 14:07:10.258 UTC [15435] LOG: starting PostgreSQL 17.2 on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0, 64-bit
2026-06-18 14:07:10.258 UTC [15435] LOG: listening on IPv4 address "127.0.0.1", port 40163
2026-06-18 14:07:10.262 UTC [15435] LOG: listening on Unix socket "/tmp/.s.PGSQL.40163"
2026-06-18 14:07:10.266 UTC [15440] LOG: database system was shut down at 2026-06-18 14:07:08 UTC
2026-06-18 14:07:10.270 UTC [15435] LOG: database system is ready to accept connections
I20260618 14:07:12.022797 14202 mini_postgres.cc:96] Postgres bound to 40163
2026-06-18 14:07:12.027 UTC [15446] FATAL: database "slave" does not exist
127.0.0.1:40163 - accepting connections
I20260618 14:07:12.028008 14202 mini_ranger.cc:162] Starting Ranger...
I20260618 14:07:12.044417 14202 mini_ranger.cc:85] Created miniranger Postgres user
I20260618 14:07:12.107133 14202 mini_ranger.cc:88] Created ranger Postgres database
I20260618 14:07:12.107234 14202 mini_ranger.cc:179] Starting Ranger out of /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-admin
2026-06-18 14:07:12,457 [I] DB FLAVOR :POSTGRES
2026-06-18 14:07:12,458 [I] --------- Verifying Ranger DB connection ---------
2026-06-18 14:07:12,458 [I] Checking connection..
2026-06-18 14:07:12,458 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select 1;"
2026-06-18 14:07:12,753 [I] Checking connection passed.
2026-06-18 14:07:12,753 [I] --------- Verifying version history table ---------
2026-06-18 14:07:12,753 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-06-18 14:07:13,075 [I] Table x_db_version_h does not exist in database ranger
2026-06-18 14:07:13,076 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-06-18 14:07:13,404 [I] Table x_db_version_h does not exist in database ranger
2026-06-18 14:07:13,404 [I] Importing x_db_version_h table schema to database ranger from file: create_dbversion_catalog.sql
2026-06-18 14:07:13,404 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/db/postgres/create_dbversion_catalog.sql
2026-06-18 14:07:13.744 UTC [15561] WARNING: there is no transaction in progress
2026-06-18 14:07:13,769 [I] create_dbversion_catalog.sql file imported successfully
2026-06-18 14:07:13,769 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-06-18 14:07:14,071 [I] Table x_db_version_h already exists in database 'ranger'
2026-06-18 14:07:14,071 [I] --------- Importing Ranger Core DB Schema ---------
2026-06-18 14:07:14,071 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'Y';"
2026-06-18 14:07:14,377 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'N';"
2026-06-18 14:07:14,685 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('CORE_DB_SCHEMA', current_timestamp, 'Ranger 2.6.0', current_timestamp, 'dist-test-slave-xnbj.c.gcp-upstream.internal','N') ;"
2026-06-18 14:07:14,988 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-06-18 14:07:15,339 [I] Table x_portal_user does not exist in database ranger
2026-06-18 14:07:15,339 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-06-18 14:07:15,636 [I] Table x_policy_ref_group does not exist in database ranger
2026-06-18 14:07:15,636 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-06-18 14:07:15,943 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-06-18 14:07:16,288 [I] Importing DB schema to database ranger from file: ranger_core_db_postgres.sql
2026-06-18 14:07:16,288 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/db/postgres/optimized/current/ranger_core_db_postgres.sql
2026-06-18 14:07:17.120 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.132 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.144 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.155 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.166 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.178 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.241 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.249 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.262 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.271 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.281 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.291 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.299 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.308 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.313 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.321 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.329 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.336 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.341 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.347 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.351 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17.355 UTC [15759] WARNING: there is no transaction in progress
2026-06-18 14:07:17,795 [I] ranger_core_db_postgres.sql file imported successfully
2026-06-18 14:07:17,795 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "update x_db_version_h set inst_by='Ranger 2.6.0' where active='Y' and updated_by='localhost';"
2026-06-18 14:07:18,085 [I] Patches status entries updated from base ranger version to current installed ranger version:Ranger 2.6.0
2026-06-18 14:07:18,085 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-06-18 14:07:18,444 [I] Table x_portal_user already exists in database 'ranger'
2026-06-18 14:07:18,445 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-06-18 14:07:18,768 [I] Table x_policy_ref_group already exists in database 'ranger'
2026-06-18 14:07:18,768 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-06-18 14:07:19,088 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-06-18 14:07:19,444 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "update x_db_version_h set active='Y' where version='CORE_DB_SCHEMA' and active='N' and updated_by='dist-test-slave-xnbj.c.gcp-upstream.internal';"
2026-06-18 14:07:19,790 [I] CORE_DB_SCHEMA import status has been updated
2026-06-18 14:07:19,790 [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java -cp /tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40163/ranger -u miniranger -p '********' -noheader -trim -c \; -query "select version from x_db_version_h where version = 'DB_PATCHES' and inst_by = 'Ranger 2.6.0' and active = 'Y';"
2026-06-18 14:07:20,100 [I] DB_PATCHES have already been applied
I20260618 14:07:20.106037 14202 mini_ranger.cc:192] Using Ranger class path: /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-admin:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/ews/lib/*:/usr/lib/jvm/temurin-17-jdk-amd64/lib/*:/tmp/dist-test-task_uppBT/thirdparty/src/hadoop-3.4.1/*:/tmp/dist-test-task_uppBT/build/debug/bin/postgresql.jar:/tmp/dist-test-task_uppBT/thirdparty/src/ranger-2.6.0-admin/ews/webapp
I20260618 14:07:20.106103 14202 mini_ranger.cc:194] Using host: 127.0.0.1
I20260618 14:07:20.107939 14202 mini_ranger.cc:240] Ranger admin URL: http://127.0.0.1:51001
Jun 18, 2026 2:07:20 PM org.apache.ranger.server.tomcat.EmbeddedServer getKeyManagers
WARNING: Config 'ranger.keystore.file' or 'ranger.service.https.attrib.keystore.file' is not found or contains blank value
Jun 18, 2026 2:07:20 PM org.apache.ranger.server.tomcat.EmbeddedServer getTrustManagers
WARNING: Config 'ranger.truststore.file' is not found or contains blank value!
Jun 18, 2026 2:07:20 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Deriving webapp folder from catalina.base property. folder=/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-admin/ews/webapp
Jun 18, 2026 2:07:20 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Webapp file =/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-admin/ews/webapp, webAppName = /
Jun 18, 2026 2:07:20 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Adding webapp [/] = path [/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-admin/ews/webapp] .....
Jun 18, 2026 2:07:21 PM org.apache.catalina.core.StandardContext setPath
WARNING: A context path must either be an empty string or start with a '/' and do not end with a '/'. The path [/] does not meet these criteria and has been changed to []
Jun 18, 2026 2:07:21 PM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Finished init of webapp [/] = path [/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-admin/ews/webapp].
