[==========] Running 22 tests from 3 test suites.
[----------] Global test environment set-up.
[----------] 19 tests from RangerClientTest
[ RUN      ] RangerClientTest.TestAuthorizeCreateTableUnauthorized
[       OK ] RangerClientTest.TestAuthorizeCreateTableUnauthorized (2 ms)
[ RUN      ] RangerClientTest.TestAuthorizeCreateTableAuthorized
[       OK ] RangerClientTest.TestAuthorizeCreateTableAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeListNoTables
[       OK ] RangerClientTest.TestAuthorizeListNoTables (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeListNoTablesAuthorized
[       OK ] RangerClientTest.TestAuthorizeListNoTablesAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataSubsetOfTablesAuthorized
[       OK ] RangerClientTest.TestAuthorizeMetadataSubsetOfTablesAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataAllAuthorized
[       OK ] RangerClientTest.TestAuthorizeMetadataAllAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataAllNonRanger
WARNING: Logging before InitGoogleLogging() is written to STDERR
W20260812 06:35:48.061913  2063 ranger_client.cc:528] Denying action on table with invalid name .bar. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
W20260812 06:35:48.062037  2063 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[       OK ] RangerClientTest.TestAuthorizeMetadataAllNonRanger (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataNoneAuthorizedContainsNonRanger
W20260812 06:35:48.062498  2063 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
W20260812 06:35:48.062544  2063 ranger_client.cc:528] Denying action on table with invalid name .bar. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[       OK ] RangerClientTest.TestAuthorizeMetadataNoneAuthorizedContainsNonRanger (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataAllAuthorizedContainsNonRanger
W20260812 06:35:48.063002  2063 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[       OK ] RangerClientTest.TestAuthorizeMetadataAllAuthorizedContainsNonRanger (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeScanSubsetAuthorized
[       OK ] RangerClientTest.TestAuthorizeScanSubsetAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeScanAllColumnsAuthorized
[       OK ] RangerClientTest.TestAuthorizeScanAllColumnsAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeScanNoColumnsAuthorized
[       OK ] RangerClientTest.TestAuthorizeScanNoColumnsAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeActionsNoneAuthorized
[       OK ] RangerClientTest.TestAuthorizeActionsNoneAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeActionsSomeAuthorized
[       OK ] RangerClientTest.TestAuthorizeActionsSomeAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeActionsAllAuthorized
[       OK ] RangerClientTest.TestAuthorizeActionsAllAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestInvalidJARFails
E20260812 06:35:48.066457  2063 ranger_client.cc:390] --ranger_jar_path has invalid JAR file path: /this/is/not/a/real/location/hopefully.jar
[       OK ] RangerClientTest.TestInvalidJARFails (0 ms)
[ RUN      ] RangerClientTest.TestEmptyKeytabFile
E20260812 06:35:48.067023  2063 ranger_client.cc:397] --keytab_file is not set
[       OK ] RangerClientTest.TestEmptyKeytabFile (0 ms)
[ RUN      ] RangerClientTest.TestMultipleInvalidJARsLeftUnchecked
[       OK ] RangerClientTest.TestMultipleInvalidJARsLeftUnchecked (0 ms)
[ RUN      ] RangerClientTest.TestDefaultJARPath
[       OK ] RangerClientTest.TestDefaultJARPath (0 ms)
[----------] 19 tests from RangerClientTest (11 ms total)

[----------] 2 tests from RangerClientTestExtraJVMArgs
[ RUN      ] RangerClientTestExtraJVMArgs.SmokeTest
I20260812 06:35:48.068436  2063 mini_postgres.cc:62] Running initdb...
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.

The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".

Data page checksums are disabled.

creating directory /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok

initdb: warning: enabling "trust" authentication for local connections
initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.

Success. You can now start the database server using:

    /tmp/dist-test-taskU1kJwq/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/postgres -l logfile start

