[==========] Running 22 tests from 3 test suites.
[----------] Global test environment set-up.
[----------] 19 tests from RangerClientTest
[ RUN      ] RangerClientTest.TestAuthorizeCreateTableUnauthorized
[       OK ] RangerClientTest.TestAuthorizeCreateTableUnauthorized (2 ms)
[ RUN      ] RangerClientTest.TestAuthorizeCreateTableAuthorized
[       OK ] RangerClientTest.TestAuthorizeCreateTableAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeListNoTables
[       OK ] RangerClientTest.TestAuthorizeListNoTables (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeListNoTablesAuthorized
[       OK ] RangerClientTest.TestAuthorizeListNoTablesAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataSubsetOfTablesAuthorized
[       OK ] RangerClientTest.TestAuthorizeMetadataSubsetOfTablesAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataAllAuthorized
[       OK ] RangerClientTest.TestAuthorizeMetadataAllAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataAllNonRanger
WARNING: Logging before InitGoogleLogging() is written to STDERR
W20260812 08:00:55.091180 12129 ranger_client.cc:528] Denying action on table with invalid name .bar. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
W20260812 08:00:55.091306 12129 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[       OK ] RangerClientTest.TestAuthorizeMetadataAllNonRanger (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataNoneAuthorizedContainsNonRanger
W20260812 08:00:55.091917 12129 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
W20260812 08:00:55.091956 12129 ranger_client.cc:528] Denying action on table with invalid name .bar. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[       OK ] RangerClientTest.TestAuthorizeMetadataNoneAuthorizedContainsNonRanger (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeMetadataAllAuthorizedContainsNonRanger
W20260812 08:00:55.092553 12129 ranger_client.cc:528] Denying action on table with invalid name foo.. Use 'kudu table rename_table' to rename it to a Ranger-compatible name.
[       OK ] RangerClientTest.TestAuthorizeMetadataAllAuthorizedContainsNonRanger (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeScanSubsetAuthorized
[       OK ] RangerClientTest.TestAuthorizeScanSubsetAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeScanAllColumnsAuthorized
[       OK ] RangerClientTest.TestAuthorizeScanAllColumnsAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeScanNoColumnsAuthorized
[       OK ] RangerClientTest.TestAuthorizeScanNoColumnsAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeActionsNoneAuthorized
[       OK ] RangerClientTest.TestAuthorizeActionsNoneAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeActionsSomeAuthorized
[       OK ] RangerClientTest.TestAuthorizeActionsSomeAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestAuthorizeActionsAllAuthorized
[       OK ] RangerClientTest.TestAuthorizeActionsAllAuthorized (0 ms)
[ RUN      ] RangerClientTest.TestInvalidJARFails
E20260812 08:00:55.097076 12129 ranger_client.cc:390] --ranger_jar_path has invalid JAR file path: /this/is/not/a/real/location/hopefully.jar
[       OK ] RangerClientTest.TestInvalidJARFails (1 ms)
[ RUN      ] RangerClientTest.TestEmptyKeytabFile
E20260812 08:00:55.097800 12129 ranger_client.cc:397] --keytab_file is not set
[       OK ] RangerClientTest.TestEmptyKeytabFile (0 ms)
[ RUN      ] RangerClientTest.TestMultipleInvalidJARsLeftUnchecked
[       OK ] RangerClientTest.TestMultipleInvalidJARsLeftUnchecked (0 ms)
[ RUN      ] RangerClientTest.TestDefaultJARPath
[       OK ] RangerClientTest.TestDefaultJARPath (0 ms)
[----------] 19 tests from RangerClientTest (14 ms total)

[----------] 2 tests from RangerClientTestExtraJVMArgs
[ RUN      ] RangerClientTestExtraJVMArgs.SmokeTest
I20260812 08:00:55.099573 12129 mini_postgres.cc:62] Running initdb...
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.

The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".

Data page checksums are disabled.

creating directory /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok

initdb: warning: enabling "trust" authentication for local connections
initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.

Success. You can now start the database server using:

    /tmp/dist-test-taskhNgPHb/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/postgres -l logfile start