Jun 18, 2026 2:07:21 PM org.apache.ranger.server.tomcat.EmbeddedServer startServer
INFO: Server Name : miniranger
Jun 18, 2026 2:07:21 PM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-51001"]
Jun 18, 2026 2:07:21 PM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Jun 18, 2026 2:07:21 PM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.98]
Jun 18, 2026 2:07:22 PM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
I20260618 14:07:22.189662 14202 mini_ranger.cc:161] Time spent starting Ranger: real 10.162s user 0.005s sys 0.002s
Jun 18, 2026 2:07:26 PM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Jun 18, 2026 2:07:26 PM org.apache.catalina.core.ApplicationContext log
INFO: Initializing Spring root WebApplicationContext
[EL Warning]: metadata: 2026-06-18 14:07:29.567--ServerSession(715564610)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
Jun 18, 2026 2:07:45 PM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
org.apache.ranger.rest
org.apache.ranger.common
xa.rest
Jun 18, 2026 2:07:45 PM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
class org.apache.ranger.rest.TagREST
class org.apache.ranger.rest.PublicAPIsv2
class org.apache.ranger.rest.RoleREST
class org.apache.ranger.rest.UserREST
class org.apache.ranger.rest.XKeyREST
class org.apache.ranger.rest.PublicAPIs
class org.apache.ranger.rest.MetricsREST
class org.apache.ranger.rest.XUserREST
class org.apache.ranger.rest.AssetREST
class org.apache.ranger.rest.SecurityZoneREST
class org.apache.ranger.rest.XAuditREST
class org.apache.ranger.rest.ServiceREST
Jun 18, 2026 2:07:45 PM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Provider classes found:
class org.apache.ranger.common.RangerJsonMappingExceptionMapper
class org.apache.ranger.common.RangerJsonParserExceptionMapper
class org.apache.ranger.common.RangerJAXBContextResolver
class org.apache.ranger.common.RangerJsonProvider
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.servlet.SpringServlet getContext
INFO: Using default applicationContext
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonMappingExceptionMapper, of type org.apache.ranger.common.RangerJsonMappingExceptionMapper as a provider class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonParserExceptionMapper, of type org.apache.ranger.common.RangerJsonParserExceptionMapper as a provider class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonProvider, of type org.apache.ranger.common.RangerJsonProvider as a provider class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, assetREST, of type org.apache.ranger.rest.AssetREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, metricsREST, of type org.apache.ranger.rest.MetricsREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIs, of type org.apache.ranger.rest.PublicAPIs as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIsv2, of type org.apache.ranger.rest.PublicAPIsv2 as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, roleREST, of type org.apache.ranger.rest.RoleREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, securityZoneREST, of type org.apache.ranger.rest.SecurityZoneREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, serviceREST, of type org.apache.ranger.rest.ServiceREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, tagREST, of type org.apache.ranger.rest.TagREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, userREST, of type org.apache.ranger.rest.UserREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XAuditREST, of type org.apache.ranger.rest.XAuditREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XKeyREST, of type org.apache.ranger.rest.XKeyREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XUserREST, of type org.apache.ranger.rest.XUserREST as a root resource class
Jun 18, 2026 2:07:45 PM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.19.4 05/24/2017 03:20 PM'
Jun 18, 2026 2:07:46 PM com.sun.jersey.spi.inject.Errors processErrorMessages
WARNING: The following warnings have been detected with resource and/or provider classes:
WARNING: A HTTP GET method, public void org.apache.ranger.rest.RoleREST.getRolesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInExcel(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInCsv(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) throws java.io.IOException, MUST return a non-void type.
WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,java.lang.Boolean), MUST return a non-void type.
Jun 18, 2026 2:07:46 PM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-51001"]
I20260618 14:07:47.426956 14202 mini_ranger.cc:274] Created Kudu service
I20260618 14:07:47.659804 14202 mini_ranger.cc:389] Successfully created Ranger user: user
I20260618 14:07:47.929721 14202 ranger_client.cc:318] Using new properties file: /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-06-18 14:07:48.664 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-06-18 14:07:48.672 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-06-18 14:07:48.672 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-06-18 14:07:48.672 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-06-18 14:07:48.673 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-06-18 14:07:48.674 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-06-18 14:07:48.674 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-06-18 14:07:48.675 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-kudu-security.xml
2026-06-18 14:07:48.712 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-06-18 14:07:48.717 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-06-18 14:07:48.718 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-06-18 14:07:48.719 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-06-18 14:07:48.720 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-06-18 14:07:48.723 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-06-18 14:07:48.726 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-06-18 14:07:48.726 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-06-18 14:07:48.727 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-06-18 14:07:48.728 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-06-18 14:07:48.728 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-06-18 14:07:48.728 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-06-18 14:07:48.756 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-06-18 14:07:48.757 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-06-18 14:07:48.757 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-06-18 14:07:48.757 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-06-18 14:07:48.758 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-06-18 14:07:48.758 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-06-18 14:07:48.758 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-06-18 14:07:48.759 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-06-18 14:07:48.759 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-06-18 14:07:48.759 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-06-18 14:07:48.759 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-06-18 14:07:48.760 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-06-18 14:07:48.760 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-06-18 14:07:48.761 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-06-18 14:07:48.761 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-06-18 14:07:48.762 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-06-18 14:07:48.763 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-06-18 14:07:48.766 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-06-18 14:07:48.767 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-06-18 14:07:48.847 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-06-18 14:07:48.847 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-06-18 14:07:48.900 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-06-18 14:07:48.900 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-06-18 14:07:48.923 [DEBUG - main] (Groups.java:476) Creating new Groups object
2026-06-18 14:07:48.942 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-06-18 14:07:48.944 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-06-18 14:07:48.944 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-06-18 14:07:48.945 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:51001
2026-06-18 14:07:48.945 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-06-18 14:07:48.945 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-06-18 14:07:48.946 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/policy-cache
2026-06-18 14:07:48.946 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-06-18 14:07:48.946 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-06-18 14:07:48.946 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-06-18 14:07:48.949 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-06-18 14:07:48.965 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-06-18 14:07:48.965 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-06-18 14:07:48.966 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-06-18 14:07:49.005 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:51001, null)
2026-06-18 14:07:49.009 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:51001, null)
2026-06-18 14:07:49.011 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@5812f68b
2026-06-18 14:07:49.012 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-06-18 14:07:49.013 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-06-18 14:07:49.013 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-06-18 14:07:49.013 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-06-18 14:07:49.014 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-06-18 14:07:49.014 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-06-18 14:07:49.015 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM) = true
2026-06-18 14:07:49.015 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled = true
2026-06-18 14:07:49.015 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled = true
2026-06-18 14:07:49.017 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 28481648, Free memory:223176592
2026-06-18 14:07:49.017 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-06-18 14:07:49.017 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-06-18 14:07:49.031 [DEBUG - main] (UserGroupInformation.java:245) Hadoop login
2026-06-18 14:07:49.044 [DEBUG - main] (UserGroupInformation.java:191) hadoop login commit
2026-06-18 14:07:49.047 [DEBUG - main] (UserGroupInformation.java:213) Using local user: UnixPrincipal: slave
2026-06-18 14:07:49.048 [DEBUG - main] (UserGroupInformation.java:217) Using user: "UnixPrincipal: slave" with name: slave
2026-06-18 14:07:49.049 [DEBUG - main] (UserGroupInformation.java:229) User entry: "slave"
2026-06-18 14:07:49.049 [DEBUG - main] (UserGroupInformation.java:801) UGI loginUser: slave (auth:SIMPLE)
2026-06-18 14:07:49.050 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-06-18 14:07:49.604 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-06-18 14:07:49.787 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0):
2026-06-18 14:07:49.788 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-06-18 14:07:49.819 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):30811385:30863872
2026-06-18 14:07:49.820 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-06-18 14:07:49.820 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-06-18 14:07:49.820 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):499821141:803105254
2026-06-18 14:07:49.821 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-06-18 14:07:49.821 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 50501744, Free memory:201156496
2026-06-18 14:07:49.821 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):501081329:804581041
2026-06-18 14:07:49.821 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-06-18 14:07:49.821 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-06-18 14:07:49.822 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-06-18 14:07:49.822 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 50501744, Free memory:201156496
2026-06-18 14:07:49.822 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-06-18 14:07:49.822 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-06-18 14:07:49.823 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-06-18 14:07:49.939 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-06-18 14:07:50.076 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-06-18 14:07:50.079 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-06-18 14:07:50.079 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):137676692:256686509
2026-06-18 14:07:50.079 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-06-18 14:07:50.080 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 53913184, Free memory:197745056
2026-06-18 14:07:50.081 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-06-18 14:07:50.089 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-06-18 14:07:50.092 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-06-18 14:07:50.094 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-06-18 14:07:50.099 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@7af707e0)
2026-06-18 14:07:50.101 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 57029472, Free memory:194628768