2026-08-12 06:35:50.367 UTC [2094] LOG:  starting PostgreSQL 17.2 on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0, 64-bit
2026-08-12 06:35:50.367 UTC [2094] LOG:  listening on IPv4 address "127.0.0.1", port 40577
2026-08-12 06:35:50.371 UTC [2094] LOG:  listening on Unix socket "/tmp/.s.PGSQL.40577"
2026-08-12 06:35:50.375 UTC [2101] LOG:  database system was shut down at 2026-08-12 06:35:49 UTC
2026-08-12 06:35:50.379 UTC [2094] LOG:  database system is ready to accept connections
I20260812 06:35:52.414062  2063 mini_postgres.cc:96] Postgres bound to 40577
2026-08-12 06:35:52.419 UTC [2109] FATAL:  database "slave" does not exist
127.0.0.1:40577 - accepting connections
I20260812 06:35:52.420537  2063 mini_ranger.cc:162] Starting Ranger...
I20260812 06:35:52.437842  2063 mini_ranger.cc:85] Created miniranger Postgres user
I20260812 06:35:52.505638  2063 mini_ranger.cc:88] Created ranger Postgres database
I20260812 06:35:52.505730  2063 mini_ranger.cc:179] Starting Ranger out of /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-admin
2026-08-12 06:35:52,947  [I] DB FLAVOR :POSTGRES
2026-08-12 06:35:52,948  [I] --------- Verifying Ranger DB connection ---------
2026-08-12 06:35:52,948  [I] Checking connection..
2026-08-12 06:35:52,948  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select 1;"
2026-08-12 06:35:53,273  [I] Checking connection passed.
2026-08-12 06:35:53,273  [I] --------- Verifying version history table ---------
2026-08-12 06:35:53,273  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 06:35:53,606  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 06:35:53,607  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 06:35:53,958  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 06:35:53,958  [I] Importing x_db_version_h table schema to database ranger from file: create_dbversion_catalog.sql
2026-08-12 06:35:53,958  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/db/postgres/create_dbversion_catalog.sql 
2026-08-12 06:35:54.261 UTC [2287] WARNING:  there is no transaction in progress
2026-08-12 06:35:54,284  [I] create_dbversion_catalog.sql file imported successfully
2026-08-12 06:35:54,284  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 06:35:54,617  [I] Table x_db_version_h already exists in database 'ranger'
2026-08-12 06:35:54,617  [I] --------- Importing Ranger Core DB Schema ---------
2026-08-12 06:35:54,617  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'Y';"
2026-08-12 06:35:54,900  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'N';"
2026-08-12 06:35:55,187  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('CORE_DB_SCHEMA', current_timestamp, 'Ranger 2.6.0', current_timestamp, 'dist-test-slave-42z9.c.gcp-upstream.internal','N') ;"
2026-08-12 06:35:55,503  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 06:35:55,865  [I] Table x_portal_user does not exist in database ranger
2026-08-12 06:35:55,865  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 06:35:56,167  [I] Table x_policy_ref_group does not exist in database ranger
2026-08-12 06:35:56,167  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 06:35:56,475  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 06:35:56,759  [I] Importing DB schema to database ranger from file: ranger_core_db_postgres.sql
2026-08-12 06:35:56,760  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/db/postgres/optimized/current/ranger_core_db_postgres.sql 
2026-08-12 06:35:57.585 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.596 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.607 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.617 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.627 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.638 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.688 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.694 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.703 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.711 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.719 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.728 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.735 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.744 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.749 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.756 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.762 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.768 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.773 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.779 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.782 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:57.786 UTC [2618] WARNING:  there is no transaction in progress
2026-08-12 06:35:58,202  [I] ranger_core_db_postgres.sql file imported successfully
2026-08-12 06:35:58,202  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set inst_by='Ranger 2.6.0' where active='Y' and updated_by='localhost';"
2026-08-12 06:35:58,549  [I] Patches status entries updated from base ranger version to current installed ranger version:Ranger 2.6.0
2026-08-12 06:35:58,550  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 06:35:58,850  [I] Table x_portal_user already exists in database 'ranger'
2026-08-12 06:35:58,850  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 06:35:59,165  [I] Table x_policy_ref_group already exists in database 'ranger'
2026-08-12 06:35:59,165  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 06:35:59,460  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 06:35:59,755  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set active='Y' where version='CORE_DB_SCHEMA' and active='N' and updated_by='dist-test-slave-42z9.c.gcp-upstream.internal';"
2026-08-12 06:36:00,065  [I] CORE_DB_SCHEMA import status has been updated
2026-08-12 06:36:00,066  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:40577/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and inst_by = 'Ranger 2.6.0' and active = 'Y';"
2026-08-12 06:36:00,366  [I] DB_PATCHES have already been applied
I20260812 06:36:00.372270  2063 mini_ranger.cc:192] Using Ranger class path: /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-admin:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/ews/lib/*:/usr/lib/jvm/temurin-17-jdk-amd64/lib/*:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/hadoop/*:/tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/ews/webapp
I20260812 06:36:00.372337  2063 mini_ranger.cc:194] Using host: 127.0.0.1
I20260812 06:36:00.374554  2063 mini_ranger.cc:240] Ranger admin URL: http://127.0.0.1:45299
Aug 12, 2026 6:36:00 AM org.apache.ranger.server.tomcat.EmbeddedServer getKeyManagers
WARNING: Config 'ranger.keystore.file' or 'ranger.service.https.attrib.keystore.file' is not found or contains blank value
Aug 12, 2026 6:36:00 AM org.apache.ranger.server.tomcat.EmbeddedServer getTrustManagers
WARNING: Config 'ranger.truststore.file' is not found or contains blank value!
Aug 12, 2026 6:36:01 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Deriving webapp folder from catalina.base property. folder=/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-admin/ews/webapp
Aug 12, 2026 6:36:01 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Webapp file =/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-admin/ews/webapp, webAppName = /
Aug 12, 2026 6:36:01 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Adding webapp [/] = path [/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-admin/ews/webapp] .....
Aug 12, 2026 6:36:01 AM org.apache.catalina.core.StandardContext setPath
WARNING: A context path must either be an empty string or start with a '/' and do not end with a '/'. The path [/] does not meet these criteria and has been changed to []
Aug 12, 2026 6:36:01 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Finished init of webapp [/] = path [/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-admin/ews/webapp].
Aug 12, 2026 6:36:01 AM org.apache.ranger.server.tomcat.EmbeddedServer startServer
INFO: Server Name : miniranger
Aug 12, 2026 6:36:01 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-45299"]
Aug 12, 2026 6:36:01 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Aug 12, 2026 6:36:01 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.98]
Aug 12, 2026 6:36:02 AM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
I20260812 06:36:02.690465  2063 mini_ranger.cc:161] Time spent starting Ranger: real 10.270s	user 0.000s	sys 0.008s
Aug 12, 2026 6:36:06 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 12, 2026 6:36:06 AM org.apache.catalina.core.ApplicationContext log
INFO: Initializing Spring root WebApplicationContext
[EL Warning]: metadata: 2026-08-12 06:36:09.763--ServerSession(1358557891)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
Aug 12, 2026 6:36:24 AM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
  org.apache.ranger.rest
  org.apache.ranger.common
  xa.rest
Aug 12, 2026 6:36:24 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
  class org.apache.ranger.rest.MetricsREST
  class org.apache.ranger.rest.RoleREST
  class org.apache.ranger.rest.XUserREST
  class org.apache.ranger.rest.SecurityZoneREST
  class org.apache.ranger.rest.ServiceREST
  class org.apache.ranger.rest.PublicAPIs
  class org.apache.ranger.rest.PublicAPIsv2
  class org.apache.ranger.rest.AssetREST
  class org.apache.ranger.rest.TagREST
  class org.apache.ranger.rest.XKeyREST
  class org.apache.ranger.rest.XAuditREST
  class org.apache.ranger.rest.UserREST
Aug 12, 2026 6:36:24 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Provider classes found:
  class org.apache.ranger.common.RangerJsonParserExceptionMapper
  class org.apache.ranger.common.RangerJsonProvider
  class org.apache.ranger.common.RangerJsonMappingExceptionMapper
  class org.apache.ranger.common.RangerJAXBContextResolver
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.servlet.SpringServlet getContext
INFO: Using default applicationContext
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonMappingExceptionMapper, of type org.apache.ranger.common.RangerJsonMappingExceptionMapper as a provider class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonParserExceptionMapper, of type org.apache.ranger.common.RangerJsonParserExceptionMapper as a provider class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonProvider, of type org.apache.ranger.common.RangerJsonProvider as a provider class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, assetREST, of type org.apache.ranger.rest.AssetREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, metricsREST, of type org.apache.ranger.rest.MetricsREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIs, of type org.apache.ranger.rest.PublicAPIs as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIsv2, of type org.apache.ranger.rest.PublicAPIsv2 as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, roleREST, of type org.apache.ranger.rest.RoleREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, securityZoneREST, of type org.apache.ranger.rest.SecurityZoneREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, serviceREST, of type org.apache.ranger.rest.ServiceREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, tagREST, of type org.apache.ranger.rest.TagREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, userREST, of type org.apache.ranger.rest.UserREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XAuditREST, of type org.apache.ranger.rest.XAuditREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XKeyREST, of type org.apache.ranger.rest.XKeyREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XUserREST, of type org.apache.ranger.rest.XUserREST as a root resource class
Aug 12, 2026 6:36:24 AM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.19.4 05/24/2017 03:20 PM'
Aug 12, 2026 6:36:25 AM com.sun.jersey.spi.inject.Errors processErrorMessages
WARNING: The following warnings have been detected with resource and/or provider classes:
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.RoleREST.getRolesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInExcel(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInCsv(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) throws java.io.IOException, MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,java.lang.Boolean), MUST return a non-void type.
Aug 12, 2026 6:36:25 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-45299"]
I20260812 06:36:26.506662  2063 mini_ranger.cc:274] Created Kudu service
I20260812 06:36:26.777959  2063 mini_ranger.cc:389] Successfully created Ranger user: user
I20260812 06:36:27.083981  2063 ranger_client.cc:318] Using new properties file: /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 06:36:27.860 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-08-12 06:36:27.867 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-08-12 06:36:27.868 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-08-12 06:36:27.868 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-08-12 06:36:27.868 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-08-12 06:36:27.869 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-08-12 06:36:27.870 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-08-12 06:36:27.870 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/ranger-kudu-security.xml
2026-08-12 06:36:27.904 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-08-12 06:36:27.911 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-08-12 06:36:27.911 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-08-12 06:36:27.912 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-08-12 06:36:27.913 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-08-12 06:36:27.916 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-08-12 06:36:27.919 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-08-12 06:36:27.919 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-08-12 06:36:27.920 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-08-12 06:36:27.920 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 06:36:27.920 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-08-12 06:36:27.921 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-08-12 06:36:27.947 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-08-12 06:36:27.947 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-08-12 06:36:27.948 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-08-12 06:36:27.948 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-08-12 06:36:27.948 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-08-12 06:36:27.949 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-08-12 06:36:27.949 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-08-12 06:36:27.949 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-08-12 06:36:27.950 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-08-12 06:36:27.950 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-08-12 06:36:27.950 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-08-12 06:36:27.950 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 06:36:27.951 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-08-12 06:36:27.952 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-08-12 06:36:27.952 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-08-12 06:36:27.953 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 06:36:27.955 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 06:36:27.958 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-08-12 06:36:27.959 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-08-12 06:36:28.039 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-08-12 06:36:28.039 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-08-12 06:36:28.092 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-08-12 06:36:28.093 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-08-12 06:36:28.114 [DEBUG - main] (Groups.java:476)  Creating new Groups object
2026-08-12 06:36:28.132 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-08-12 06:36:28.133 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 06:36:28.133 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 06:36:28.134 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:45299
2026-08-12 06:36:28.134 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 06:36:28.134 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 06:36:28.135 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786516548054313-2063-0/policy-cache
2026-08-12 06:36:28.135 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 06:36:28.135 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 06:36:28.135 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 06:36:28.137 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 06:36:28.158 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 06:36:28.158 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-08-12 06:36:28.158 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-08-12 06:36:28.199 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:45299, null)
2026-08-12 06:36:28.209 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:45299, null)
2026-08-12 06:36:28.210 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@1c481ff2
2026-08-12 06:36:28.211 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 06:36:28.211 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 06:36:28.211 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 06:36:28.212 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 06:36:28.212 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 06:36:28.212 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-08-12 06:36:28.213 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM)  = true
2026-08-12 06:36:28.213 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled  = true
2026-08-12 06:36:28.213 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled  = true
2026-08-12 06:36:28.214 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 12460688, Free memory:237100400
2026-08-12 06:36:28.214 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-08-12 06:36:28.215 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-08-12 06:36:28.228 [DEBUG - main] (UserGroupInformation.java:244) Hadoop login
2026-08-12 06:36:28.241 [DEBUG - main] (UserGroupInformation.java:190) hadoop login commit
2026-08-12 06:36:28.244 [DEBUG - main] (UserGroupInformation.java:212) Using local user: UnixPrincipal: slave
2026-08-12 06:36:28.246 [DEBUG - main] (UserGroupInformation.java:216) Using user: "UnixPrincipal: slave" with name: slave
2026-08-12 06:36:28.247 [DEBUG - main] (UserGroupInformation.java:228) User entry: "slave"
2026-08-12 06:36:28.247 [DEBUG - main] (UserGroupInformation.java:799) UGI loginUser: slave (auth:SIMPLE)
2026-08-12 06:36:28.248 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-08-12 06:36:28.706 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:36:28.868 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0): 
2026-08-12 06:36:28.868 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-08-12 06:36:28.899 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):30184811:30336167
2026-08-12 06:36:28.899 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-08-12 06:36:28.900 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 06:36:28.900 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):360373914:685325103
2026-08-12 06:36:28.900 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-08-12 06:36:28.900 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 29735328, Free memory:219825760
2026-08-12 06:36:28.901 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):361454827:686401544
2026-08-12 06:36:28.901 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-08-12 06:36:28.901 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 06:36:28.901 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 06:36:28.901 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 29735328, Free memory:219825760
2026-08-12 06:36:28.901 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 06:36:28.902 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-08-12 06:36:28.902 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-08-12 06:36:29.012 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:36:29.120 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-08-12 06:36:29.121 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 06:36:29.122 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):102810831:219884696
2026-08-12 06:36:29.122 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 06:36:29.122 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 33512448, Free memory:216048640
2026-08-12 06:36:29.123 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 06:36:29.128 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 06:36:29.129 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 06:36:29.130 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-08-12 06:36:29.133 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@6ac4944a)
2026-08-12 06:36:29.134 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 36688328, Free memory:212872760
2026-08-12 06:36:29.138 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-08-12 06:36:29.138 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-08-12 06:36:29.139 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 06:36:29.139 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 06:36:29.140 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 06:36:29.142 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 06:36:29.143 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 06:36:29.150 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-08-12 06:36:29.152 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:36:29.154 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:36:29.154 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:36:29.154 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:36:29.155 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:36:29.155 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:36:29.155 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.156 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.157 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:36:15 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:36:29.158 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 06:36:29.158 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:36:29.158 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.159 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.159 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.159 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.159 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.159 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.159 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.160 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.160 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.160 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.160 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.160 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:36:29.160 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 06:36:29.163 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:36:29.164 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:36:29.164 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 06:36:29.164 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:36:29.165 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:36:29.167 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:36:29.167 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 06:36:29.167 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:36:29.168 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:36:29.168 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:36:29.168 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:36:29.170 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:36:29.170 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 06:36:29.170 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:36:29.170 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:36:29.171 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:36:29.171 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:36:29.171 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:36:29.171 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 06:36:29.171 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 06:36:29.172 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:36:29.175 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:36:29.176 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:36:29.176 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:36:29.176 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:36:29.177 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:36:29.178 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:36:29.178 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 06:36:29.178 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 06:36:29.178 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 06:36:29.178 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:36:29.179 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:36:29.179 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:36:29.179 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:36:29.179 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:36:29.179 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:36:29.179 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:36:29.180 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 06:36:29.180 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-08-12 06:36:29.180 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():12949644:12952317
2026-08-12 06:36:29.180 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:36:29.181 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 06:36:29.182 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-08-12 06:36:29.183 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):28621:29101
2026-08-12 06:36:29.183 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-08-12 06:36:29.184 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):18096:60394
2026-08-12 06:36:29.184 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):20199039:20210776
2026-08-12 06:36:29.184 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:36:29.184 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 06:36:29.185 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-08-12 06:36:29.185 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 06:36:29.186 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-08-12 06:36:29.186 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:36:29.187 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-08-12 06:36:29.187 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:36:29.187 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 06:36:29.187 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-08-12 06:36:29.188 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 06:36:29.188 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 06:36:29.188 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 06:36:29.196 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.197 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:36:29.198 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):1159226:1161128
2026-08-12 06:36:29.198 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.198 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1848038:1849318
2026-08-12 06:36:29.199 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.199 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.199 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.199 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:36:29.200 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):32680:32534
2026-08-12 06:36:29.200 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.200 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):549916:550675
2026-08-12 06:36:29.200 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.200 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.200 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.201 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:36:29.201 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):49229:49335
2026-08-12 06:36:29.201 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.201 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):508759:510624
2026-08-12 06:36:29.201 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.201 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.201 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.202 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.202 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10870:10766