2026-08-12 08:00:58.053 UTC [12148] LOG:  starting PostgreSQL 17.2 on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0, 64-bit
2026-08-12 08:00:58.053 UTC [12148] LOG:  listening on IPv4 address "127.0.0.1", port 39469
2026-08-12 08:00:58.058 UTC [12148] LOG:  listening on Unix socket "/tmp/.s.PGSQL.39469"
2026-08-12 08:00:58.065 UTC [12153] LOG:  database system was shut down at 2026-08-12 08:00:56 UTC
2026-08-12 08:00:58.070 UTC [12148] LOG:  database system is ready to accept connections
I20260812 08:01:00.100885 12129 mini_postgres.cc:96] Postgres bound to 39469
2026-08-12 08:01:00.107 UTC [12160] FATAL:  database "slave" does not exist
127.0.0.1:39469 - accepting connections
I20260812 08:01:00.108881 12129 mini_ranger.cc:162] Starting Ranger...
I20260812 08:01:00.128973 12129 mini_ranger.cc:85] Created miniranger Postgres user
I20260812 08:01:00.208745 12129 mini_ranger.cc:88] Created ranger Postgres database
I20260812 08:01:00.208863 12129 mini_ranger.cc:179] Starting Ranger out of /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-admin
2026-08-12 08:01:00,876  [I] DB FLAVOR :POSTGRES
2026-08-12 08:01:00,876  [I] --------- Verifying Ranger DB connection ---------
2026-08-12 08:01:00,876  [I] Checking connection..
2026-08-12 08:01:00,876  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select 1;"
2026-08-12 08:01:01,290  [I] Checking connection passed.
2026-08-12 08:01:01,290  [I] --------- Verifying version history table ---------
2026-08-12 08:01:01,290  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 08:01:01,641  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 08:01:01,641  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 08:01:01,967  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 08:01:01,967  [I] Importing x_db_version_h table schema to database ranger from file: create_dbversion_catalog.sql
2026-08-12 08:01:01,968  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/db/postgres/create_dbversion_catalog.sql 
2026-08-12 08:01:02.316 UTC [12288] WARNING:  there is no transaction in progress
2026-08-12 08:01:02,335  [I] create_dbversion_catalog.sql file imported successfully
2026-08-12 08:01:02,335  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 08:01:02,655  [I] Table x_db_version_h already exists in database 'ranger'
2026-08-12 08:01:02,655  [I] --------- Importing Ranger Core DB Schema ---------
2026-08-12 08:01:02,656  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'Y';"
2026-08-12 08:01:03,030  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'N';"
2026-08-12 08:01:03,359  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('CORE_DB_SCHEMA', current_timestamp, 'Ranger 2.6.0', current_timestamp, 'dist-test-slave-w206.c.gcp-upstream.internal','N') ;"
2026-08-12 08:01:03,708  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 08:01:04,071  [I] Table x_portal_user does not exist in database ranger
2026-08-12 08:01:04,072  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 08:01:04,440  [I] Table x_policy_ref_group does not exist in database ranger
2026-08-12 08:01:04,441  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 08:01:04,821  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 08:01:05,142  [I] Importing DB schema to database ranger from file: ranger_core_db_postgres.sql
2026-08-12 08:01:05,143  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/db/postgres/optimized/current/ranger_core_db_postgres.sql 
2026-08-12 08:01:06.017 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.028 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.040 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.051 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.066 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.077 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.136 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.142 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.155 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.165 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.175 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.185 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.193 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.202 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.207 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.215 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.221 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.228 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.235 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.243 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.247 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06.251 UTC [12510] WARNING:  there is no transaction in progress
2026-08-12 08:01:06,741  [I] ranger_core_db_postgres.sql file imported successfully
2026-08-12 08:01:06,741  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set inst_by='Ranger 2.6.0' where active='Y' and updated_by='localhost';"
2026-08-12 08:01:07,098  [I] Patches status entries updated from base ranger version to current installed ranger version:Ranger 2.6.0
2026-08-12 08:01:07,099  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 08:01:07,471  [I] Table x_portal_user already exists in database 'ranger'
2026-08-12 08:01:07,472  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 08:01:07,847  [I] Table x_policy_ref_group already exists in database 'ranger'
2026-08-12 08:01:07,848  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 08:01:08,161  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 08:01:08,507  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set active='Y' where version='CORE_DB_SCHEMA' and active='N' and updated_by='dist-test-slave-w206.c.gcp-upstream.internal';"
2026-08-12 08:01:08,816  [I] CORE_DB_SCHEMA import status has been updated
2026-08-12 08:01:08,817  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:39469/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and inst_by = 'Ranger 2.6.0' and active = 'Y';"
2026-08-12 08:01:09,172  [I] DB_PATCHES have already been applied
I20260812 08:01:09.179246 12129 mini_ranger.cc:192] Using Ranger class path: /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-admin:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/ews/lib/*:/usr/lib/jvm/temurin-17-jdk-amd64/lib/*:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/hadoop/*:/tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/ews/webapp
I20260812 08:01:09.179378 12129 mini_ranger.cc:194] Using host: 127.0.0.1
I20260812 08:01:09.182292 12129 mini_ranger.cc:240] Ranger admin URL: http://127.0.0.1:39255
Aug 12, 2026 8:01:09 AM org.apache.ranger.server.tomcat.EmbeddedServer getKeyManagers
WARNING: Config 'ranger.keystore.file' or 'ranger.service.https.attrib.keystore.file' is not found or contains blank value
Aug 12, 2026 8:01:09 AM org.apache.ranger.server.tomcat.EmbeddedServer getTrustManagers
WARNING: Config 'ranger.truststore.file' is not found or contains blank value!
Aug 12, 2026 8:01:10 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Deriving webapp folder from catalina.base property. folder=/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-admin/ews/webapp
Aug 12, 2026 8:01:10 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Webapp file =/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-admin/ews/webapp, webAppName = /
Aug 12, 2026 8:01:10 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Adding webapp [/] = path [/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-admin/ews/webapp] .....
Aug 12, 2026 8:01:10 AM org.apache.catalina.core.StandardContext setPath
WARNING: A context path must either be an empty string or start with a '/' and do not end with a '/'. The path [/] does not meet these criteria and has been changed to []
Aug 12, 2026 8:01:10 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Finished init of webapp [/] = path [/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-admin/ews/webapp].
Aug 12, 2026 8:01:10 AM org.apache.ranger.server.tomcat.EmbeddedServer startServer
INFO: Server Name : miniranger
Aug 12, 2026 8:01:10 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-39255"]
Aug 12, 2026 8:01:10 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Aug 12, 2026 8:01:10 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.98]
Aug 12, 2026 8:01:11 AM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
I20260812 08:01:11.690647 12129 mini_ranger.cc:161] Time spent starting Ranger: real 11.582s	user 0.005s	sys 0.005s
Aug 12, 2026 8:01:15 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 12, 2026 8:01:15 AM org.apache.catalina.core.ApplicationContext log
INFO: Initializing Spring root WebApplicationContext
[EL Warning]: metadata: 2026-08-12 08:01:19.565--ServerSession(1439720239)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
Aug 12, 2026 8:01:35 AM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
  org.apache.ranger.rest
  org.apache.ranger.common
  xa.rest
Aug 12, 2026 8:01:35 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
  class org.apache.ranger.rest.PublicAPIs
  class org.apache.ranger.rest.SecurityZoneREST
  class org.apache.ranger.rest.TagREST
  class org.apache.ranger.rest.XUserREST
  class org.apache.ranger.rest.MetricsREST
  class org.apache.ranger.rest.XAuditREST
  class org.apache.ranger.rest.AssetREST
  class org.apache.ranger.rest.RoleREST
  class org.apache.ranger.rest.XKeyREST
  class org.apache.ranger.rest.UserREST
  class org.apache.ranger.rest.PublicAPIsv2
  class org.apache.ranger.rest.ServiceREST
Aug 12, 2026 8:01:35 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Provider classes found:
  class org.apache.ranger.common.RangerJsonProvider
  class org.apache.ranger.common.RangerJsonMappingExceptionMapper
  class org.apache.ranger.common.RangerJAXBContextResolver
  class org.apache.ranger.common.RangerJsonParserExceptionMapper
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.servlet.SpringServlet getContext
INFO: Using default applicationContext
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonMappingExceptionMapper, of type org.apache.ranger.common.RangerJsonMappingExceptionMapper as a provider class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonParserExceptionMapper, of type org.apache.ranger.common.RangerJsonParserExceptionMapper as a provider class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonProvider, of type org.apache.ranger.common.RangerJsonProvider as a provider class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, assetREST, of type org.apache.ranger.rest.AssetREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, metricsREST, of type org.apache.ranger.rest.MetricsREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIs, of type org.apache.ranger.rest.PublicAPIs as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIsv2, of type org.apache.ranger.rest.PublicAPIsv2 as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, roleREST, of type org.apache.ranger.rest.RoleREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, securityZoneREST, of type org.apache.ranger.rest.SecurityZoneREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, serviceREST, of type org.apache.ranger.rest.ServiceREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, tagREST, of type org.apache.ranger.rest.TagREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, userREST, of type org.apache.ranger.rest.UserREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XAuditREST, of type org.apache.ranger.rest.XAuditREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XKeyREST, of type org.apache.ranger.rest.XKeyREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XUserREST, of type org.apache.ranger.rest.XUserREST as a root resource class
Aug 12, 2026 8:01:35 AM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.19.4 05/24/2017 03:20 PM'
Aug 12, 2026 8:01:36 AM com.sun.jersey.spi.inject.Errors processErrorMessages
WARNING: The following warnings have been detected with resource and/or provider classes:
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.RoleREST.getRolesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInExcel(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInCsv(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) throws java.io.IOException, MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,java.lang.Boolean), MUST return a non-void type.
Aug 12, 2026 8:01:36 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-39255"]
I20260812 08:01:38.128821 12129 mini_ranger.cc:274] Created Kudu service
I20260812 08:01:38.431732 12129 mini_ranger.cc:389] Successfully created Ranger user: user
I20260812 08:01:38.784111 12129 ranger_client.cc:318] Using new properties file: /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 08:01:39.732 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-08-12 08:01:39.741 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-08-12 08:01:39.741 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-08-12 08:01:39.742 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-08-12 08:01:39.742 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-08-12 08:01:39.744 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-08-12 08:01:39.744 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-08-12 08:01:39.745 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/ranger-kudu-security.xml
2026-08-12 08:01:39.782 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-08-12 08:01:39.790 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-08-12 08:01:39.792 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-08-12 08:01:39.793 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-08-12 08:01:39.793 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-08-12 08:01:39.797 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-08-12 08:01:39.800 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-08-12 08:01:39.801 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-08-12 08:01:39.802 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-08-12 08:01:39.802 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 08:01:39.802 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-08-12 08:01:39.802 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-08-12 08:01:39.835 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-08-12 08:01:39.836 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-08-12 08:01:39.837 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-08-12 08:01:39.837 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-08-12 08:01:39.837 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-08-12 08:01:39.837 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-08-12 08:01:39.838 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-08-12 08:01:39.838 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-08-12 08:01:39.839 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-08-12 08:01:39.839 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-08-12 08:01:39.839 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-08-12 08:01:39.840 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 08:01:39.840 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-08-12 08:01:39.841 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-08-12 08:01:39.841 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-08-12 08:01:39.842 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 08:01:39.844 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 08:01:39.849 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-08-12 08:01:39.849 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-08-12 08:01:39.940 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-08-12 08:01:39.940 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-08-12 08:01:39.995 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-08-12 08:01:39.995 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-08-12 08:01:40.017 [DEBUG - main] (Groups.java:476)  Creating new Groups object
2026-08-12 08:01:40.033 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-08-12 08:01:40.034 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 08:01:40.035 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 08:01:40.035 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:39255
2026-08-12 08:01:40.035 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 08:01:40.036 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 08:01:40.036 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.SmokeTest.1786521655082539-12129-0/policy-cache
2026-08-12 08:01:40.036 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 08:01:40.037 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 08:01:40.037 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 08:01:40.039 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 08:01:40.057 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 08:01:40.057 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-08-12 08:01:40.058 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-08-12 08:01:40.090 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:39255, null)
2026-08-12 08:01:40.094 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:39255, null)
2026-08-12 08:01:40.095 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@1c481ff2
2026-08-12 08:01:40.097 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 08:01:40.097 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 08:01:40.098 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 08:01:40.098 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 08:01:40.098 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 08:01:40.099 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-08-12 08:01:40.100 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM)  = true
2026-08-12 08:01:40.100 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled  = true
2026-08-12 08:01:40.100 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled  = true
2026-08-12 08:01:40.101 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 35639296, Free memory:213921792
2026-08-12 08:01:40.102 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-08-12 08:01:40.102 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-08-12 08:01:40.116 [DEBUG - main] (UserGroupInformation.java:244) Hadoop login
2026-08-12 08:01:40.139 [DEBUG - main] (UserGroupInformation.java:190) hadoop login commit
2026-08-12 08:01:40.144 [DEBUG - main] (UserGroupInformation.java:212) Using local user: UnixPrincipal: slave
2026-08-12 08:01:40.147 [DEBUG - main] (UserGroupInformation.java:216) Using user: "UnixPrincipal: slave" with name: slave
2026-08-12 08:01:40.147 [DEBUG - main] (UserGroupInformation.java:228) User entry: "slave"
2026-08-12 08:01:40.148 [DEBUG - main] (UserGroupInformation.java:799) UGI loginUser: slave (auth:SIMPLE)
2026-08-12 08:01:40.149 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-08-12 08:01:40.662 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:01:40.875 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0): 
2026-08-12 08:01:40.876 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-08-12 08:01:40.917 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):39962978:40893348
2026-08-12 08:01:40.918 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-08-12 08:01:40.918 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 08:01:40.918 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):481517638:816247238
2026-08-12 08:01:40.919 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-08-12 08:01:40.919 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 28818928, Free memory:220742160
2026-08-12 08:01:40.919 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):482759486:817611495
2026-08-12 08:01:40.919 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-08-12 08:01:40.920 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 08:01:40.920 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 08:01:40.920 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 28818928, Free memory:220742160
2026-08-12 08:01:40.920 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 08:01:40.921 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-08-12 08:01:40.921 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-08-12 08:01:41.055 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:01:41.227 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-08-12 08:01:41.229 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 08:01:41.229 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):150099802:308670532
2026-08-12 08:01:41.229 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 08:01:41.230 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 33072328, Free memory:216488760
2026-08-12 08:01:41.231 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 08:01:41.243 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 08:01:41.246 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 08:01:41.248 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-08-12 08:01:41.253 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@6ac4944a)
2026-08-12 08:01:41.254 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 36224968, Free memory:213336120
2026-08-12 08:01:41.259 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-08-12 08:01:41.259 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-08-12 08:01:41.261 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 08:01:41.262 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 08:01:41.262 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 08:01:41.265 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 08:01:41.266 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 08:01:41.276 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-08-12 08:01:41.279 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:01:41.286 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:01:41.287 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:01:41.287 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:01:41.287 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:01:41.288 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:01:41.288 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.289 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.291 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:01:26 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:01:41.292 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 08:01:41.292 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:01:41.293 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.293 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.293 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.294 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.294 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.294 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.295 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.296 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.296 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.297 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.297 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.297 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:01:41.297 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 08:01:41.304 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:01:41.305 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:01:41.306 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 08:01:41.306 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:01:41.307 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:01:41.311 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:01:41.311 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 08:01:41.311 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:01:41.312 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:01:41.312 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:01:41.313 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:01:41.315 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:01:41.315 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 08:01:41.315 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:01:41.316 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:01:41.316 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:01:41.317 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:01:41.317 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:01:41.317 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 08:01:41.318 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 08:01:41.318 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:01:41.321 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:01:41.322 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:01:41.323 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:01:41.323 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:01:41.324 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:01:41.325 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:01:41.325 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 08:01:41.325 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 08:01:41.325 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 08:01:41.326 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:01:41.326 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:01:41.326 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:01:41.327 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:01:41.327 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:01:41.327 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:01:41.328 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:01:41.328 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 08:01:41.328 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-08-12 08:01:41.328 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():16384309:17411249