2026-06-18 14:07:50.106 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-06-18 14:07:50.107 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-06-18 14:07:50.108 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-06-18 14:07:50.109 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-06-18 14:07:50.110 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-06-18 14:07:50.112 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-06-18 14:07:50.113 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-06-18 14:07:50.121 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-06-18 14:07:50.123 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-06-18 14:07:50.125 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-06-18 14:07:50.126 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:50.126 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:50.126 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:50.127 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:50.127 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.127 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.129 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Thu Jun 18 14:07:35 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-06-18 14:07:50.130 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-06-18 14:07:50.130 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:50.130 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.131 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.131 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.131 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.131 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.131 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.131 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.132 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.132 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.132 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.132 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.132 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:50.132 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-06-18 14:07:50.136 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:50.136 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:50.137 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-06-18 14:07:50.137 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:50.137 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-06-18 14:07:50.140 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-06-18 14:07:50.140 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-06-18 14:07:50.141 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:50.141 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:50.141 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:50.141 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:50.142 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:50.143 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-06-18 14:07:50.143 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:50.143 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:50.143 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:50.144 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:50.144 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:50.144 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:50.144 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:50.145 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-06-18 14:07:50.148 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-06-18 14:07:50.149 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:50.149 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:50.150 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-06-18 14:07:50.150 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:50.151 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:50.151 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-06-18 14:07:50.151 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:50.152 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:50.152 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-06-18 14:07:50.152 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-06-18 14:07:50.152 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:50.152 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:50.152 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-06-18 14:07:50.153 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:50.153 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:50.153 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-06-18 14:07:50.153 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-06-18 14:07:50.153 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():13190422:13192481
2026-06-18 14:07:50.154 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-06-18 14:07:50.154 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-06-18 14:07:50.156 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-06-18 14:07:50.157 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):28056:28290
2026-06-18 14:07:50.157 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-06-18 14:07:50.158 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):19009:41720
2026-06-18 14:07:50.158 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):21753512:21777672
2026-06-18 14:07:50.158 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:50.158 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-06-18 14:07:50.159 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-06-18 14:07:50.159 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-06-18 14:07:50.159 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-06-18 14:07:50.160 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:50.161 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-06-18 14:07:50.161 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-06-18 14:07:50.161 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-06-18 14:07:50.161 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-06-18 14:07:50.162 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-06-18 14:07:50.162 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-06-18 14:07:50.162 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-06-18 14:07:50.171 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.171 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:50.173 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):993587:995324
2026-06-18 14:07:50.173 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.173 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1776321:1771404
2026-06-18 14:07:50.173 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.174 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.174 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.174 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:50.174 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):37587:37680
2026-06-18 14:07:50.175 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.175 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):710877:780069
2026-06-18 14:07:50.175 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.175 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.175 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.175 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:50.176 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):52125:52465
2026-06-18 14:07:50.176 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.176 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):507780:508664
2026-06-18 14:07:50.177 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.177 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.177 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.178 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.178 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10914:11606
2026-06-18 14:07:50.178 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.178 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):671697:792444
2026-06-18 14:07:50.179 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.179 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.179 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.179 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.179 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10304:10218
2026-06-18 14:07:50.179 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.179 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):472603:473682
2026-06-18 14:07:50.180 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.180 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.180 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.180 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.181 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10682:10407
2026-06-18 14:07:50.181 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.181 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):553428:578488
2026-06-18 14:07:50.181 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.181 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.181 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.181 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.182 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10232:10460
2026-06-18 14:07:50.182 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.182 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):522966:553302
2026-06-18 14:07:50.182 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.182 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.183 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.183 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.183 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):11293:10691
2026-06-18 14:07:50.183 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.184 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):707170:670527
2026-06-18 14:07:50.184 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.184 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.184 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.185 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.185 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10754:10800
2026-06-18 14:07:50.185 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.185 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):530036:532069
2026-06-18 14:07:50.185 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.186 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.186 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.186 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.186 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):11684:11725
2026-06-18 14:07:50.186 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.187 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):580518:689648
2026-06-18 14:07:50.187 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.187 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.187 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.188 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.188 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):17960:18458
2026-06-18 14:07:50.188 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.188 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):630885:728701
2026-06-18 14:07:50.189 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.189 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.189 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.189 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.189 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):11485:11808
2026-06-18 14:07:50.190 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.190 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):549218:584285
2026-06-18 14:07:50.190 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.190 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.190 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-06-18 14:07:50.191 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-06-18 14:07:50.191 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:50.191 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:50.191 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:50.191 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:50.192 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.192 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.192 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Thu Jun 18 14:07:35 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-06-18 14:07:50.193 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-06-18 14:07:50.195 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-06-18 14:07:50.195 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-06-18 14:07:50.196 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-06-18 14:07:50.196 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:50.196 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:50.196 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:50.197 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:50.200 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-06-18 14:07:50.200 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:50.200 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:50.200 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:50.200 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:50.201 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.201 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Thu Jun 18 14:07:43 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-06-18 14:07:50.202 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-06-18 14:07:50.202 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:50.202 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.202 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.202 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.203 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.204 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:50.204 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-06-18 14:07:50.204 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:50.204 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:50.205 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:50.205 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:50.205 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-06-18 14:07:50.206 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-06-18 14:07:50.206 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-06-18 14:07:50.206 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-06-18 14:07:50.206 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-06-18 14:07:50.207 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:50.207 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:50.207 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:50.207 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:50.207 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:50.208 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-06-18 14:07:50.208 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-06-18 14:07:50.208 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:50.208 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:50.208 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-06-18 14:07:50.209 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-06-18 14:07:50.209 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-06-18 14:07:50.209 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-06-18 14:07:50.209 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():3522500:3521994