2026-08-12 06:36:29.202 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.202 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):564965:566657
2026-08-12 06:36:29.202 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.203 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.203 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.203 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.203 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):11321:11170
2026-08-12 06:36:29.203 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.203 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):470964:472066
2026-08-12 06:36:29.204 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.204 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.204 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.204 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.204 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):11822:11230
2026-08-12 06:36:29.204 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.205 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):634578:636832
2026-08-12 06:36:29.205 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.205 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.205 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.205 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.206 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):11448:11076
2026-08-12 06:36:29.206 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.206 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):597332:597602
2026-08-12 06:36:29.206 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.206 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.206 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.207 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.207 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):11052:10951
2026-08-12 06:36:29.207 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.207 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):558070:559662
2026-08-12 06:36:29.207 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.208 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.208 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.208 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.209 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):11970:11051
2026-08-12 06:36:29.209 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.209 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):645504:603298
2026-08-12 06:36:29.209 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.209 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.209 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.210 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.210 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10652:10520
2026-08-12 06:36:29.210 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.210 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):568100:569330
2026-08-12 06:36:29.210 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.210 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.211 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.211 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.211 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10598:10433
2026-08-12 06:36:29.211 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.211 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):534123:534705
2026-08-12 06:36:29.211 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.212 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.212 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.212 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.212 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):16904:16860
2026-08-12 06:36:29.212 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.212 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):514277:516525
2026-08-12 06:36:29.212 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.213 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.213 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:36:29.213 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:36:29.214 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:36:29.214 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:36:29.214 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:36:29.214 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:36:29.214 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.215 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.215 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:36:15 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:36:29.215 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-08-12 06:36:29.217 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-08-12 06:36:29.218 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-08-12 06:36:29.219 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 06:36:29.219 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:36:29.219 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:36:29.219 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:36:29.219 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:36:29.222 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 06:36:29.222 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:36:29.223 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:36:29.223 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:36:29.223 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:36:29.223 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.223 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Wed Aug 12 06:36:22 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.224 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:36:29.225 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 06:36:29.226 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:36:29.226 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:36:29.226 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:36:29.227 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:36:29.227 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:36:29.227 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:36:29.227 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-08-12 06:36:29.227 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-08-12 06:36:29.228 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-08-12 06:36:29.228 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:36:29.228 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:36:29.228 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:36:29.228 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 06:36:29.228 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 06:36:29.228 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:36:29.229 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:36:29.229 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:36:29.229 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:36:29.229 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:36:29.229 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 06:36:29.230 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 06:36:29.230 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-08-12 06:36:29.230 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():2927591:2974986
2026-08-12 06:36:29.230 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:36:29.231 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:36:29.231 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-08-12 06:36:29.231 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-08-12 06:36:29.232 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@2f19f2aa
2026-08-12 06:36:29.232 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:36:29.233 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:36:29.233 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-08-12 06:36:29.233 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-08-12 06:36:29.238 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-08-12 06:36:29.250 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-08-12 06:36:29.259 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-08-12 06:36:29.261 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 06:36:29.262 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-08-12 06:36:29.262 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 06:36:29.262 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 06:36:29.262 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 06:36:29.263 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-08-12 06:36:29.263 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 06:36:29.263 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:36:29.263 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-08-12 06:36:29.263 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):31085055:31126237
2026-08-12 06:36:29.264 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):32240709:32281359
2026-08-12 06:36:29.264 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-08-12 06:36:29.264 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):16693:16276
2026-08-12 06:36:29.264 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):38189232:38277943
2026-08-12 06:36:29.264 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:36:29.265 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 06:36:29.265 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-08-12 06:36:29.265 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 06:36:29.265 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-08-12 06:36:29.265 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:36:29.266 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-08-12 06:36:29.266 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:36:29.267 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 06:36:29.267 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-08-12 06:36:29.267 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 06:36:29.267 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 06:36:29.267 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 06:36:29.267 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:36:29.272 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-08-12 06:36:29.272 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:36:29.272 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:36:29.273 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:36:29.273 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:36:29.273 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:36:29.273 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:36:29.273 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:36:29.274 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:36:29.274 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.274 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:36:29.275 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:36:15 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:36:29.276 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 06:36:29.277 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 06:36:29.277 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 06:36:29.360 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:36:29.382 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 06:36:29.382 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 06:36:29.391 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 06:36:29.391 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 06:36:29.392 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 06:36:29.392 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-08-12 06:36:29.392 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 06:36:29.392 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-08-12 06:36:29.392 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-08-12 06:36:29.393 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):889720:890701
2026-08-12 06:36:29.393 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 06:36:29.393 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 06:36:29.394 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-08-12 06:36:29.395 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-08-12 06:36:29.395 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-08-12 06:36:29.395 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):44834039:127662162
2026-08-12 06:36:29.395 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1d81e101
2026-08-12 06:36:29.397 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-08-12 06:36:29.398 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-08-12 06:36:29.398 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:36:29.398 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:36:29.399 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:36:29.399 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:36:29.399 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:36:29.399 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():20524:20396
2026-08-12 06:36:29.399 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:36:29.400 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:36:29.400 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):14684:13812
2026-08-12 06:36:29.401 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):2767397:2767545
2026-08-12 06:36:29.401 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:36:29.402 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-08-12 06:36:29.402 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-08-12 06:36:29.402 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.402 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:36:29.402 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):37408:37993
2026-08-12 06:36:29.402 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.402 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):431968:432164
2026-08-12 06:36:29.402 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.403 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.403 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.403 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.403 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):8914:9245
2026-08-12 06:36:29.403 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.403 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):375274:376172
2026-08-12 06:36:29.403 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.404 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.404 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.404 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:36:29.404 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):19267:19615
2026-08-12 06:36:29.404 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.404 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):470704:471354
2026-08-12 06:36:29.404 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.405 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.405 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:36:29.405 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:36:29.405 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):61909:62994
2026-08-12 06:36:29.405 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:36:29.405 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):555781:556891
2026-08-12 06:36:29.405 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.406 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:36:29.406 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=5a772895):187617447:271319077
2026-08-12 06:36:29.406 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 47093568, Free memory:202467520
2026-08-12 06:36:29.406 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-08-12 06:36:29.407 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 06:36:29.408 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 06:36:29.408 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 06:36:29.462 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 06:36:29.462 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):43101719:53791739
2026-08-12 06:36:29.462 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 06:36:29.463 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:36:27 UTC 2026, policies=[RangerPolicy={id={2} guid={31ae5736-3f01-496b-b578-cbf68a78fbbc} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:36:26 UTC 2026, policies=[RangerPolicy={id={1} guid={d97539e8-b4d3-4f37-969b-9c7e0bb0f04b} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:13 UTC 2026} updateTime={Wed Aug 12 06:36:22 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={976d2df4-8bdc-41c1-a3da-0a8d3e15b42e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:36:15 UTC 2026} updateTime={Wed Aug 12 06:36:15 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 06:36:29.466 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):350799821:564883864
2026-08-12 06:36:29.466 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 06:36:29.469 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-08-12 06:36:29.473 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-08-12 06:36:29.473 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-08-12 06:36:29.523 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@54e237be has been taken from the queue
2026-08-12 06:36:29.541 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@54e237be has been put on the queue
2026-08-12 06:36:29.632 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-08-12 06:36:29.636 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1809) Failed to get groups for user user
java.io.IOException: No groups found for user user
	at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
	at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3551)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2177)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2068)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:3986)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4007)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4946)
	at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
	at org.apache.hadoop.security.Groups.getGroupsSet(Groups.java:232)
	at org.apache.hadoop.security.UserGroupInformation.getGroupsSet(UserGroupInformation.java:1807)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
	at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
	at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
	at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
	at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2026-08-12 06:36:29.641 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-08-12 06:36:29.641 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(2d91da29_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 06:36:29.641 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 06:36:29.641 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-08-12 06:36:29.642 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 06:36:29.642 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 06:36:29.642 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 06:36:29.642 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=2d91da29, enricherName=TagEnricher):656253:656374
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-08-12 06:36:29.643 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-08-12 06:36:29.644 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-08-12 06:36:29.644 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 06:36:29.644 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 06:36:29.645 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.645 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.646 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-08-12 06:36:29.646 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-08-12 06:36:29.646 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 06:36:29.647 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:36:29.648 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):335373:338531
2026-08-12 06:36:29.648 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@322cd9
2026-08-12 06:36:29.648 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:36:29.648 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):23721:23959
2026-08-12 06:36:29.648 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@2080c873
2026-08-12 06:36:29.649 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:36:29.649 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):26634:26372
2026-08-12 06:36:29.649 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@d91794a
2026-08-12 06:36:29.650 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:36:29.651 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):635494:638937
2026-08-12 06:36:29.651 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@2a46f3d2
2026-08-12 06:36:29.651 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@56bc3fac]]
2026-08-12 06:36:29.651 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):5217175:5218994
2026-08-12 06:36:29.651 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-08-12 06:36:29.652 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 06:36:29 UTC 2026)
2026-08-12 06:36:29.652 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 06:36:29 UTC 2026) : true
2026-08-12 06:36:29.652 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:36:29.653 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:36:29.653 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 06:36:29.653 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 06:36:29.654 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:36:29.654 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:36:29.654 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:36:29.654 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:36:29.654 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:36:29.655 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 06:36:29.655 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:36:29.655 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:36:29.655 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:36:29.656 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:36:29.656 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:36:29.656 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:36:29.656 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-08-12 06:36:29.657 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:36:29.657 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 06:36:29.657 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:36:29.657 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:36:29.657 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():4880475:4880104
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-08-12 06:36:29.658 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 06:36:29.659 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[metadata]
2026-08-12 06:36:29.659 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af)
2026-08-12 06:36:29.659 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af): null
2026-08-12 06:36:29.659 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af)
2026-08-12 06:36:29.659 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af)
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af)
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af): true
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:235) ==> RangerDefaultPolicyItemEvaluator.matchCustomConditions(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af)
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:277) <== RangerDefaultPolicyItemEvaluator.matchCustomConditions(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af): true
2026-08-12 06:36:29.660 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):842970:842239
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af): true
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@e49a4af): org.apache.ranger.plugin.policyevaluator.RangerDefaultPolicyItemEvaluator@6f88e09c
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:535) ==> RangerDefaultPolicyEvaluator.updateAccessResult(RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}, SELF, true, null, 2)
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:555) <== RangerDefaultPolicyEvaluator.updateAccessResult(RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}, SELF, true, null, 2)
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{metadata=RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}, SELF)
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=2d91da29,policyId=2, policyName=db;table;):9211103:9211399
2026-08-12 06:36:29.661 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{metadata=RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=2d91da29_0):21388704:21390216
2026-08-12 06:36:29.662 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 06:36:29.663 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.663 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.663 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.663 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.663 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 06:36:29.663 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):22439:22920
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@2881ff79
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):25405:26339
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@1c2ac333
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):1055733:1057086
2026-08-12 06:36:29.664 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-08-12 06:36:29.665 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}): ret=false
2026-08-12 06:36:29.665 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.665 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.665 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.666 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0
2026-08-12 06:36:29.666 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:36:29 UTC 2026;accessType=metadata;resourcePath=db/table;resourceType=table;action=metadata;accessResult=1;agentId=kudu;policyId=2;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=1;additionalInfo=null}
2026-08-12 06:36:29.666 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:36:29 UTC 2026;accessType=metadata;resourcePath=db/table;resourceType=table;action=metadata;accessResult=1;agentId=kudu;policyId=2;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=1;additionalInfo=null})
2026-08-12 06:36:29.666 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:36:29 UTC 2026;accessType=metadata;resourcePath=db/table;resourceType=table;action=metadata;accessResult=1;agentId=kudu;policyId=2;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=1;additionalInfo=null})
2026-08-12 06:36:29.666 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:36:29.666 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={bcdb3ceb-0e81-423f-aebc-07785b2f7e4e-0} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}]
2026-08-12 06:36:29.675 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@16a72615 has been put on the queue
2026-08-12 06:36:29.675 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@16a72615 has been taken from the queue
I20260812 06:36:29.687752  3046 server.cc:273] Received an EOF from the subprocess
W20260812 06:36:29.687990  2998 server.cc:408] The subprocess has exited with status 9
I20260812 06:36:29.697194  3040 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:36:29.697182  3047 server.cc:440] outbound queue shut down: Aborted: 
I20260812 06:36:29.697194  3042 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:36:29.697223  3044 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 06:36:29.697662  2063 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 06:36:29.697738  2063 mini_ranger.cc:67] Stopping Ranger...
I20260812 06:36:30.051640  2063 mini_ranger.cc:69] Stopped Ranger
2026-08-12 06:36:30.051 UTC [2094] LOG:  received smart shutdown request
2026-08-12 06:36:30.055 UTC [2094] LOG:  background worker "logical replication launcher" (PID 2104) exited with exit code 1
2026-08-12 06:36:30.055 UTC [2098] LOG:  shutting down
2026-08-12 06:36:30.057 UTC [2098] LOG:  checkpoint starting: shutdown immediate
2026-08-12 06:36:30.473 UTC [2098] LOG:  checkpoint complete: wrote 1555 buffers (9.5%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.023 s, sync=0.388 s, total=0.418 s; sync files=832, longest=0.005 s, average=0.001 s; distance=8445 kB, estimate=8445 kB; lsn=0/1CB9DB8, redo lsn=0/1CB9DB8
2026-08-12 06:36:30.480 UTC [2094] LOG:  database system is shut down
[       OK ] RangerClientTestExtraJVMArgs.SmokeTest (42481 ms)
[ RUN      ] RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments

[WARNING] /home/jenkins-slave/workspace/build_and_test/thirdparty/src/googletest-release-1.12.1/googletest/src/gtest-death-test.cc:1108:: Death tests use fork(), which is unsafe particularly in a threaded context. For this test, Google Test detected 3 threads. See https://github.com/google/googletest/blob/master/docs/advanced.md#death-tests-and-threads for more explanation and suggested solutions, especially if this is the last message you see before your test times out.
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.

The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".

Data page checksums are disabled.

creating directory /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments.1786516548054313-3089-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok


Success. You can now start the database server using:

    /tmp/dist-test-taskU1kJwq/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments.1786516548054313-3089-0/postgres -l logfile start

127.0.0.1:40151 - accepting connections
[EL Warning]: metadata: 2026-08-12 06:36:52.247--ServerSession(1358557891)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
[       OK ] RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments (39684 ms)
[----------] 2 tests from RangerClientTestExtraJVMArgs (82166 ms total)

[----------] 1 test from RangerClientTestBase
[ RUN      ] RangerClientTestBase.TestLogging
I20260812 06:37:10.234704  2063 mini_postgres.cc:62] Running initdb...
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.

The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".

Data page checksums are disabled.

creating directory /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok

initdb: warning: enabling "trust" authentication for local connections
initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.

Success. You can now start the database server using:

    /tmp/dist-test-taskU1kJwq/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/postgres -l logfile start