2026-08-12 08:01:41.329 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:01:41.329 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 08:01:41.331 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-08-12 08:01:41.332 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):29047:29069
2026-08-12 08:01:41.332 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-08-12 08:01:41.333 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):19531:68798
2026-08-12 08:01:41.333 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):26795508:28184038
2026-08-12 08:01:41.334 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:01:41.334 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 08:01:41.334 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-08-12 08:01:41.335 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 08:01:41.335 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-08-12 08:01:41.336 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:01:41.337 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-08-12 08:01:41.337 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:01:41.338 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 08:01:41.338 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-08-12 08:01:41.338 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 08:01:41.338 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 08:01:41.339 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 08:01:41.349 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.350 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:01:41.352 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):1164473:1168052
2026-08-12 08:01:41.352 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.352 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):2108795:2110736
2026-08-12 08:01:41.353 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.353 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.353 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.353 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:01:41.354 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):57116:58508
2026-08-12 08:01:41.354 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.354 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):767728:807519
2026-08-12 08:01:41.354 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.354 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.355 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.355 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:01:41.355 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):78867:79171
2026-08-12 08:01:41.355 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.356 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):672700:675627
2026-08-12 08:01:41.356 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.356 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.356 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.357 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.357 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):12548:13611
2026-08-12 08:01:41.357 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.358 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):847958:961844
2026-08-12 08:01:41.358 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.358 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.358 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.359 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.359 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):13122:13343
2026-08-12 08:01:41.359 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.359 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):788991:840210
2026-08-12 08:01:41.360 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.360 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.360 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.361 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.361 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):12507:13094
2026-08-12 08:01:41.361 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.361 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):700844:702817
2026-08-12 08:01:41.362 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.362 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.362 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.362 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.363 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):15030:16070
2026-08-12 08:01:41.363 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.363 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):777696:779554
2026-08-12 08:01:41.363 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.364 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.364 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.364 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.364 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):12626:12819
2026-08-12 08:01:41.364 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.365 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):662555:766562
2026-08-12 08:01:41.365 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.366 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.366 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.366 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.366 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):13080:13135
2026-08-12 08:01:41.367 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.367 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):679305:680467
2026-08-12 08:01:41.367 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.367 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.367 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.368 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.368 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):21718:21782
2026-08-12 08:01:41.368 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.368 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):663600:665263
2026-08-12 08:01:41.368 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.369 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.369 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.369 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.370 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):13363:13472
2026-08-12 08:01:41.370 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.370 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):795149:951298
2026-08-12 08:01:41.370 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.371 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.371 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.371 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.372 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):12913:13372
2026-08-12 08:01:41.372 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.372 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):803572:845200
2026-08-12 08:01:41.372 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.373 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.373 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:01:41.374 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:01:41.374 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:01:41.374 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:01:41.374 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:01:41.375 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:01:41.375 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.375 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.375 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:01:26 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:01:41.376 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-08-12 08:01:41.378 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-08-12 08:01:41.379 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-08-12 08:01:41.380 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 08:01:41.380 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:01:41.380 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:01:41.380 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:01:41.380 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:01:41.384 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 08:01:41.384 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:01:41.385 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:01:41.385 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:01:41.385 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:01:41.385 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.386 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Wed Aug 12 08:01:33 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-08-12 08:01:41.386 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.387 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.388 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.388 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.388 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:01:41.389 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 08:01:41.389 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:01:41.389 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:01:41.390 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:01:41.390 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:01:41.391 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:01:41.391 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:01:41.391 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-08-12 08:01:41.392 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-08-12 08:01:41.392 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-08-12 08:01:41.392 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:01:41.392 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:01:41.393 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:01:41.393 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 08:01:41.393 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 08:01:41.393 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:01:41.394 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:01:41.394 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:01:41.394 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:01:41.394 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:01:41.395 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 08:01:41.395 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 08:01:41.395 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-08-12 08:01:41.395 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():4169980:4168896