2026-06-18 14:07:50.210 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-06-18 14:07:50.210 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:50.211 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-06-18 14:07:50.211 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-06-18 14:07:50.212 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@7f4037ed
2026-06-18 14:07:50.212 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-06-18 14:07:50.213 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-06-18 14:07:50.213 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-06-18 14:07:50.213 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-06-18 14:07:50.217 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-06-18 14:07:50.225 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-06-18 14:07:50.235 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-06-18 14:07:50.236 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-06-18 14:07:50.237 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-06-18 14:07:50.237 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-06-18 14:07:50.238 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-06-18 14:07:50.238 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-06-18 14:07:50.238 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-06-18 14:07:50.238 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-06-18 14:07:50.238 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-06-18 14:07:50.239 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-06-18 14:07:50.239 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):26104199:26585290
2026-06-18 14:07:50.239 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):27365614:27877398
2026-06-18 14:07:50.239 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-06-18 14:07:50.240 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):16043:15900
2026-06-18 14:07:50.240 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):34908762:35530759
2026-06-18 14:07:50.240 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:50.240 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-06-18 14:07:50.240 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-06-18 14:07:50.241 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-06-18 14:07:50.241 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-06-18 14:07:50.241 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:50.242 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-06-18 14:07:50.242 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-06-18 14:07:50.242 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-06-18 14:07:50.242 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-06-18 14:07:50.242 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-06-18 14:07:50.243 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-06-18 14:07:50.243 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-06-18 14:07:50.243 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-06-18 14:07:50.248 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-06-18 14:07:50.248 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-06-18 14:07:50.248 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-06-18 14:07:50.249 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-06-18 14:07:50.249 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-06-18 14:07:50.249 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:50.250 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:50.250 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:50.250 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:50.250 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.250 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:50.251 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Thu Jun 18 14:07:35 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-06-18 14:07:50.252 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-06-18 14:07:50.253 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-06-18 14:07:50.253 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0):
2026-06-18 14:07:50.339 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-06-18 14:07:50.367 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0):
2026-06-18 14:07:50.370 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-06-18 14:07:50.386 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-06-18 14:07:50.387 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-06-18 14:07:50.387 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-06-18 14:07:50.387 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-06-18 14:07:50.387 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-06-18 14:07:50.388 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-06-18 14:07:50.388 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-06-18 14:07:50.389 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):949692:1760440
2026-06-18 14:07:50.389 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-06-18 14:07:50.389 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-06-18 14:07:50.390 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-06-18 14:07:50.391 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-06-18 14:07:50.391 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-06-18 14:07:50.392 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):47889900:148251818
2026-06-18 14:07:50.392 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@33a630fa
2026-06-18 14:07:50.394 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-06-18 14:07:50.394 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-06-18 14:07:50.394 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:50.395 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:50.395 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:50.395 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-06-18 14:07:50.396 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-06-18 14:07:50.396 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():20789:20013
2026-06-18 14:07:50.396 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-06-18 14:07:50.396 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:50.397 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):15411:14716
2026-06-18 14:07:50.397 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):2738229:3225058
2026-06-18 14:07:50.398 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:50.398 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-06-18 14:07:50.399 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-06-18 14:07:50.399 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.399 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:50.399 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):53095:53439
2026-06-18 14:07:50.399 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.399 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):495851:496515
2026-06-18 14:07:50.400 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.400 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.400 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.400 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.400 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):9270:9624
2026-06-18 14:07:50.400 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.400 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):343248:344000
2026-06-18 14:07:50.400 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.401 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.401 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.401 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:50.401 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):16255:16496
2026-06-18 14:07:50.401 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.401 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):446148:539256
2026-06-18 14:07:50.402 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.402 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.402 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:50.402 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:50.402 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):30943:31384
2026-06-18 14:07:50.403 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:50.403 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):546519:658803
2026-06-18 14:07:50.403 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.403 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:50.403 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=737edcfa):196556190:302002975
2026-06-18 14:07:50.403 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 68327536, Free memory:183330704
2026-06-18 14:07:50.404 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-06-18 14:07:50.405 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-06-18 14:07:50.405 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-06-18 14:07:50.405 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-06-18 14:07:50.465 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-06-18 14:07:50.468 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):42764248:62278983
2026-06-18 14:07:50.468 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-06-18 14:07:50.470 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-06-18 14:07:50.472 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):403856592:649854159
2026-06-18 14:07:50.472 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-06-18 14:07:50.473 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-06-18 14:07:50.473 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-06-18 14:07:50.473 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-06-18 14:07:50.519 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@5cb0408a has been taken from the queue
2026-06-18 14:07:50.543 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@5cb0408a has been put on the queue
2026-06-18 14:07:50.629 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-06-18 14:07:50.631 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1796) Failed to get groups for user user
java.io.IOException: No groups found for user user
at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3570)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2312)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2189)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2079)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:4011)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4034)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:5010)
at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
at org.apache.hadoop.security.Groups.getGroups(Groups.java:216)
at org.apache.hadoop.security.UserGroupInformation.getGroups(UserGroupInformation.java:1794)
at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:840)
2026-06-18 14:07:50.635 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-06-18 14:07:50.635 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(2e6e8ec7_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-06-18 14:07:50.635 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-06-18 14:07:50.635 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-06-18 14:07:50.635 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=2e6e8ec7, enricherName=TagEnricher):363349:363244
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-06-18 14:07:50.636 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-06-18 14:07:50.637 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-06-18 14:07:50.637 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-06-18 14:07:50.637 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-06-18 14:07:50.638 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-06-18 14:07:50.638 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-06-18 14:07:50.638 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-06-18 14:07:50.638 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-06-18 14:07:50.639 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-06-18 14:07:50.639 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-06-18 14:07:50.640 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):228940:230446
2026-06-18 14:07:50.640 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@f005c82
2026-06-18 14:07:50.640 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-06-18 14:07:50.640 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):17376:17210
2026-06-18 14:07:50.640 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@72324aaa