2026-08-12 06:37:12.566 UTC [4031] LOG:  starting PostgreSQL 17.2 on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0, 64-bit
2026-08-12 06:37:12.566 UTC [4031] LOG:  listening on IPv4 address "127.0.0.1", port 54021
2026-08-12 06:37:12.570 UTC [4031] LOG:  listening on Unix socket "/tmp/.s.PGSQL.54021"
2026-08-12 06:37:12.575 UTC [4043] LOG:  database system was shut down at 2026-08-12 06:37:11 UTC
2026-08-12 06:37:12.579 UTC [4031] LOG:  database system is ready to accept connections
I20260812 06:37:14.555867  2063 mini_postgres.cc:96] Postgres bound to 54021
2026-08-12 06:37:14.561 UTC [4053] FATAL:  database "slave" does not exist
127.0.0.1:54021 - accepting connections
I20260812 06:37:14.561898  2063 mini_ranger.cc:162] Starting Ranger...
I20260812 06:37:14.578819  2063 mini_ranger.cc:85] Created miniranger Postgres user
I20260812 06:37:14.645421  2063 mini_ranger.cc:88] Created ranger Postgres database
I20260812 06:37:14.645534  2063 mini_ranger.cc:179] Starting Ranger out of /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-admin
2026-08-12 06:37:15,026  [I] DB FLAVOR :POSTGRES
2026-08-12 06:37:15,027  [I] --------- Verifying Ranger DB connection ---------
2026-08-12 06:37:15,027  [I] Checking connection..
2026-08-12 06:37:15,027  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select 1;"
2026-08-12 06:37:15,337  [I] Checking connection passed.
2026-08-12 06:37:15,337  [I] --------- Verifying version history table ---------
2026-08-12 06:37:15,337  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 06:37:15,644  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 06:37:15,644  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 06:37:15,952  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 06:37:15,952  [I] Importing x_db_version_h table schema to database ranger from file: create_dbversion_catalog.sql
2026-08-12 06:37:15,952  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/db/postgres/create_dbversion_catalog.sql 
2026-08-12 06:37:16.231 UTC [4246] WARNING:  there is no transaction in progress
2026-08-12 06:37:16,247  [I] create_dbversion_catalog.sql file imported successfully
2026-08-12 06:37:16,248  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 06:37:16,553  [I] Table x_db_version_h already exists in database 'ranger'
2026-08-12 06:37:16,553  [I] --------- Importing Ranger Core DB Schema ---------
2026-08-12 06:37:16,553  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'Y';"
2026-08-12 06:37:16,841  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'N';"
2026-08-12 06:37:17,157  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('CORE_DB_SCHEMA', current_timestamp, 'Ranger 2.6.0', current_timestamp, 'dist-test-slave-42z9.c.gcp-upstream.internal','N') ;"
2026-08-12 06:37:17,477  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 06:37:17,792  [I] Table x_portal_user does not exist in database ranger
2026-08-12 06:37:17,792  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 06:37:18,146  [I] Table x_policy_ref_group does not exist in database ranger
2026-08-12 06:37:18,146  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 06:37:18,444  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 06:37:18,777  [I] Importing DB schema to database ranger from file: ranger_core_db_postgres.sql
2026-08-12 06:37:18,778  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/db/postgres/optimized/current/ranger_core_db_postgres.sql 
2026-08-12 06:37:19.574 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.584 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.596 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.605 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.619 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.629 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.672 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.678 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.689 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.698 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.706 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.715 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.723 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.731 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.736 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.744 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.750 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.756 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.761 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.766 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.770 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:19.774 UTC [4562] WARNING:  there is no transaction in progress
2026-08-12 06:37:20,192  [I] ranger_core_db_postgres.sql file imported successfully
2026-08-12 06:37:20,192  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set inst_by='Ranger 2.6.0' where active='Y' and updated_by='localhost';"
2026-08-12 06:37:20,496  [I] Patches status entries updated from base ranger version to current installed ranger version:Ranger 2.6.0
2026-08-12 06:37:20,497  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 06:37:20,793  [I] Table x_portal_user already exists in database 'ranger'
2026-08-12 06:37:20,793  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 06:37:21,148  [I] Table x_policy_ref_group already exists in database 'ranger'
2026-08-12 06:37:21,149  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 06:37:21,464  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 06:37:21,774  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set active='Y' where version='CORE_DB_SCHEMA' and active='N' and updated_by='dist-test-slave-42z9.c.gcp-upstream.internal';"
2026-08-12 06:37:22,123  [I] CORE_DB_SCHEMA import status has been updated
2026-08-12 06:37:22,123  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:54021/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and inst_by = 'Ranger 2.6.0' and active = 'Y';"
2026-08-12 06:37:22,425  [I] DB_PATCHES have already been applied
I20260812 06:37:22.431257  2063 mini_ranger.cc:192] Using Ranger class path: /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-admin:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/ews/lib/*:/usr/lib/jvm/temurin-17-jdk-amd64/lib/*:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/hadoop/*:/tmp/dist-test-taskU1kJwq/build/debug/bin/postgresql.jar:/tmp/dist-test-taskU1kJwq/thirdparty/installed/common/opt/ranger/ews/webapp
I20260812 06:37:22.431325  2063 mini_ranger.cc:194] Using host: 127.0.0.1
I20260812 06:37:22.433560  2063 mini_ranger.cc:240] Ranger admin URL: http://127.0.0.1:44409
Aug 12, 2026 6:37:22 AM org.apache.ranger.server.tomcat.EmbeddedServer getKeyManagers
WARNING: Config 'ranger.keystore.file' or 'ranger.service.https.attrib.keystore.file' is not found or contains blank value
Aug 12, 2026 6:37:23 AM org.apache.ranger.server.tomcat.EmbeddedServer getTrustManagers
WARNING: Config 'ranger.truststore.file' is not found or contains blank value!
Aug 12, 2026 6:37:23 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Deriving webapp folder from catalina.base property. folder=/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-admin/ews/webapp
Aug 12, 2026 6:37:23 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Webapp file =/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-admin/ews/webapp, webAppName = /
Aug 12, 2026 6:37:23 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Adding webapp [/] = path [/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-admin/ews/webapp] .....
Aug 12, 2026 6:37:23 AM org.apache.catalina.core.StandardContext setPath
WARNING: A context path must either be an empty string or start with a '/' and do not end with a '/'. The path [/] does not meet these criteria and has been changed to []
Aug 12, 2026 6:37:23 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Finished init of webapp [/] = path [/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-admin/ews/webapp].
Aug 12, 2026 6:37:23 AM org.apache.ranger.server.tomcat.EmbeddedServer startServer
INFO: Server Name : miniranger
Aug 12, 2026 6:37:23 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-44409"]
Aug 12, 2026 6:37:23 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Aug 12, 2026 6:37:23 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.98]
Aug 12, 2026 6:37:24 AM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
I20260812 06:37:24.784128  2063 mini_ranger.cc:161] Time spent starting Ranger: real 10.222s	user 0.001s	sys 0.007s
Aug 12, 2026 6:37:28 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 12, 2026 6:37:28 AM org.apache.catalina.core.ApplicationContext log
INFO: Initializing Spring root WebApplicationContext
[EL Warning]: metadata: 2026-08-12 06:37:31.661--ServerSession(1358557891)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
Aug 12, 2026 6:37:46 AM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
  org.apache.ranger.rest
  org.apache.ranger.common
  xa.rest
Aug 12, 2026 6:37:46 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
  class org.apache.ranger.rest.PublicAPIsv2
  class org.apache.ranger.rest.ServiceREST
  class org.apache.ranger.rest.TagREST
  class org.apache.ranger.rest.UserREST
  class org.apache.ranger.rest.RoleREST
  class org.apache.ranger.rest.SecurityZoneREST
  class org.apache.ranger.rest.MetricsREST
  class org.apache.ranger.rest.PublicAPIs
  class org.apache.ranger.rest.XAuditREST
  class org.apache.ranger.rest.AssetREST
  class org.apache.ranger.rest.XUserREST
  class org.apache.ranger.rest.XKeyREST
Aug 12, 2026 6:37:46 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Provider classes found:
  class org.apache.ranger.common.RangerJsonMappingExceptionMapper
  class org.apache.ranger.common.RangerJsonParserExceptionMapper
  class org.apache.ranger.common.RangerJsonProvider
  class org.apache.ranger.common.RangerJAXBContextResolver
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.servlet.SpringServlet getContext
INFO: Using default applicationContext
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonMappingExceptionMapper, of type org.apache.ranger.common.RangerJsonMappingExceptionMapper as a provider class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonParserExceptionMapper, of type org.apache.ranger.common.RangerJsonParserExceptionMapper as a provider class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonProvider, of type org.apache.ranger.common.RangerJsonProvider as a provider class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, assetREST, of type org.apache.ranger.rest.AssetREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, metricsREST, of type org.apache.ranger.rest.MetricsREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIs, of type org.apache.ranger.rest.PublicAPIs as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIsv2, of type org.apache.ranger.rest.PublicAPIsv2 as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, roleREST, of type org.apache.ranger.rest.RoleREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, securityZoneREST, of type org.apache.ranger.rest.SecurityZoneREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, serviceREST, of type org.apache.ranger.rest.ServiceREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, tagREST, of type org.apache.ranger.rest.TagREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, userREST, of type org.apache.ranger.rest.UserREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XAuditREST, of type org.apache.ranger.rest.XAuditREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XKeyREST, of type org.apache.ranger.rest.XKeyREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XUserREST, of type org.apache.ranger.rest.XUserREST as a root resource class
Aug 12, 2026 6:37:46 AM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.19.4 05/24/2017 03:20 PM'
Aug 12, 2026 6:37:47 AM com.sun.jersey.spi.inject.Errors processErrorMessages
WARNING: The following warnings have been detected with resource and/or provider classes:
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.RoleREST.getRolesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInExcel(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInCsv(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) throws java.io.IOException, MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,java.lang.Boolean), MUST return a non-void type.
Aug 12, 2026 6:37:47 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-44409"]
I20260812 06:37:49.044212  2063 mini_ranger.cc:274] Created Kudu service
I20260812 06:37:49.299475  2063 mini_ranger.cc:389] Successfully created Ranger user: user
I20260812 06:37:49.555843  2063 ranger_client.cc:318] Using new properties file: /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 06:37:50.262 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-08-12 06:37:50.270 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-08-12 06:37:50.271 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-08-12 06:37:50.271 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-08-12 06:37:50.271 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-08-12 06:37:50.273 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-08-12 06:37:50.273 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-08-12 06:37:50.274 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-kudu-security.xml
2026-08-12 06:37:50.309 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-08-12 06:37:50.315 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-08-12 06:37:50.316 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-08-12 06:37:50.317 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-08-12 06:37:50.318 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-08-12 06:37:50.321 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-08-12 06:37:50.324 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-08-12 06:37:50.324 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-08-12 06:37:50.325 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-08-12 06:37:50.325 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 06:37:50.325 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-08-12 06:37:50.326 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-08-12 06:37:50.354 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-08-12 06:37:50.354 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-08-12 06:37:50.355 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-08-12 06:37:50.355 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-08-12 06:37:50.355 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-08-12 06:37:50.356 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-08-12 06:37:50.356 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-08-12 06:37:50.356 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-08-12 06:37:50.357 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-08-12 06:37:50.357 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-08-12 06:37:50.357 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-08-12 06:37:50.358 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 06:37:50.358 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-08-12 06:37:50.359 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-08-12 06:37:50.359 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-08-12 06:37:50.360 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 06:37:50.361 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 06:37:50.365 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-08-12 06:37:50.365 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-08-12 06:37:50.443 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-08-12 06:37:50.443 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-08-12 06:37:50.494 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-08-12 06:37:50.494 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-08-12 06:37:50.516 [DEBUG - main] (Groups.java:476)  Creating new Groups object
2026-08-12 06:37:50.535 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-08-12 06:37:50.536 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 06:37:50.537 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 06:37:50.538 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:44409
2026-08-12 06:37:50.538 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 06:37:50.538 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 06:37:50.538 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/policy-cache
2026-08-12 06:37:50.539 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 06:37:50.539 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 06:37:50.539 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 06:37:50.541 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 06:37:50.562 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 06:37:50.562 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-08-12 06:37:50.563 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-08-12 06:37:50.599 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:44409, null)
2026-08-12 06:37:50.604 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:44409, null)
2026-08-12 06:37:50.605 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@1c481ff2
2026-08-12 06:37:50.606 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 06:37:50.606 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 06:37:50.607 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 06:37:50.607 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 06:37:50.607 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 06:37:50.607 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-08-12 06:37:50.608 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM)  = true
2026-08-12 06:37:50.608 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled  = true
2026-08-12 06:37:50.608 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled  = true
2026-08-12 06:37:50.609 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 29563568, Free memory:222094672
2026-08-12 06:37:50.610 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-08-12 06:37:50.610 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-08-12 06:37:50.620 [DEBUG - main] (UserGroupInformation.java:244) Hadoop login
2026-08-12 06:37:50.635 [DEBUG - main] (UserGroupInformation.java:190) hadoop login commit
2026-08-12 06:37:50.639 [DEBUG - main] (UserGroupInformation.java:212) Using local user: UnixPrincipal: slave
2026-08-12 06:37:50.641 [DEBUG - main] (UserGroupInformation.java:216) Using user: "UnixPrincipal: slave" with name: slave
2026-08-12 06:37:50.641 [DEBUG - main] (UserGroupInformation.java:228) User entry: "slave"
2026-08-12 06:37:50.642 [DEBUG - main] (UserGroupInformation.java:799) UGI loginUser: slave (auth:SIMPLE)
2026-08-12 06:37:50.643 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-08-12 06:37:51.091 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:37:51.237 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0): 
2026-08-12 06:37:51.237 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-08-12 06:37:51.263 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):25980960:26020181
2026-08-12 06:37:51.264 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-08-12 06:37:51.264 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 06:37:51.264 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):357064526:654569707
2026-08-12 06:37:51.265 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-08-12 06:37:51.265 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 46340784, Free memory:205317456
2026-08-12 06:37:51.265 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):358213060:655714479
2026-08-12 06:37:51.265 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-08-12 06:37:51.265 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 06:37:51.266 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 06:37:51.266 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 46340784, Free memory:205317456
2026-08-12 06:37:51.266 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 06:37:51.266 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-08-12 06:37:51.266 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-08-12 06:37:51.376 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:37:51.497 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-08-12 06:37:51.499 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 06:37:51.499 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):123358582:233036448
2026-08-12 06:37:51.499 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 06:37:51.500 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 50607976, Free memory:201050264
2026-08-12 06:37:51.501 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 06:37:51.509 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 06:37:51.513 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 06:37:51.515 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-08-12 06:37:51.519 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@6ac4944a)
2026-08-12 06:37:51.520 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 53680816, Free memory:197977424
2026-08-12 06:37:51.523 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-08-12 06:37:51.523 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-08-12 06:37:51.524 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 06:37:51.525 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 06:37:51.526 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 06:37:51.528 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 06:37:51.529 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 06:37:51.535 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-08-12 06:37:51.536 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:37:51.538 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:37:51.538 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:51.538 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:51.539 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:51.539 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:51.539 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.539 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.541 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:37:37 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:37:51.541 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 06:37:51.542 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:51.542 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.542 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.543 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.544 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.544 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.544 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:51.544 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 06:37:51.547 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:51.547 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:51.548 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 06:37:51.548 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:51.548 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:37:51.550 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:37:51.551 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 06:37:51.551 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:51.551 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:51.551 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:51.552 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:51.553 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:51.553 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 06:37:51.553 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:51.554 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:51.554 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:51.554 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:51.554 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:51.555 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:51.555 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:51.555 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:37:51.558 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:37:51.559 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:51.559 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:51.560 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:37:51.560 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:51.561 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:51.561 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 06:37:51.561 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:51.561 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:51.562 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:37:51.562 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:37:51.562 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:51.562 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:51.562 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:37:51.563 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:51.563 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:51.563 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 06:37:51.563 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-08-12 06:37:51.563 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():12650905:12686885
2026-08-12 06:37:51.564 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:37:51.564 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 06:37:51.565 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-08-12 06:37:51.566 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):23836:24222
