Behavioral changes for Cloudera Runtime 7.1.9 SP2 cumulative hotfix (CHF) 4 introduce
functional adjustments to Cloudera Runtime components.
Ranger
- Ranger denies ALTER TABLE operations on tables with active row filter or column
masking policies
- Summary:
Ranger denies ALTER TABLE operations on tables
with active row filter or column masking policies.
- Previous behavior:
Earlier, when a row filter or column
masking policy was active on a Hive table, the ALTER TABLE rename
operation was permitted. As a result, the existing row filter and column masking
policies become ineffective for the renamed table.
- New behavior:
Currently, the ALTER TABLE
operation is now denied when the source table has one or more active row filter or
column masking policies. This change ensures that security policies remain valid and
consistently applied to the intended table, regardless of any rename
attempts.