2026-06-18 14:07:50.640 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-06-18 14:07:50.641 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):25720:24783
2026-06-18 14:07:50.641 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@273108a8
2026-06-18 14:07:50.641 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-06-18 14:07:50.642 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):664719:667756
2026-06-18 14:07:50.642 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@69d2ffe5
2026-06-18 14:07:50.643 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@1a78dacd]]
2026-06-18 14:07:50.643 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):4473373:4491437
2026-06-18 14:07:50.643 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-06-18 14:07:50.643 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Thu Jun 18 14:07:50 UTC 2026)
2026-06-18 14:07:50.643 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Thu Jun 18 14:07:50 UTC 2026) : true
2026-06-18 14:07:50.644 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.644 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:50.645 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-06-18 14:07:50.645 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-06-18 14:07:50.645 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:50.645 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:50.645 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:50.646 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:50.646 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:50.646 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-06-18 14:07:50.646 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:50.646 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:50.646 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:50.647 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:50.647 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:50.647 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:50.647 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-06-18 14:07:50.648 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-06-18 14:07:50.649 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():3904000:3903875
2026-06-18 14:07:50.649 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-06-18 14:07:50.649 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:50.649 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-06-18 14:07:50.649 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-06-18 14:07:50.649 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[all]
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539)
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539): null
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539)
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539)
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539)
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-06-18 14:07:50.650 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539): true
2026-06-18 14:07:50.651 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):621597:621344
2026-06-18 14:07:50.651 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539): false
2026-06-18 14:07:50.651 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@82b5539): null
2026-06-18 14:07:50.651 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-06-18 14:07:50.651 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=2e6e8ec7,policyId=2, policyName=db;table;):7526379:7563752
2026-06-18 14:07:50.651 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=2e6e8ec7_0):17157445:17213097
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.652 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):27113:27077
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@74dd0b39
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-06-18 14:07:50.653 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):17250:17486
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@7df6dbb1
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):929643:930743
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): ret=false
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.654 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.655 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): bc95e16d-f1c9-478a-91ed-79153fbb1d38-0
2026-06-18 14:07:50.655 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={bc95e16d-f1c9-478a-91ed-79153fbb1d38-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Thu Jun 18 14:07:50 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-xnbj;logType=RangerAudit;eventId=bc95e16d-f1c9-478a-91ed-79153fbb1d38-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null}
2026-06-18 14:07:50.655 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Thu Jun 18 14:07:50 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-xnbj;logType=RangerAudit;eventId=bc95e16d-f1c9-478a-91ed-79153fbb1d38-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-06-18 14:07:50.656 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Thu Jun 18 14:07:50 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-xnbj;logType=RangerAudit;eventId=bc95e16d-f1c9-478a-91ed-79153fbb1d38-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-06-18 14:07:50.656 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={bc95e16d-f1c9-478a-91ed-79153fbb1d38-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:50.656 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={bc95e16d-f1c9-478a-91ed-79153fbb1d38-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}]
2026-06-18 14:07:50.662 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@5d9241ce has been put on the queue
2026-06-18 14:07:50.662 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@5d9241ce has been taken from the queue
I20260618 14:07:50.672631 16005 server.cc:273] Received an EOF from the subprocess
W20260618 14:07:50.672961 15979 server.cc:408] The subprocess has exited with status 9
I20260618 14:07:50.677037 16006 server.cc:440] outbound queue shut down: Aborted:
I20260618 14:07:50.677042 16004 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:50.677050 16002 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:50.677019 16003 server.cc:366] get failed, inbound queue shut down: Aborted:
W20260618 14:07:50.677634 14202 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260618 14:07:50.677721 14202 ranger_client.cc:318] Using existing properties file: /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-06-18 14:07:51.392 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-06-18 14:07:51.400 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-06-18 14:07:51.400 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-06-18 14:07:51.400 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-06-18 14:07:51.400 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-06-18 14:07:51.402 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-06-18 14:07:51.402 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-06-18 14:07:51.403 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/ranger-kudu-security.xml
2026-06-18 14:07:51.436 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-06-18 14:07:51.442 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-06-18 14:07:51.442 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-06-18 14:07:51.443 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-06-18 14:07:51.444 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-06-18 14:07:51.447 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-06-18 14:07:51.450 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-06-18 14:07:51.451 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-06-18 14:07:51.451 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-06-18 14:07:51.452 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-06-18 14:07:51.452 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-06-18 14:07:51.452 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-06-18 14:07:51.479 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-06-18 14:07:51.480 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-06-18 14:07:51.480 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-06-18 14:07:51.481 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-06-18 14:07:51.481 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-06-18 14:07:51.481 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-06-18 14:07:51.481 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-06-18 14:07:51.482 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-06-18 14:07:51.482 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-06-18 14:07:51.482 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-06-18 14:07:51.482 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-06-18 14:07:51.483 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-06-18 14:07:51.483 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-06-18 14:07:51.484 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-06-18 14:07:51.484 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-06-18 14:07:51.485 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-06-18 14:07:51.486 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-06-18 14:07:51.489 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-06-18 14:07:51.490 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-06-18 14:07:51.569 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-06-18 14:07:51.569 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-06-18 14:07:51.626 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-06-18 14:07:51.626 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-06-18 14:07:51.649 [DEBUG - main] (Groups.java:476) Creating new Groups object
2026-06-18 14:07:51.668 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-06-18 14:07:51.669 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-06-18 14:07:51.670 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-06-18 14:07:51.670 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:51001
2026-06-18 14:07:51.670 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-06-18 14:07:51.671 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-06-18 14:07:51.671 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/policy-cache
2026-06-18 14:07:51.671 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-06-18 14:07:51.671 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-06-18 14:07:51.671 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-06-18 14:07:51.673 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-06-18 14:07:51.693 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-06-18 14:07:51.693 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-06-18 14:07:51.694 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-06-18 14:07:51.733 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:51001, null)
2026-06-18 14:07:51.737 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:51001, null)
2026-06-18 14:07:51.738 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@29ca3d04
2026-06-18 14:07:51.740 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-06-18 14:07:51.740 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-06-18 14:07:51.740 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-06-18 14:07:51.741 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-06-18 14:07:51.741 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-06-18 14:07:51.741 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-06-18 14:07:51.742 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM) = true
2026-06-18 14:07:51.742 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled = true
2026-06-18 14:07:51.742 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled = true
2026-06-18 14:07:51.743 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 28481712, Free memory:223176528
2026-06-18 14:07:51.744 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-06-18 14:07:51.744 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-06-18 14:07:51.758 [DEBUG - main] (UserGroupInformation.java:245) Hadoop login
2026-06-18 14:07:51.771 [DEBUG - main] (UserGroupInformation.java:191) hadoop login commit
2026-06-18 14:07:51.774 [DEBUG - main] (UserGroupInformation.java:213) Using local user: UnixPrincipal: slave
2026-06-18 14:07:51.776 [DEBUG - main] (UserGroupInformation.java:217) Using user: "UnixPrincipal: slave" with name: slave
2026-06-18 14:07:51.777 [DEBUG - main] (UserGroupInformation.java:229) User entry: "slave"
2026-06-18 14:07:51.777 [DEBUG - main] (UserGroupInformation.java:801) UGI loginUser: slave (auth:SIMPLE)
2026-06-18 14:07:51.778 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-06-18 14:07:52.029 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-06-18 14:07:52.180 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0):
2026-06-18 14:07:52.181 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-06-18 14:07:52.208 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):27115976:27269083
2026-06-18 14:07:52.209 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-06-18 14:07:52.209 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-06-18 14:07:52.209 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):446932604:465037824
2026-06-18 14:07:52.209 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-06-18 14:07:52.209 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 50501808, Free memory:201156432
2026-06-18 14:07:52.210 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):447965247:466065072
2026-06-18 14:07:52.210 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-06-18 14:07:52.210 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-06-18 14:07:52.210 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-06-18 14:07:52.210 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 50501808, Free memory:201156432