2026-08-12 06:37:51.566 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-08-12 06:37:51.567 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):13116:33823
2026-08-12 06:37:51.567 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):19680721:19733155
2026-08-12 06:37:51.567 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:51.568 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 06:37:51.568 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-08-12 06:37:51.568 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 06:37:51.569 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-08-12 06:37:51.569 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:51.569 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-08-12 06:37:51.570 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:37:51.570 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 06:37:51.570 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-08-12 06:37:51.570 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 06:37:51.570 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 06:37:51.571 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 06:37:51.577 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.578 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:51.579 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):899142:900768
2026-08-12 06:37:51.579 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.579 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1540429:1541701
2026-08-12 06:37:51.579 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.580 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.580 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.580 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:51.580 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):30796:30978
2026-08-12 06:37:51.580 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.581 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):522232:523676
2026-08-12 06:37:51.581 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.581 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.581 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.581 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:51.581 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):52379:52541
2026-08-12 06:37:51.582 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.582 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):514905:516032
2026-08-12 06:37:51.582 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.582 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.582 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.582 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.583 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10519:10825
2026-08-12 06:37:51.583 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.583 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):561879:563549
2026-08-12 06:37:51.583 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.583 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.583 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.584 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.584 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10164:10525
2026-08-12 06:37:51.584 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.584 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):473920:475366
2026-08-12 06:37:51.584 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.584 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.585 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.585 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.585 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10964:11416
2026-08-12 06:37:51.585 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.585 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):656019:658257
2026-08-12 06:37:51.586 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.586 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.586 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.586 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.586 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10360:10407
2026-08-12 06:37:51.587 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.587 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):594706:639312
2026-08-12 06:37:51.587 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.587 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.588 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.588 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.588 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):11098:11645
2026-08-12 06:37:51.588 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.588 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):608945:642224
2026-08-12 06:37:51.589 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.589 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.589 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.590 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.590 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10718:11041
2026-08-12 06:37:51.590 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.590 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):623240:715359
2026-08-12 06:37:51.591 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.591 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.591 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.591 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.592 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):17582:18275
2026-08-12 06:37:51.592 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.592 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):592109:682306
2026-08-12 06:37:51.592 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.592 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.593 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.593 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.593 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):11325:11672
2026-08-12 06:37:51.593 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.593 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):663169:697189
2026-08-12 06:37:51.594 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.594 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.594 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.594 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.595 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10930:11078
2026-08-12 06:37:51.595 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.595 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):548664:580062
2026-08-12 06:37:51.595 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.595 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.595 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:37:51.596 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:37:51.596 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:51.596 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:51.596 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:51.596 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:51.597 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.597 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.597 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:37:37 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:37:51.598 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-08-12 06:37:51.599 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-08-12 06:37:51.600 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-08-12 06:37:51.601 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 06:37:51.601 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:51.601 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:51.601 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:51.601 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:51.604 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 06:37:51.604 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:51.604 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:51.604 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:51.604 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:51.605 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.605 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Wed Aug 12 06:37:44 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.606 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.607 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.607 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.607 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.607 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.607 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:51.607 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 06:37:51.608 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:51.608 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:51.608 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:51.609 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:51.609 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:37:51.609 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:37:51.609 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-08-12 06:37:51.609 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-08-12 06:37:51.609 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-08-12 06:37:51.610 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:51.610 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:51.610 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:51.610 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:51.610 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:51.610 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:37:51.611 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:37:51.611 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:51.611 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:51.611 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:37:51.611 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 06:37:51.612 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 06:37:51.612 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-08-12 06:37:51.612 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():2959493:2988832
2026-08-12 06:37:51.612 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:37:51.613 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:51.613 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-08-12 06:37:51.613 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-08-12 06:37:51.614 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@2f19f2aa
2026-08-12 06:37:51.614 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:37:51.615 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:37:51.615 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-08-12 06:37:51.615 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-08-12 06:37:51.620 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-08-12 06:37:51.635 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-08-12 06:37:51.644 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-08-12 06:37:51.646 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 06:37:51.647 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-08-12 06:37:51.647 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 06:37:51.647 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 06:37:51.648 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 06:37:51.648 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-08-12 06:37:51.648 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 06:37:51.648 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:37:51.649 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-08-12 06:37:51.649 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):31433125:34500108
2026-08-12 06:37:51.649 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):32700317:35798262
2026-08-12 06:37:51.649 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-08-12 06:37:51.650 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):16491:15893
2026-08-12 06:37:51.650 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):38835254:42069380
2026-08-12 06:37:51.650 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:51.650 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 06:37:51.651 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-08-12 06:37:51.651 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 06:37:51.651 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-08-12 06:37:51.651 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:51.652 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-08-12 06:37:51.652 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:37:51.652 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 06:37:51.653 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-08-12 06:37:51.653 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 06:37:51.653 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 06:37:51.653 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 06:37:51.653 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:37:51.658 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-08-12 06:37:51.658 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:37:51.658 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:37:51.659 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:37:51.659 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:37:51.659 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:51.660 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:51.660 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:51.660 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:51.660 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.661 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:51.661 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:37:37 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:37:51.663 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 06:37:51.664 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 06:37:51.664 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 06:37:51.741 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:37:51.763 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 06:37:51.763 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 06:37:51.779 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 06:37:51.779 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 06:37:51.779 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 06:37:51.780 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-08-12 06:37:51.780 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 06:37:51.780 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-08-12 06:37:51.781 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-08-12 06:37:51.781 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):1103191:1496222
2026-08-12 06:37:51.781 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 06:37:51.781 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 06:37:51.783 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-08-12 06:37:51.783 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-08-12 06:37:51.783 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):46430050:129381214
2026-08-12 06:37:51.783 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1d81e101
2026-08-12 06:37:51.782 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-08-12 06:37:51.785 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-08-12 06:37:51.785 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-08-12 06:37:51.785 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:51.786 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:51.786 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:51.786 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:37:51.786 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:37:51.787 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():21645:20680
2026-08-12 06:37:51.787 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:37:51.787 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:51.788 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):16047:15015
2026-08-12 06:37:51.788 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):2512258:2511465
2026-08-12 06:37:51.788 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:51.789 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-08-12 06:37:51.789 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-08-12 06:37:51.789 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.789 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:51.790 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):85354:85569
2026-08-12 06:37:51.790 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.790 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):619540:669263
2026-08-12 06:37:51.790 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.790 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.790 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.791 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.791 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):11576:10987
2026-08-12 06:37:51.791 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.791 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):452888:454058
2026-08-12 06:37:51.791 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.791 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.792 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.792 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:51.792 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):10749:10756
2026-08-12 06:37:51.792 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.792 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):538478:659249
2026-08-12 06:37:51.793 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.793 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.793 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:51.793 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:51.794 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):31925:32044
2026-08-12 06:37:51.794 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:51.794 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):519290:643054
2026-08-12 06:37:51.794 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.794 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:51.795 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=5a772895):185335938:274861285
2026-08-12 06:37:51.795 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 64166576, Free memory:187491664
2026-08-12 06:37:51.795 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-08-12 06:37:51.797 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 06:37:51.797 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 06:37:51.797 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 06:37:51.841 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 06:37:51.841 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):43291060:43877106
2026-08-12 06:37:51.841 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 06:37:51.842 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 06:37:51.843 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):376532303:576992657
2026-08-12 06:37:51.843 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 06:37:51.843 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-08-12 06:37:51.845 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-08-12 06:37:51.845 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-08-12 06:37:51.898 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@334fd914 has been taken from the queue
2026-08-12 06:37:51.907 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@334fd914 has been put on the queue
2026-08-12 06:37:52.010 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-08-12 06:37:52.013 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1809) Failed to get groups for user user
java.io.IOException: No groups found for user user
	at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
	at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3551)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2177)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2068)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:3986)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4007)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4946)
	at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
	at org.apache.hadoop.security.Groups.getGroupsSet(Groups.java:232)
	at org.apache.hadoop.security.UserGroupInformation.getGroupsSet(UserGroupInformation.java:1807)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
	at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
	at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
	at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
	at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2026-08-12 06:37:52.017 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-08-12 06:37:52.017 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(10484fea_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 06:37:52.017 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 06:37:52.018 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-08-12 06:37:52.018 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 06:37:52.018 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 06:37:52.018 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 06:37:52.018 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=10484fea, enricherName=TagEnricher):621047:620555
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-08-12 06:37:52.019 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-08-12 06:37:52.020 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-08-12 06:37:52.020 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 06:37:52.020 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 06:37:52.021 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:37:52.021 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:37:52.021 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-08-12 06:37:52.021 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-08-12 06:37:52.022 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 06:37:52.022 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:37:52.023 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):274706:279059
2026-08-12 06:37:52.023 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@420636ab
2026-08-12 06:37:52.023 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:37:52.023 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):21611:21846
2026-08-12 06:37:52.023 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@2871f530
2026-08-12 06:37:52.024 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:37:52.024 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):27704:27702
2026-08-12 06:37:52.024 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@5490573
2026-08-12 06:37:52.025 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:37:52.026 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):689881:691464
2026-08-12 06:37:52.026 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@752d52a7
2026-08-12 06:37:52.026 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@56bc3fac]]
2026-08-12 06:37:52.026 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):4623820:4660989
2026-08-12 06:37:52.026 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-08-12 06:37:52.026 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 06:37:52 UTC 2026)
2026-08-12 06:37:52.027 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 06:37:52 UTC 2026) : true
2026-08-12 06:37:52.027 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.027 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:52.028 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 06:37:52.028 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 06:37:52.028 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:52.028 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:52.029 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:52.029 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:52.029 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:52.029 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 06:37:52.029 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:52.030 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:52.030 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:52.030 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:52.030 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:52.030 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:52.031 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-08-12 06:37:52.031 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:37:52.031 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 06:37:52.032 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:52.032 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:52.032 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-08-12 06:37:52.032 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:37:52.032 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 06:37:52.032 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():4626515:4657094