2026-08-12 08:01:41.396 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:01:41.396 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:01:41.397 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-08-12 08:01:41.397 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-08-12 08:01:41.398 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@2f19f2aa
2026-08-12 08:01:41.399 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:01:41.399 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:01:41.399 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-08-12 08:01:41.400 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-08-12 08:01:41.407 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-08-12 08:01:41.419 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-08-12 08:01:41.431 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-08-12 08:01:41.433 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 08:01:41.434 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-08-12 08:01:41.434 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 08:01:41.434 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 08:01:41.435 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 08:01:41.435 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-08-12 08:01:41.435 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 08:01:41.435 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:01:41.435 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-08-12 08:01:41.436 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):37095041:37246992
2026-08-12 08:01:41.436 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):38622805:38774580
2026-08-12 08:01:41.436 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-08-12 08:01:41.436 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):19332:19538
2026-08-12 08:01:41.437 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):47253122:47443326
2026-08-12 08:01:41.437 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:01:41.437 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 08:01:41.437 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-08-12 08:01:41.438 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 08:01:41.438 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-08-12 08:01:41.438 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:01:41.439 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-08-12 08:01:41.440 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:01:41.440 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 08:01:41.440 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-08-12 08:01:41.440 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 08:01:41.441 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 08:01:41.441 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 08:01:41.441 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:01:41.447 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-08-12 08:01:41.447 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:01:41.447 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:01:41.448 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:01:41.448 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:01:41.449 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:01:41.449 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:01:41.449 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:01:41.449 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:01:41.450 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.450 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:01:41.450 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:01:26 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:01:41.452 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 08:01:41.453 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 08:01:41.453 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 08:01:41.560 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:01:41.587 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 08:01:41.588 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 08:01:41.600 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 08:01:41.601 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 08:01:41.601 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 08:01:41.602 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-08-12 08:01:41.602 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 08:01:41.602 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-08-12 08:01:41.602 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-08-12 08:01:41.603 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):1201742:1454753
2026-08-12 08:01:41.603 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 08:01:41.603 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 08:01:41.605 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-08-12 08:01:41.608 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-08-12 08:01:41.609 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-08-12 08:01:41.609 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):58747728:167296710
2026-08-12 08:01:41.609 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1d81e101
2026-08-12 08:01:41.611 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-08-12 08:01:41.612 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-08-12 08:01:41.612 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:01:41.613 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:01:41.613 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:01:41.614 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:01:41.614 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:01:41.614 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():27147:27067
2026-08-12 08:01:41.614 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:01:41.615 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:01:41.616 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):18190:17644
2026-08-12 08:01:41.616 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):3349311:3712054
2026-08-12 08:01:41.616 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:01:41.617 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-08-12 08:01:41.617 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-08-12 08:01:41.618 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.618 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:01:41.618 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):50532:51696
2026-08-12 08:01:41.619 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.619 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):728623:1283459
2026-08-12 08:01:41.619 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.620 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.620 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.620 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.620 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):12855:13646
2026-08-12 08:01:41.620 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.621 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):535093:628460
2026-08-12 08:01:41.621 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.626 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.627 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.627 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:01:41.627 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):15600:17164
2026-08-12 08:01:41.628 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.628 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):622141:730864
2026-08-12 08:01:41.628 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.628 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.628 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:01:41.629 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:01:41.629 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):42511:43587
2026-08-12 08:01:41.629 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:01:41.629 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):582204:699037
2026-08-12 08:01:41.629 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.629 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:01:41.630 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=5a772895):245967065:375587372
2026-08-12 08:01:41.630 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 46644720, Free memory:202916368
2026-08-12 08:01:41.630 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-08-12 08:01:41.632 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 08:01:41.632 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 08:01:41.632 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 08:01:41.698 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 08:01:41.699 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):53741132:66041440
2026-08-12 08:01:41.699 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 08:01:41.701 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={2} guid={86f519ff-1849-4107-8f97-1d49acf972a4} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:01:38 UTC 2026, policies=[RangerPolicy={id={1} guid={2971d575-0a87-4a11-a55e-f32b5ad63b14} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:24 UTC 2026} updateTime={Wed Aug 12 08:01:33 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={c0294707-8a70-4377-a7f6-4077aebdd3c9} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:01:26 UTC 2026} updateTime={Wed Aug 12 08:01:26 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 08:01:41.702 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):475803065:782074784
2026-08-12 08:01:41.702 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 08:01:41.707 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-08-12 08:01:41.708 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-08-12 08:01:41.708 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-08-12 08:01:41.783 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@4ff4cbcb has been taken from the queue
2026-08-12 08:01:41.783 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@4ff4cbcb has been put on the queue
2026-08-12 08:01:41.882 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-08-12 08:01:41.885 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1809) Failed to get groups for user user
java.io.IOException: No groups found for user user
	at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
	at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3551)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2177)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2068)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:3986)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4007)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4946)
	at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
	at org.apache.hadoop.security.Groups.getGroupsSet(Groups.java:232)
	at org.apache.hadoop.security.UserGroupInformation.getGroupsSet(UserGroupInformation.java:1807)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
	at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
	at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
	at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
	at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2026-08-12 08:01:41.889 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-08-12 08:01:41.889 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(2ad45455_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 08:01:41.890 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 08:01:41.890 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-08-12 08:01:41.890 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 08:01:41.891 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 08:01:41.891 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 08:01:41.891 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:01:41.891 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-08-12 08:01:41.891 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-08-12 08:01:41.892 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:01:41.892 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=2ad45455, enricherName=TagEnricher):746481:747770