2026-06-18 14:07:52.210 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-06-18 14:07:52.211 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-06-18 14:07:52.211 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-06-18 14:07:52.227 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-06-18 14:07:52.330 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-06-18 14:07:52.332 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-06-18 14:07:52.333 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):106609646:122343195
2026-06-18 14:07:52.333 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-06-18 14:07:52.333 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 54696112, Free memory:196962128
2026-06-18 14:07:52.335 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-06-18 14:07:52.341 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-06-18 14:07:52.344 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-06-18 14:07:52.346 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-06-18 14:07:52.351 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@37ff4054)
2026-06-18 14:07:52.351 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 57841840, Free memory:193816400
2026-06-18 14:07:52.355 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-06-18 14:07:52.355 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-06-18 14:07:52.356 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-06-18 14:07:52.357 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-06-18 14:07:52.358 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-06-18 14:07:52.360 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-06-18 14:07:52.361 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-06-18 14:07:52.371 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-06-18 14:07:52.373 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-06-18 14:07:52.375 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-06-18 14:07:52.375 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:52.376 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:52.376 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:52.376 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:52.377 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.377 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.379 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Thu Jun 18 14:07:35 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-06-18 14:07:52.380 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-06-18 14:07:52.380 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:52.380 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.381 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.381 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.381 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.381 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.381 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.382 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.382 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.382 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.382 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.383 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.383 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2):
2026-06-18 14:07:52.383 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-06-18 14:07:52.387 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:52.388 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:52.388 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-06-18 14:07:52.389 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:52.389 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-06-18 14:07:52.391 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-06-18 14:07:52.392 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-06-18 14:07:52.392 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:52.392 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:52.392 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:52.392 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:52.394 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:52.394 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-06-18 14:07:52.394 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:52.394 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:52.395 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:52.395 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:52.395 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:52.395 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:52.395 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:52.396 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-06-18 14:07:52.399 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-06-18 14:07:52.400 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:52.400 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:52.401 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-06-18 14:07:52.401 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:52.402 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:52.402 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-06-18 14:07:52.402 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:52.402 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:52.402 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-06-18 14:07:52.403 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-06-18 14:07:52.403 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:52.403 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:52.403 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-06-18 14:07:52.403 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:52.403 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-06-18 14:07:52.404 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-06-18 14:07:52.404 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-06-18 14:07:52.404 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():12519475:12553312
2026-06-18 14:07:52.404 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-06-18 14:07:52.405 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-06-18 14:07:52.406 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-06-18 14:07:52.407 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):26402:26912
2026-06-18 14:07:52.407 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-06-18 14:07:52.408 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):13757:30753
2026-06-18 14:07:52.408 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):20115989:20353488
2026-06-18 14:07:52.408 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:52.409 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-06-18 14:07:52.409 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-06-18 14:07:52.409 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-06-18 14:07:52.409 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-06-18 14:07:52.410 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:52.410 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-06-18 14:07:52.410 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-06-18 14:07:52.411 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-06-18 14:07:52.411 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-06-18 14:07:52.411 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-06-18 14:07:52.411 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-06-18 14:07:52.411 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-06-18 14:07:52.417 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.418 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:52.419 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):923758:925239
2026-06-18 14:07:52.419 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.419 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1638551:1818164
2026-06-18 14:07:52.420 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.420 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.420 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.420 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:52.421 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):36197:36534
2026-06-18 14:07:52.421 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.421 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):711296:812204
2026-06-18 14:07:52.421 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.421 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.422 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.422 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:52.422 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):51055:51823
2026-06-18 14:07:52.422 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.423 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):628723:719699
2026-06-18 14:07:52.423 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.423 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.423 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.423 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.424 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10369:10614
2026-06-18 14:07:52.424 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.424 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):615879:704415
2026-06-18 14:07:52.424 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.425 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.425 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.425 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.425 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10266:10634
2026-06-18 14:07:52.425 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.426 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):565909:665203
2026-06-18 14:07:52.426 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.426 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.426 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.426 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.427 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10549:11103
2026-06-18 14:07:52.427 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.427 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):602233:689813
2026-06-18 14:07:52.427 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.427 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.428 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.428 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.428 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):9934:10383
2026-06-18 14:07:52.428 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.428 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):584301:681445
2026-06-18 14:07:52.429 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.429 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.429 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.429 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.429 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):16362:16397
2026-06-18 14:07:52.430 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.430 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):510716:544909
2026-06-18 14:07:52.430 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.430 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.431 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.431 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.431 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10786:10251
2026-06-18 14:07:52.431 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.431 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):516672:486434
2026-06-18 14:07:52.431 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.432 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.432 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.432 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.432 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):11855:11597
2026-06-18 14:07:52.432 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.433 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):604510:693429
2026-06-18 14:07:52.433 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.433 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.433 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.433 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.434 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):12496:12735
2026-06-18 14:07:52.434 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.434 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):578458:665716
2026-06-18 14:07:52.434 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.434 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.435 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.435 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.435 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):11489:11189
2026-06-18 14:07:52.435 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.435 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):559823:561318