2026-08-12 06:37:52.033 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:37:52.033 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:52.033 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-08-12 06:37:52.033 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 06:37:52.033 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[all]
2026-08-12 06:37:52.034 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7)
2026-08-12 06:37:52.034 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7): null
2026-08-12 06:37:52.034 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7)
2026-08-12 06:37:52.034 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7)
2026-08-12 06:37:52.034 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7)
2026-08-12 06:37:52.035 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-08-12 06:37:52.035 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-08-12 06:37:52.035 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7): true
2026-08-12 06:37:52.035 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):702866:702334
2026-08-12 06:37:52.035 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7): false
2026-08-12 06:37:52.035 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2628f3c7): null
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=10484fea,policyId=2, policyName=db;table;):8642066:8673475
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:52.036 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=10484fea_0):19378380:19446447
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.037 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):25488:25445
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@85e8d95
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):18880:18676
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@4a629282
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-08-12 06:37:52.038 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):1014690:1015104
2026-08-12 06:37:52.039 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-08-12 06:37:52.039 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): ret=false
2026-08-12 06:37:52.039 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.039 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.039 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.040 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): 5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0
2026-08-12 06:37:52.040 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:37:52 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null}
2026-08-12 06:37:52.040 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:37:52 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 06:37:52.040 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:37:52 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 06:37:52.040 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:52.040 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={5f6baf30-cd3c-4cea-a18e-22d22ee363a2-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}]
2026-08-12 06:37:52.046 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@289be7af has been put on the queue
2026-08-12 06:37:52.046 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@289be7af has been taken from the queue
I20260812 06:37:52.067790  4966 server.cc:273] Received an EOF from the subprocess
W20260812 06:37:52.068186  4917 server.cc:408] The subprocess has exited with status 9
I20260812 06:37:52.071979  4963 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:37:52.071987  4967 server.cc:440] outbound queue shut down: Aborted: 
I20260812 06:37:52.072006  4964 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:37:52.072006  4958 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 06:37:52.072463  2063 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 06:37:52.072568  2063 ranger_client.cc:318] Using existing properties file: /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 06:37:52.792 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-08-12 06:37:52.800 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-08-12 06:37:52.800 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-08-12 06:37:52.800 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-08-12 06:37:52.800 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-08-12 06:37:52.802 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-08-12 06:37:52.802 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-08-12 06:37:52.803 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/ranger-kudu-security.xml
2026-08-12 06:37:52.838 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-08-12 06:37:52.845 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-08-12 06:37:52.845 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-08-12 06:37:52.846 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-08-12 06:37:52.847 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-08-12 06:37:52.850 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-08-12 06:37:52.853 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-08-12 06:37:52.853 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-08-12 06:37:52.854 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-08-12 06:37:52.854 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 06:37:52.854 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-08-12 06:37:52.855 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-08-12 06:37:52.882 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-08-12 06:37:52.882 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-08-12 06:37:52.883 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-08-12 06:37:52.883 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-08-12 06:37:52.883 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-08-12 06:37:52.883 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-08-12 06:37:52.884 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-08-12 06:37:52.884 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-08-12 06:37:52.884 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-08-12 06:37:52.885 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-08-12 06:37:52.885 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-08-12 06:37:52.885 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 06:37:52.885 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-08-12 06:37:52.886 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-08-12 06:37:52.887 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-08-12 06:37:52.887 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 06:37:52.889 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 06:37:52.892 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-08-12 06:37:52.892 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-08-12 06:37:52.969 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-08-12 06:37:52.969 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-08-12 06:37:53.021 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-08-12 06:37:53.022 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-08-12 06:37:53.044 [DEBUG - main] (Groups.java:476)  Creating new Groups object
2026-08-12 06:37:53.063 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-08-12 06:37:53.064 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 06:37:53.065 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 06:37:53.065 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:44409
2026-08-12 06:37:53.066 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 06:37:53.066 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 06:37:53.066 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/policy-cache
2026-08-12 06:37:53.066 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 06:37:53.067 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 06:37:53.067 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 06:37:53.069 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 06:37:53.088 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 06:37:53.089 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-08-12 06:37:53.089 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-08-12 06:37:53.129 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:44409, null)
2026-08-12 06:37:53.133 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:44409, null)
2026-08-12 06:37:53.134 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@1c481ff2
2026-08-12 06:37:53.135 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 06:37:53.135 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 06:37:53.136 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 06:37:53.136 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 06:37:53.136 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 06:37:53.136 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-08-12 06:37:53.137 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM)  = true
2026-08-12 06:37:53.138 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled  = true
2026-08-12 06:37:53.138 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled  = true
2026-08-12 06:37:53.139 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 29619864, Free memory:222038376
2026-08-12 06:37:53.139 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-08-12 06:37:53.139 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-08-12 06:37:53.153 [DEBUG - main] (UserGroupInformation.java:244) Hadoop login
2026-08-12 06:37:53.167 [DEBUG - main] (UserGroupInformation.java:190) hadoop login commit
2026-08-12 06:37:53.170 [DEBUG - main] (UserGroupInformation.java:212) Using local user: UnixPrincipal: slave
2026-08-12 06:37:53.172 [DEBUG - main] (UserGroupInformation.java:216) Using user: "UnixPrincipal: slave" with name: slave
2026-08-12 06:37:53.172 [DEBUG - main] (UserGroupInformation.java:228) User entry: "slave"
2026-08-12 06:37:53.172 [DEBUG - main] (UserGroupInformation.java:799) UGI loginUser: slave (auth:SIMPLE)
2026-08-12 06:37:53.173 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-08-12 06:37:53.337 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:37:53.490 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0): 
2026-08-12 06:37:53.490 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-08-12 06:37:53.520 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):29585971:29890596
2026-08-12 06:37:53.521 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-08-12 06:37:53.521 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 06:37:53.521 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):362772809:382040802
2026-08-12 06:37:53.521 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-08-12 06:37:53.521 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 46397080, Free memory:205261160
2026-08-12 06:37:53.522 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):363874163:383138370
2026-08-12 06:37:53.522 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-08-12 06:37:53.522 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 06:37:53.522 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 06:37:53.522 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 46397080, Free memory:205261160
2026-08-12 06:37:53.523 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 06:37:53.523 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-08-12 06:37:53.523 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-08-12 06:37:53.539 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:37:53.652 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-08-12 06:37:53.654 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 06:37:53.655 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):112397376:131839707
2026-08-12 06:37:53.655 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 06:37:53.655 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 50687544, Free memory:200970696
2026-08-12 06:37:53.657 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 06:37:53.665 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 06:37:53.667 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 06:37:53.669 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-08-12 06:37:53.672 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@6ac4944a)
2026-08-12 06:37:53.673 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 53737112, Free memory:197921128
2026-08-12 06:37:53.676 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-08-12 06:37:53.677 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-08-12 06:37:53.678 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 06:37:53.678 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 06:37:53.679 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 06:37:53.681 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 06:37:53.682 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 06:37:53.689 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-08-12 06:37:53.690 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:37:53.691 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:37:53.692 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:53.692 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:53.692 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:53.692 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:53.693 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.693 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.695 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:37:37 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:37:53.695 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 06:37:53.696 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:53.696 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.696 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.696 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.696 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.697 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.697 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.697 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.697 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.697 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.698 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.698 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.698 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 06:37:53.698 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 06:37:53.701 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:53.701 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:53.702 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 06:37:53.702 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:53.702 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:37:53.704 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:37:53.705 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 06:37:53.705 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:53.705 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:53.706 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:53.706 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:53.707 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:53.707 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 06:37:53.707 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:53.708 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:53.708 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:53.708 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:53.708 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:53.709 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:53.709 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:53.709 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:37:53.712 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:37:53.713 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:53.713 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:53.714 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:37:53.714 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:53.715 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:53.715 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 06:37:53.715 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:53.715 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:53.716 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:37:53.716 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:37:53.716 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:53.716 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:53.716 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:37:53.716 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:53.717 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 06:37:53.717 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 06:37:53.717 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-08-12 06:37:53.717 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():12420278:12458315
2026-08-12 06:37:53.717 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:37:53.718 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 06:37:53.719 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-08-12 06:37:53.720 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):24345:24480
2026-08-12 06:37:53.720 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-08-12 06:37:53.721 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):13378:33683
2026-08-12 06:37:53.721 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):19618517:19672889
2026-08-12 06:37:53.721 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:53.722 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 06:37:53.722 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-08-12 06:37:53.722 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 06:37:53.723 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-08-12 06:37:53.723 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:53.723 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-08-12 06:37:53.724 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:37:53.724 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 06:37:53.724 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-08-12 06:37:53.724 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 06:37:53.724 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 06:37:53.724 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 06:37:53.731 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.731 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:53.732 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):899824:901221
2026-08-12 06:37:53.732 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.733 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1522557:1523970
2026-08-12 06:37:53.733 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.733 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.733 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.734 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:53.734 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):32316:32601
2026-08-12 06:37:53.734 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.734 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):527651:529429
2026-08-12 06:37:53.734 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.734 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.734 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.735 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:53.735 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):54971:54789
2026-08-12 06:37:53.735 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.735 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):503662:505576
2026-08-12 06:37:53.735 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.735 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.736 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.736 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.736 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10982:10391
2026-08-12 06:37:53.736 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.736 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):543355:544827
2026-08-12 06:37:53.736 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.737 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.737 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.737 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.737 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10950:10777
2026-08-12 06:37:53.737 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.737 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):495808:497501
2026-08-12 06:37:53.738 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.738 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.738 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.738 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.738 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):11426:11302
2026-08-12 06:37:53.739 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.739 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):614150:615859
2026-08-12 06:37:53.739 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.739 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.739 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.740 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.740 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):11388:11075
2026-08-12 06:37:53.740 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.740 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):600832:600952
2026-08-12 06:37:53.740 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.741 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.741 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.741 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.741 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10849:11309
2026-08-12 06:37:53.742 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.742 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):610869:649256
2026-08-12 06:37:53.742 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.743 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.743 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.743 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.743 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):47675:12292
2026-08-12 06:37:53.744 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.744 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):652696:743334
2026-08-12 06:37:53.744 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.744 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.744 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.745 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.745 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):11251:11685
2026-08-12 06:37:53.745 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.745 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):635660:729824
2026-08-12 06:37:53.746 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.746 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.746 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.746 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.746 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10603:10884
2026-08-12 06:37:53.747 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.747 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):647036:714428
2026-08-12 06:37:53.747 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.747 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.747 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.748 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.748 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10848:10760
2026-08-12 06:37:53.748 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.748 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):496640:497918
2026-08-12 06:37:53.748 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.748 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.749 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:37:53.749 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:37:53.749 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:53.749 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:53.750 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:53.750 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:53.750 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.750 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.751 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:37:37 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:37:53.751 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-08-12 06:37:53.753 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-08-12 06:37:53.753 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-08-12 06:37:53.754 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 06:37:53.754 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:53.754 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:53.754 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:53.754 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:53.757 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 06:37:53.757 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:53.758 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:53.758 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 06:37:53.758 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 06:37:53.758 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.758 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Wed Aug 12 06:37:44 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.759 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.760 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 06:37:53.761 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 06:37:53.761 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:53.761 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:53.761 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:53.762 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:53.762 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:37:53.762 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:37:53.762 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-08-12 06:37:53.763 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-08-12 06:37:53.763 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-08-12 06:37:53.763 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:53.763 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:53.763 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:53.763 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:53.764 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 06:37:53.764 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 06:37:53.764 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 06:37:53.764 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:53.764 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 06:37:53.764 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 06:37:53.764 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 06:37:53.765 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 06:37:53.765 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-08-12 06:37:53.765 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():2718531:2718324