2026-08-12 08:01:41.892 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:01:41.892 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-08-12 08:01:41.892 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-08-12 08:01:41.892 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-08-12 08:01:41.893 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 08:01:41.893 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 08:01:41.894 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.894 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.895 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-08-12 08:01:41.895 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-08-12 08:01:41.896 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 08:01:41.896 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:01:41.897 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):270528:272353
2026-08-12 08:01:41.897 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@4c30819a
2026-08-12 08:01:41.897 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:01:41.897 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):23983:24168
2026-08-12 08:01:41.897 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@420636ab
2026-08-12 08:01:41.898 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:01:41.898 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):47031:45335
2026-08-12 08:01:41.899 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@2236ac70
2026-08-12 08:01:41.899 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:01:41.900 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):742478:724627
2026-08-12 08:01:41.900 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@34cc2550
2026-08-12 08:01:41.901 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@56bc3fac]]
2026-08-12 08:01:41.901 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):5605346:5804205
2026-08-12 08:01:41.901 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-08-12 08:01:41.901 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 08:01:41 UTC 2026)
2026-08-12 08:01:41.902 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 08:01:41 UTC 2026) : true
2026-08-12 08:01:41.902 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:01:41.903 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:01:41.903 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 08:01:41.904 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 08:01:41.904 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:01:41.904 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:01:41.904 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:01:41.905 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:01:41.905 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:01:41.905 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 08:01:41.905 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:01:41.906 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:01:41.906 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:01:41.906 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:01:41.906 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:01:41.907 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:01:41.907 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-08-12 08:01:41.908 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:01:41.908 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 08:01:41.908 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:01:41.909 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:01:41.909 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-08-12 08:01:41.909 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:01:41.909 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 08:01:41.909 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():5682004:6233768
2026-08-12 08:01:41.910 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:01:41.910 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:01:41.910 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-08-12 08:01:41.910 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 08:01:41.911 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[metadata]
2026-08-12 08:01:41.911 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3)
2026-08-12 08:01:41.912 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3): null
2026-08-12 08:01:41.912 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3)
2026-08-12 08:01:41.912 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3)
2026-08-12 08:01:41.912 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3)
2026-08-12 08:01:41.912 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-08-12 08:01:41.913 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-08-12 08:01:41.913 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3): true
2026-08-12 08:01:41.913 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:235) ==> RangerDefaultPolicyItemEvaluator.matchCustomConditions(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3)
2026-08-12 08:01:41.913 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:277) <== RangerDefaultPolicyItemEvaluator.matchCustomConditions(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3): true
2026-08-12 08:01:41.914 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):1182804:1377883
2026-08-12 08:01:41.914 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3): true
2026-08-12 08:01:41.914 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@ad3d4c3): org.apache.ranger.plugin.policyevaluator.RangerDefaultPolicyItemEvaluator@2628f3c7
2026-08-12 08:01:41.914 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:535) ==> RangerDefaultPolicyEvaluator.updateAccessResult(RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}, SELF, true, null, 2)
2026-08-12 08:01:41.914 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:555) <== RangerDefaultPolicyEvaluator.updateAccessResult(RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}, SELF, true, null, 2)
2026-08-12 08:01:41.915 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{metadata=RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}, SELF)
2026-08-12 08:01:41.915 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=2ad45455,policyId=2, policyName=db;table;):11519259:12813511
2026-08-12 08:01:41.915 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{metadata=RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.915 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 08:01:41.916 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 08:01:41.916 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 08:01:41.916 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 08:01:41.916 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 08:01:41.916 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=2ad45455_0):25043094:27048481
2026-08-12 08:01:41.917 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}
2026-08-12 08:01:41.917 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.917 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.917 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.917 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.918 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 08:01:41.918 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:01:41.918 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):30012:30350
2026-08-12 08:01:41.918 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@85e8d95
2026-08-12 08:01:41.918 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:01:41.919 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):19479:19769
2026-08-12 08:01:41.919 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@4a629282
2026-08-12 08:01:41.919 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-08-12 08:01:41.919 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):1437203:1689536
2026-08-12 08:01:41.920 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-08-12 08:01:41.920 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}): ret=false
2026-08-12 08:01:41.920 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.920 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.920 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.921 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): 5134941a-d804-40f6-8882-1d8c3fbbfb08-0
2026-08-12 08:01:41.922 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={5134941a-d804-40f6-8882-1d8c3fbbfb08-0} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:01:41 UTC 2026;accessType=metadata;resourcePath=db/table;resourceType=table;action=metadata;accessResult=1;agentId=kudu;policyId=2;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=5134941a-d804-40f6-8882-1d8c3fbbfb08-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=1;additionalInfo=null}
2026-08-12 08:01:41.922 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:01:41 UTC 2026;accessType=metadata;resourcePath=db/table;resourceType=table;action=metadata;accessResult=1;agentId=kudu;policyId=2;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=5134941a-d804-40f6-8882-1d8c3fbbfb08-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=1;additionalInfo=null})
2026-08-12 08:01:41.922 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:01:41 UTC 2026;accessType=metadata;resourcePath=db/table;resourceType=table;action=metadata;accessResult=1;agentId=kudu;policyId=2;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=5134941a-d804-40f6-8882-1d8c3fbbfb08-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=1;additionalInfo=null})
2026-08-12 08:01:41.922 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={5134941a-d804-40f6-8882-1d8c3fbbfb08-0} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:01:41.923 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={metadata} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={metadata} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={true} isAuditedDetermined={true} isAudited={true} auditLogId={5134941a-d804-40f6-8882-1d8c3fbbfb08-0} policyType={0} policyId={2} zoneName={null} auditPolicyId={2} policyVersion={1} evaluatedPoliciesCount={0} reason={null} additionalInfo={}}]
2026-08-12 08:01:41.931 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@289be7af has been put on the queue
2026-08-12 08:01:41.932 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@289be7af has been taken from the queue
I20260812 08:01:41.946473 12790 server.cc:273] Received an EOF from the subprocess
W20260812 08:01:41.947211 12760 server.cc:408] The subprocess has exited with status 9
I20260812 08:01:41.954840 12787 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:01:41.954910 12791 server.cc:440] outbound queue shut down: Aborted: 
I20260812 08:01:41.954872 12788 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:01:41.955128 12789 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 08:01:41.955461 12129 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 08:01:41.955593 12129 mini_ranger.cc:67] Stopping Ranger...
I20260812 08:01:42.332420 12129 mini_ranger.cc:69] Stopped Ranger
2026-08-12 08:01:42.332 UTC [12148] LOG:  received smart shutdown request
2026-08-12 08:01:42.337 UTC [12148] LOG:  background worker "logical replication launcher" (PID 12157) exited with exit code 1
2026-08-12 08:01:42.338 UTC [12151] LOG:  shutting down
2026-08-12 08:01:42.340 UTC [12151] LOG:  checkpoint starting: shutdown immediate
2026-08-12 08:01:43.036 UTC [12151] LOG:  checkpoint complete: wrote 1555 buffers (9.5%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.029 s, sync=0.660 s, total=0.699 s; sync files=832, longest=0.005 s, average=0.001 s; distance=8445 kB, estimate=8445 kB; lsn=0/1CB9DE0, redo lsn=0/1CB9DE0
2026-08-12 08:01:43.046 UTC [12148] LOG:  database system is shut down
[       OK ] RangerClientTestExtraJVMArgs.SmokeTest (48034 ms)
[ RUN      ] RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments

[WARNING] /home/jenkins-slave/workspace/build_and_test/thirdparty/src/googletest-release-1.12.1/googletest/src/gtest-death-test.cc:1108:: Death tests use fork(), which is unsafe particularly in a threaded context. For this test, Google Test detected 3 threads. See https://github.com/google/googletest/blob/master/docs/advanced.md#death-tests-and-threads for more explanation and suggested solutions, especially if this is the last message you see before your test times out.
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.

The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".

Data page checksums are disabled.

creating directory /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments.1786521655082539-12821-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok


Success. You can now start the database server using:

    /tmp/dist-test-taskhNgPHb/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments.1786521655082539-12821-0/postgres -l logfile start

127.0.0.1:53337 - accepting connections
[EL Warning]: metadata: 2026-08-12 08:02:09.358--ServerSession(1439720239)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
[       OK ] RangerClientTestExtraJVMArgs.TestCrashOnInvalidArguments (49492 ms)
[----------] 2 tests from RangerClientTestExtraJVMArgs (97527 ms total)

[----------] 1 test from RangerClientTestBase
[ RUN      ] RangerClientTestBase.TestLogging
I20260812 08:02:32.626829 12129 mini_postgres.cc:62] Running initdb...
The files belonging to this database system will be owned by user "slave".
This user must also own the server process.

The database cluster will be initialized with locale "C".
The default database encoding has accordingly been set to "SQL_ASCII".
The default text search configuration will be set to "english".

Data page checksums are disabled.

creating directory /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/postgres ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default "max_connections" ... 100
selecting default "shared_buffers" ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok

initdb: warning: enabling "trust" authentication for local connections
initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.