2026-06-18 14:07:52.436 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.436 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.436 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-06-18 14:07:52.437 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-06-18 14:07:52.437 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:52.437 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:52.437 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:52.437 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:52.438 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.438 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.438 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Thu Jun 18 14:07:35 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-06-18 14:07:52.438 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-06-18 14:07:52.441 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-06-18 14:07:52.441 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-06-18 14:07:52.442 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-06-18 14:07:52.442 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:52.442 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:52.442 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:52.442 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:52.445 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-06-18 14:07:52.446 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:52.446 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:52.446 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-06-18 14:07:52.446 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-06-18 14:07:52.446 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.446 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Thu Jun 18 14:07:43 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-06-18 14:07:52.447 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-06-18 14:07:52.447 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.448 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.449 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.449 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.449 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1):
2026-06-18 14:07:52.449 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-06-18 14:07:52.449 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:52.449 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:52.450 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:52.450 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:52.451 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-06-18 14:07:52.451 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-06-18 14:07:52.451 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-06-18 14:07:52.451 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-06-18 14:07:52.451 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-06-18 14:07:52.452 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:52.452 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:52.452 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:52.452 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:52.452 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-06-18 14:07:52.452 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-06-18 14:07:52.453 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-06-18 14:07:52.453 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:52.453 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-06-18 14:07:52.453 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-06-18 14:07:52.453 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-06-18 14:07:52.453 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-06-18 14:07:52.454 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-06-18 14:07:52.454 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():2905838:2905913
2026-06-18 14:07:52.454 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-06-18 14:07:52.455 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:52.455 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-06-18 14:07:52.455 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-06-18 14:07:52.456 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@b0964b2
2026-06-18 14:07:52.456 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-06-18 14:07:52.456 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-06-18 14:07:52.457 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-06-18 14:07:52.457 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-06-18 14:07:52.460 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-06-18 14:07:52.472 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-06-18 14:07:52.481 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-06-18 14:07:52.483 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-06-18 14:07:52.484 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-06-18 14:07:52.484 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-06-18 14:07:52.485 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-06-18 14:07:52.485 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-06-18 14:07:52.485 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-06-18 14:07:52.485 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-06-18 14:07:52.485 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-06-18 14:07:52.486 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-06-18 14:07:52.486 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):29227895:29646080
2026-06-18 14:07:52.486 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):30423759:30841376
2026-06-18 14:07:52.486 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-06-18 14:07:52.486 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):23782:23052
2026-06-18 14:07:52.487 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):36617079:37068440
2026-06-18 14:07:52.487 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:52.487 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-06-18 14:07:52.487 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-06-18 14:07:52.487 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-06-18 14:07:52.488 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-06-18 14:07:52.488 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-06-18 14:07:52.488 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-06-18 14:07:52.489 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-06-18 14:07:52.489 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-06-18 14:07:52.489 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-06-18 14:07:52.489 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-06-18 14:07:52.490 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-06-18 14:07:52.490 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-06-18 14:07:52.490 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-06-18 14:07:52.494 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-06-18 14:07:52.495 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-06-18 14:07:52.495 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-06-18 14:07:52.495 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-06-18 14:07:52.496 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-06-18 14:07:52.496 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:52.496 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:52.496 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-06-18 14:07:52.497 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-06-18 14:07:52.497 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.497 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-06-18 14:07:52.497 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Thu Jun 18 14:07:35 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-06-18 14:07:52.499 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-06-18 14:07:52.500 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-06-18 14:07:52.500 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0):
2026-06-18 14:07:52.511 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-06-18 14:07:52.529 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0):
2026-06-18 14:07:52.530 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-06-18 14:07:52.539 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-06-18 14:07:52.539 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-06-18 14:07:52.540 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-06-18 14:07:52.540 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-06-18 14:07:52.540 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-06-18 14:07:52.540 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-06-18 14:07:52.540 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-06-18 14:07:52.541 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):830498:900169
2026-06-18 14:07:52.541 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-06-18 14:07:52.541 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-06-18 14:07:52.541 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-06-18 14:07:52.542 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-06-18 14:07:52.542 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-06-18 14:07:52.542 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):42269069:52132837
2026-06-18 14:07:52.543 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1286528d
2026-06-18 14:07:52.544 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-06-18 14:07:52.545 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-06-18 14:07:52.545 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:52.545 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:52.546 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-06-18 14:07:52.546 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-06-18 14:07:52.546 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-06-18 14:07:52.546 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():18976:18930
2026-06-18 14:07:52.546 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-06-18 14:07:52.547 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-06-18 14:07:52.547 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):15562:14306
2026-06-18 14:07:52.547 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):2450216:2558421
2026-06-18 14:07:52.548 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-06-18 14:07:52.548 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-06-18 14:07:52.549 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-06-18 14:07:52.549 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.549 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:52.549 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):40476:40635
2026-06-18 14:07:52.549 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.549 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):436480:437316
2026-06-18 14:07:52.549 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.549 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.549 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.550 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.550 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):10145:10278
2026-06-18 14:07:52.550 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.550 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):338674:339449
2026-06-18 14:07:52.550 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.550 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.550 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.550 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-06-18 14:07:52.551 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):19026:19125
2026-06-18 14:07:52.551 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.551 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):435953:437194
2026-06-18 14:07:52.551 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.551 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.551 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-06-18 14:07:52.552 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-06-18 14:07:52.552 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):31636:31901
2026-06-18 14:07:52.552 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-06-18 14:07:52.552 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):406696:407802
2026-06-18 14:07:52.552 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.552 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-06-18 14:07:52.552 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=894858):185942677:201110112
2026-06-18 14:07:52.553 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 68327600, Free memory:183330640
2026-06-18 14:07:52.553 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-06-18 14:07:52.554 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-06-18 14:07:52.554 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-06-18 14:07:52.554 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-06-18 14:07:52.593 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-06-18 14:07:52.594 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):38730096:39097739
2026-06-18 14:07:52.594 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-06-18 14:07:52.595 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={2} guid={149a1eec-fa77-49eb-bed4-dee4c3a40c36} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Thu Jun 18 14:07:47 UTC 2026, policies=[RangerPolicy={id={1} guid={abddb08f-236f-4289-8752-c8042127012f} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:34 UTC 2026} updateTime={Thu Jun 18 14:07:43 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={9b6393c1-c317-4c09-8f68-7b47136e28a5} isEnabled={true} createdBy={null} updatedBy={null} createTime={Thu Jun 18 14:07:35 UTC 2026} updateTime={Thu Jun 18 14:07:35 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-06-18 14:07:52.595 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):353113702:385206523
2026-06-18 14:07:52.596 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-06-18 14:07:52.596 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-06-18 14:07:52.599 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-06-18 14:07:52.599 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-06-18 14:07:52.645 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@26ec16e3 has been put on the queue
2026-06-18 14:07:52.645 [DEBUG - pool-4-thread-2] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@26ec16e3 has been taken from the queue
2026-06-18 14:07:52.725 [DEBUG - pool-4-thread-2] (Groups.java:344) GroupCacheLoader - load.