2026-08-12 06:37:53.765 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:37:53.766 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:53.766 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-08-12 06:37:53.766 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-08-12 06:37:53.767 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@2f19f2aa
2026-08-12 06:37:53.767 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:37:53.768 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:37:53.768 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-08-12 06:37:53.768 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-08-12 06:37:53.773 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-08-12 06:37:53.785 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-08-12 06:37:53.794 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-08-12 06:37:53.796 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 06:37:53.797 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-08-12 06:37:53.797 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 06:37:53.797 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 06:37:53.798 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 06:37:53.798 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-08-12 06:37:53.798 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 06:37:53.798 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 06:37:53.798 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-08-12 06:37:53.799 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):30636160:31239764
2026-08-12 06:37:53.799 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):31869389:32472293
2026-08-12 06:37:53.799 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-08-12 06:37:53.799 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):24816:24401
2026-08-12 06:37:53.799 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):37703837:38343448
2026-08-12 06:37:53.800 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:53.800 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 06:37:53.800 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-08-12 06:37:53.800 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 06:37:53.800 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-08-12 06:37:53.800 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 06:37:53.801 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-08-12 06:37:53.802 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:37:53.802 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 06:37:53.802 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-08-12 06:37:53.802 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 06:37:53.802 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 06:37:53.803 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 06:37:53.803 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:37:53.806 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-08-12 06:37:53.807 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:37:53.807 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 06:37:53.807 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 06:37:53.808 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 06:37:53.808 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:53.808 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:53.808 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 06:37:53.809 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 06:37:53.809 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.809 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 06:37:53.810 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 06:37:37 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 06:37:53.811 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 06:37:53.812 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 06:37:53.812 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 06:37:53.821 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 06:37:53.840 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 06:37:53.841 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 06:37:53.850 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 06:37:53.850 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 06:37:53.850 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 06:37:53.850 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-08-12 06:37:53.851 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 06:37:53.851 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-08-12 06:37:53.851 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-08-12 06:37:53.851 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):831231:833328
2026-08-12 06:37:53.851 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 06:37:53.851 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 06:37:53.852 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-08-12 06:37:53.853 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-08-12 06:37:53.853 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-08-12 06:37:53.853 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):41627162:49801239
2026-08-12 06:37:53.853 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1d81e101
2026-08-12 06:37:53.854 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-08-12 06:37:53.854 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-08-12 06:37:53.855 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:53.855 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:53.855 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 06:37:53.856 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 06:37:53.856 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 06:37:53.856 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():20408:20170
2026-08-12 06:37:53.856 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 06:37:53.856 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 06:37:53.857 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):11289:10686
2026-08-12 06:37:53.857 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):2142951:2142391
2026-08-12 06:37:53.857 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 06:37:53.858 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-08-12 06:37:53.858 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-08-12 06:37:53.858 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.858 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:53.858 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):32233:32897
2026-08-12 06:37:53.858 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.858 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):284346:284089
2026-08-12 06:37:53.858 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.858 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.858 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.859 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.859 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):7579:7415
2026-08-12 06:37:53.859 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.859 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):236769:236968
2026-08-12 06:37:53.859 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.859 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.859 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.859 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 06:37:53.860 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):11222:10815
2026-08-12 06:37:53.860 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.860 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):498943:500031
2026-08-12 06:37:53.860 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.860 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.860 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 06:37:53.860 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 06:37:53.861 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):29340:29112
2026-08-12 06:37:53.861 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 06:37:53.861 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):524045:525321
2026-08-12 06:37:53.861 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.861 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 06:37:53.861 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=5a772895):177084759:188233266
2026-08-12 06:37:53.861 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 64222872, Free memory:187435368
2026-08-12 06:37:53.862 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-08-12 06:37:53.863 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 06:37:53.863 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 06:37:53.863 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 06:37:53.904 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 06:37:53.905 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):41401627:41654492
2026-08-12 06:37:53.905 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 06:37:53.906 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={2} guid={172c7869-caae-4c01-92af-60e5ccb5d115} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 06:37:49 UTC 2026, policies=[RangerPolicy={id={1} guid={c9677935-c253-491e-b73d-6f5d670fd34e} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:36 UTC 2026} updateTime={Wed Aug 12 06:37:44 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={ae3bad83-75d8-49ec-b529-992e3de3a3b9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 06:37:37 UTC 2026} updateTime={Wed Aug 12 06:37:37 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 06:37:53.906 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):352919601:384000660
2026-08-12 06:37:53.906 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 06:37:53.907 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-08-12 06:37:53.909 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-08-12 06:37:53.909 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-08-12 06:37:53.956 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@78ac70bb has been put on the queue
2026-08-12 06:37:53.956 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@78ac70bb has been taken from the queue
2026-08-12 06:37:54.043 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-08-12 06:37:54.046 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1809) Failed to get groups for user user
java.io.IOException: No groups found for user user
	at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
	at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3551)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2177)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2068)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:3986)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4007)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4946)
	at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
	at org.apache.hadoop.security.Groups.getGroupsSet(Groups.java:232)
	at org.apache.hadoop.security.UserGroupInformation.getGroupsSet(UserGroupInformation.java:1807)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
	at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
	at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
	at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
	at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2026-08-12 06:37:54.049 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-08-12 06:37:54.049 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(2d9afb6d_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 06:37:54.050 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 06:37:54.050 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-08-12 06:37:54.050 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 06:37:54.050 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 06:37:54.050 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=2d9afb6d, enricherName=TagEnricher):643764:644512
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:54.051 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-08-12 06:37:54.052 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-08-12 06:37:54.052 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-08-12 06:37:54.052 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 06:37:54.052 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 06:37:54.053 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:37:54.053 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 06:37:54.053 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-08-12 06:37:54.054 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-08-12 06:37:54.054 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 06:37:54.055 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:37:54.055 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):274597:276124
2026-08-12 06:37:54.055 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@757f068
2026-08-12 06:37:54.055 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:37:54.055 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):21428:21587
2026-08-12 06:37:54.055 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@1c92b96a
2026-08-12 06:37:54.056 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:37:54.056 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):25718:25213
2026-08-12 06:37:54.056 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@10503ec6
2026-08-12 06:37:54.057 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:37:54.058 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):688788:718443
2026-08-12 06:37:54.058 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@2fa772cf
2026-08-12 06:37:54.058 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@56bc3fac]]
2026-08-12 06:37:54.059 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):4745553:4791339
2026-08-12 06:37:54.059 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-08-12 06:37:54.059 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 06:37:54 UTC 2026)
2026-08-12 06:37:54.059 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 06:37:54 UTC 2026) : true
2026-08-12 06:37:54.059 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.060 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:54.060 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 06:37:54.061 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 06:37:54.061 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:54.061 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:54.061 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:54.061 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 06:37:54.061 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 06:37:54.062 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 06:37:54.062 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:54.062 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 06:37:54.062 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 06:37:54.062 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 06:37:54.063 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:54.063 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:54.063 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-08-12 06:37:54.063 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:37:54.064 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 06:37:54.064 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:54.064 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 06:37:54.064 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-08-12 06:37:54.064 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():4252905:4295818
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 06:37:54.065 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[all]
2026-08-12 06:37:54.066 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921)
2026-08-12 06:37:54.066 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921): null
2026-08-12 06:37:54.066 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921)
2026-08-12 06:37:54.066 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921)
2026-08-12 06:37:54.066 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921)
2026-08-12 06:37:54.067 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-08-12 06:37:54.067 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-08-12 06:37:54.067 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921): true
2026-08-12 06:37:54.067 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):675037:674501
2026-08-12 06:37:54.067 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921): false
2026-08-12 06:37:54.067 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@4e281921): null
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=2d9afb6d,policyId=2, policyName=db;table;):8138993:8181656
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:54.068 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:54.069 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=2d9afb6d_0):19193853:19281145
2026-08-12 06:37:54.069 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 06:37:54.069 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.069 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.069 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.069 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):26786:26980
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@3d47ba40
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):16576:16789
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@54995dbf
2026-08-12 06:37:54.070 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-08-12 06:37:54.071 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):1002167:1003371
2026-08-12 06:37:54.071 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-08-12 06:37:54.071 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): ret=false
2026-08-12 06:37:54.071 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.071 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.071 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.072 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): 12c55f8d-ca75-4601-bf4b-d91d362851c4-0
2026-08-12 06:37:54.072 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={12c55f8d-ca75-4601-bf4b-d91d362851c4-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:37:54 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=12c55f8d-ca75-4601-bf4b-d91d362851c4-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null}
2026-08-12 06:37:54.072 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:37:54 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=12c55f8d-ca75-4601-bf4b-d91d362851c4-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 06:37:54.072 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 06:37:54 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-42z9;logType=RangerAudit;eventId=12c55f8d-ca75-4601-bf4b-d91d362851c4-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 06:37:54.072 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={12c55f8d-ca75-4601-bf4b-d91d362851c4-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 06:37:54.072 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={12c55f8d-ca75-4601-bf4b-d91d362851c4-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}]
2026-08-12 06:37:54.079 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@5c2a6852 has been put on the queue
2026-08-12 06:37:54.079 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@5c2a6852 has been taken from the queue
I20260812 06:37:54.102998  5055 server.cc:273] Received an EOF from the subprocess
W20260812 06:37:54.103370  5010 server.cc:408] The subprocess has exited with status 9
I20260812 06:37:54.104274  5052 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:37:54.104255  5047 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:37:54.104255  5057 server.cc:440] outbound queue shut down: Aborted: 
I20260812 06:37:54.104221  5051 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 06:37:54.104693  2063 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 06:37:54.105059  2063 ranger_client.cc:318] Using overwritten properties file: /tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 06:37:54.904 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 06:37:54.908 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 06:37:55.080 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 06:37:55.080 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 06:37:55.081 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:44409
2026-08-12 06:37:55.081 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 06:37:55.081 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 06:37:55.082 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskU1kJwq/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786516548054313-2063-0/policy-cache
2026-08-12 06:37:55.082 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 06:37:55.082 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 06:37:55.082 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 06:37:55.084 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 06:37:55.149 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 06:37:55.549 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 06:37:55.672 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 06:37:55.688 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 06:37:55.712 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:37:55.757 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 06:37:55.758 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 06:37:55.758 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 06:37:55.759 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 06:37:55.764 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 06:37:55.766 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 06:37:55.801 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 06:37:55.801 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 06:37:55.802 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 06:37:55.806 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 06:37:55.806 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 06:37:55.845 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 06:37:55.851 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
I20260812 06:37:56.013136  5128 server.cc:273] Received an EOF from the subprocess
W20260812 06:37:56.013355  5080 server.cc:408] The subprocess has exited with status 9
I20260812 06:37:56.020301  5122 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:37:56.020303  5130 server.cc:440] outbound queue shut down: Aborted: 
I20260812 06:37:56.020334  5121 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 06:37:56.020334  5125 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 06:37:56.020805  2063 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 06:37:56.020877  2063 mini_ranger.cc:67] Stopping Ranger...
I20260812 06:37:56.375458  2063 mini_ranger.cc:69] Stopped Ranger
2026-08-12 06:37:56.375 UTC [4031] LOG:  received smart shutdown request
2026-08-12 06:37:56.378 UTC [4031] LOG:  background worker "logical replication launcher" (PID 4050) exited with exit code 1
2026-08-12 06:37:56.379 UTC [4041] LOG:  shutting down
2026-08-12 06:37:56.380 UTC [4041] LOG:  checkpoint starting: shutdown immediate
2026-08-12 06:37:56.808 UTC [4041] LOG:  checkpoint complete: wrote 1555 buffers (9.5%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.022 s, sync=0.401 s, total=0.429 s; sync files=832, longest=0.004 s, average=0.001 s; distance=8448 kB, estimate=8448 kB; lsn=0/1CBAAE0, redo lsn=0/1CBAAE0
2026-08-12 06:37:56.814 UTC [4031] LOG:  database system is shut down
[       OK ] RangerClientTestBase.TestLogging (46647 ms)
[----------] 1 test from RangerClientTestBase (46647 ms total)

[----------] Global test environment tear-down
[==========] 22 tests from 3 test suites ran. (128824 ms total)
[  PASSED  ] 22 tests.