2026-06-18 14:07:52.727 [DEBUG - pool-4-thread-2] (UserGroupInformation.java:1796) Failed to get groups for user user
java.io.IOException: No groups found for user user
at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3570)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2312)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2189)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2079)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:4011)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4034)
at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:5010)
at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
at org.apache.hadoop.security.Groups.getGroups(Groups.java:216)
at org.apache.hadoop.security.UserGroupInformation.getGroups(UserGroupInformation.java:1794)
at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.base/java.lang.Thread.run(Thread.java:840)
2026-06-18 14:07:52.732 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-06-18 14:07:52.732 [INFO - pool-4-thread-2] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(12c39d10_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-06-18 14:07:52.732 [DEBUG - pool-4-thread-2] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-06-18 14:07:52.733 [DEBUG - pool-4-thread-2] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-06-18 14:07:52.733 [DEBUG - pool-4-thread-2] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-06-18 14:07:52.733 [DEBUG - pool-4-thread-2] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-06-18 14:07:52.733 [DEBUG - pool-4-thread-2] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-06-18 14:07:52.733 [DEBUG - pool-4-thread-2] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:52.733 [DEBUG - pool-4-thread-2] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-2:RangerContextEnricher.enrich(requestHashCode=12c39d10, enricherName=TagEnricher):498331:498392
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (PolicyEngine.java:414) zoneName:[null]
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-06-18 14:07:52.734 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-06-18 14:07:52.735 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-06-18 14:07:52.735 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-06-18 14:07:52.736 [DEBUG - pool-4-thread-2] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-06-18 14:07:52.736 [DEBUG - pool-4-thread-2] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-06-18 14:07:52.736 [DEBUG - pool-4-thread-2] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-06-18 14:07:52.737 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-06-18 14:07:52.737 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerResourceTrie.traverse(resource=db):290951:291515
2026-06-18 14:07:52.737 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@2e6694a5
2026-06-18 14:07:52.737 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-06-18 14:07:52.737 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerResourceTrie.traverse(resource=table):16906:16544
2026-06-18 14:07:52.737 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@72870e5a
2026-06-18 14:07:52.738 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-06-18 14:07:52.738 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerResourceTrie.traverse(resource=db):25778:26065
2026-06-18 14:07:52.739 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@5a7ee9c
2026-06-18 14:07:52.739 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-06-18 14:07:52.740 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerResourceTrie.traverse(resource=table):709526:712020
2026-06-18 14:07:52.740 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@56f57016
2026-06-18 14:07:52.740 [DEBUG - pool-4-thread-2] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@46044faa]]
2026-06-18 14:07:52.741 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):4560585:4585940
2026-06-18 14:07:52.741 [DEBUG - pool-4-thread-2] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-06-18 14:07:52.741 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Thu Jun 18 14:07:52 UTC 2026)
2026-06-18 14:07:52.741 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Thu Jun 18 14:07:52 UTC 2026) : true
2026-06-18 14:07:52.741 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.742 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:52.742 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-06-18 14:07:52.742 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-06-18 14:07:52.743 [DEBUG - pool-4-thread-2] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:52.744 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-06-18 14:07:52.744 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-06-18 14:07:52.745 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-06-18 14:07:52.745 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:52.745 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:52.745 [DEBUG - pool-4-thread-2] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-06-18 14:07:52.746 [DEBUG - pool-4-thread-2] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-06-18 14:07:52.747 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-2:RangerDefaultPolicyResourceMatcher.getMatchType():4105886:4516584
2026-06-18 14:07:52.747 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-06-18 14:07:52.747 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-06-18 14:07:52.747 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-06-18 14:07:52.747 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-06-18 14:07:52.747 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[all]
2026-06-18 14:07:52.748 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4)
2026-06-18 14:07:52.748 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4): null
2026-06-18 14:07:52.748 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4)
2026-06-18 14:07:52.748 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4)
2026-06-18 14:07:52.748 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4)
2026-06-18 14:07:52.748 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4): true
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-2:RangerPolicyItemEvaluator.isMatch(resource=db/table):637611:636791
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4): false
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@a4c17c4): null
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-06-18 14:07:52.749 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-2:RangerPolicyEvaluator.evaluate(requestHashCode=12c39d10,policyId=2, policyName=db;table;):7552628:7989599
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-2:RangerPolicyEngine.evaluatePolicies(requestHashCode=12c39d10_0):17623697:18110777
2026-06-18 14:07:52.750 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerResourceTrie.traverse(resource=db):26448:26377
2026-06-18 14:07:52.751 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@722b1a87
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerResourceTrie.traverse(resource=table):16356:16060
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@e8e46bd
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-2:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):963886:965532
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): ret=false
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.752 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.753 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.753 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): 0978a00b-074c-4a40-a36f-6be9ff22ad95-0
2026-06-18 14:07:52.753 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={0978a00b-074c-4a40-a36f-6be9ff22ad95-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Thu Jun 18 14:07:52 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-xnbj;logType=RangerAudit;eventId=0978a00b-074c-4a40-a36f-6be9ff22ad95-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null}
2026-06-18 14:07:52.753 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Thu Jun 18 14:07:52 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-xnbj;logType=RangerAudit;eventId=0978a00b-074c-4a40-a36f-6be9ff22ad95-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-06-18 14:07:52.754 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Thu Jun 18 14:07:52 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-xnbj;logType=RangerAudit;eventId=0978a00b-074c-4a40-a36f-6be9ff22ad95-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-06-18 14:07:52.754 [DEBUG - pool-4-thread-2] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={0978a00b-074c-4a40-a36f-6be9ff22ad95-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-06-18 14:07:52.754 [DEBUG - pool-4-thread-2] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={0978a00b-074c-4a40-a36f-6be9ff22ad95-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}]
2026-06-18 14:07:52.760 [DEBUG - pool-4-thread-2] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@40a4d882 has been put on the queue
2026-06-18 14:07:52.760 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@40a4d882 has been taken from the queue
I20260618 14:07:52.770139 16058 server.cc:273] Received an EOF from the subprocess
W20260618 14:07:52.770835 16032 server.cc:408] The subprocess has exited with status 9
I20260618 14:07:52.774353 16056 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:52.774366 16055 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:52.774377 16059 server.cc:440] outbound queue shut down: Aborted:
I20260618 14:07:52.774369 16057 server.cc:366] get failed, inbound queue shut down: Aborted:
W20260618 14:07:52.774786 14202 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260618 14:07:52.775185 14202 ranger_client.cc:318] Using overwritten properties file: /tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-06-18 14:07:53.544 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-06-18 14:07:53.549 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-06-18 14:07:53.718 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-06-18 14:07:53.719 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-06-18 14:07:53.719 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:51001
2026-06-18 14:07:53.720 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-06-18 14:07:53.720 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-06-18 14:07:53.720 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-task_uppBT/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1781791454132221-14202-0/policy-cache
2026-06-18 14:07:53.720 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-06-18 14:07:53.721 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-06-18 14:07:53.721 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-06-18 14:07:53.723 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-06-18 14:07:53.785 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-06-18 14:07:54.209 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-06-18 14:07:54.345 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-06-18 14:07:54.356 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-06-18 14:07:54.388 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-06-18 14:07:54.436 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-06-18 14:07:54.436 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-06-18 14:07:54.436 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-06-18 14:07:54.437 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-06-18 14:07:54.443 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-06-18 14:07:54.444 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-06-18 14:07:54.482 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-06-18 14:07:54.483 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-06-18 14:07:54.483 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-06-18 14:07:54.495 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-06-18 14:07:54.495 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-06-18 14:07:54.547 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-06-18 14:07:54.548 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
I20260618 14:07:54.719534 16104 server.cc:273] Received an EOF from the subprocess
W20260618 14:07:54.719703 16078 server.cc:408] The subprocess has exited with status 9
I20260618 14:07:54.723702 16102 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:54.723734 16103 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:54.723726 16101 server.cc:366] get failed, inbound queue shut down: Aborted:
I20260618 14:07:54.723709 16105 server.cc:440] outbound queue shut down: Aborted:
W20260618 14:07:54.724192 14202 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260618 14:07:54.724285 14202 mini_ranger.cc:67] Stopping Ranger...
I20260618 14:07:55.079780 14202 mini_ranger.cc:69] Stopped Ranger
2026-06-18 14:07:55.079 UTC [15435] LOG: received smart shutdown request
2026-06-18 14:07:55.082 UTC [15435] LOG: background worker "logical replication launcher" (PID 15443) exited with exit code 1
2026-06-18 14:07:55.083 UTC [15438] LOG: shutting down
2026-06-18 14:07:55.085 UTC [15438] LOG: checkpoint starting: shutdown immediate
2026-06-18 14:07:55.586 UTC [15438] LOG: checkpoint complete: wrote 1555 buffers (9.5%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.022 s, sync=0.475 s, total=0.504 s; sync files=832, longest=0.006 s, average=0.001 s; distance=8448 kB, estimate=8448 kB; lsn=0/1CBAB88, redo lsn=0/1CBAB88
2026-06-18 14:07:55.592 UTC [15435] LOG: database system is shut down
[ OK ] RangerClientTestBase.TestLogging (47955 ms)
[----------] 1 test from RangerClientTestBase (47955 ms total)
[----------] Global test environment tear-down
[==========] 22 tests from 3 test suites ran. (221517 ms total)
[ PASSED ] 21 tests.
[ FAILED ] 1 test, listed below:
[ FAILED ] RangerClientTestExtraJVMArgs.SmokeTest
1 FAILED TEST