Success. You can now start the database server using:

    /tmp/dist-test-taskhNgPHb/build/debug/bin/postgres/pg_ctl -D /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/postgres -l logfile start

2026-08-12 08:02:36.084 UTC [13475] LOG:  starting PostgreSQL 17.2 on x86_64-pc-linux-gnu, compiled by gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0, 64-bit
2026-08-12 08:02:36.084 UTC [13475] LOG:  listening on IPv4 address "127.0.0.1", port 44455
2026-08-12 08:02:36.090 UTC [13475] LOG:  listening on Unix socket "/tmp/.s.PGSQL.44455"
2026-08-12 08:02:36.099 UTC [13481] LOG:  database system was shut down at 2026-08-12 08:02:33 UTC
2026-08-12 08:02:36.107 UTC [13475] LOG:  database system is ready to accept connections
I20260812 08:02:38.169539 12129 mini_postgres.cc:96] Postgres bound to 44455
2026-08-12 08:02:38.176 UTC [13488] FATAL:  database "slave" does not exist
127.0.0.1:44455 - accepting connections
I20260812 08:02:38.177464 12129 mini_ranger.cc:162] Starting Ranger...
I20260812 08:02:38.200655 12129 mini_ranger.cc:85] Created miniranger Postgres user
I20260812 08:02:38.298197 12129 mini_ranger.cc:88] Created ranger Postgres database
I20260812 08:02:38.298344 12129 mini_ranger.cc:179] Starting Ranger out of /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-admin
2026-08-12 08:02:38,789  [I] DB FLAVOR :POSTGRES
2026-08-12 08:02:38,790  [I] --------- Verifying Ranger DB connection ---------
2026-08-12 08:02:38,790  [I] Checking connection..
2026-08-12 08:02:38,791  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select 1;"
2026-08-12 08:02:39,223  [I] Checking connection passed.
2026-08-12 08:02:39,224  [I] --------- Verifying version history table ---------
2026-08-12 08:02:39,224  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 08:02:39,663  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 08:02:39,664  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 08:02:40,043  [I] Table x_db_version_h does not exist in database ranger
2026-08-12 08:02:40,043  [I] Importing x_db_version_h table schema to database ranger from file: create_dbversion_catalog.sql
2026-08-12 08:02:40,043  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/db/postgres/create_dbversion_catalog.sql 
2026-08-12 08:02:40.426 UTC [13627] WARNING:  there is no transaction in progress
2026-08-12 08:02:40,448  [I] create_dbversion_catalog.sql file imported successfully
2026-08-12 08:02:40,448  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_db_version_h') as temp;"
2026-08-12 08:02:40,831  [I] Table x_db_version_h already exists in database 'ranger'
2026-08-12 08:02:40,831  [I] --------- Importing Ranger Core DB Schema ---------
2026-08-12 08:02:40,832  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'Y';"
2026-08-12 08:02:41,255  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'CORE_DB_SCHEMA' and active = 'N';"
2026-08-12 08:02:41,680  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "insert into x_db_version_h (version, inst_at, inst_by, updated_at, updated_by,active) values ('CORE_DB_SCHEMA', current_timestamp, 'Ranger 2.6.0', current_timestamp, 'dist-test-slave-w206.c.gcp-upstream.internal','N') ;"
2026-08-12 08:02:42,066  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 08:02:42,451  [I] Table x_portal_user does not exist in database ranger
2026-08-12 08:02:42,452  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 08:02:42,881  [I] Table x_policy_ref_group does not exist in database ranger
2026-08-12 08:02:42,882  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 08:02:43,310  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 08:02:43,730  [I] Importing DB schema to database ranger from file: ranger_core_db_postgres.sql
2026-08-12 08:02:43,730  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \; -input /tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/db/postgres/optimized/current/ranger_core_db_postgres.sql 
2026-08-12 08:02:44.779 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.792 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.806 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.819 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.838 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.854 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.919 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.929 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.941 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.952 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.962 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.974 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.984 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:44.995 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.003 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.014 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.023 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.032 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.039 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.046 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.051 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45.055 UTC [13856] WARNING:  there is no transaction in progress
2026-08-12 08:02:45,678  [I] ranger_core_db_postgres.sql file imported successfully
2026-08-12 08:02:45,678  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set inst_by='Ranger 2.6.0' where active='Y' and updated_by='localhost';"
2026-08-12 08:02:46,046  [I] Patches status entries updated from base ranger version to current installed ranger version:Ranger 2.6.0
2026-08-12 08:02:46,047  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_portal_user') as temp;"
2026-08-12 08:02:46,434  [I] Table x_portal_user already exists in database 'ranger'
2026-08-12 08:02:46,435  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select * from (select table_name from information_schema.tables where table_catalog='ranger' and table_name = 'x_policy_ref_group') as temp;"
2026-08-12 08:02:46,814  [I] Table x_policy_ref_group already exists in database 'ranger'
2026-08-12 08:02:46,814  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and active = 'Y';"
2026-08-12 08:02:47,228  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'JAVA_PATCHES' and active = 'Y';"
2026-08-12 08:02:47,594  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "update x_db_version_h set active='Y' where version='CORE_DB_SCHEMA' and active='N' and updated_by='dist-test-slave-w206.c.gcp-upstream.internal';"
2026-08-12 08:02:47,950  [I] CORE_DB_SCHEMA import status has been updated
2026-08-12 08:02:47,950  [JISQL] /usr/lib/jvm/temurin-17-jdk-amd64/bin/java  -cp /tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/jisql/lib/* org.apache.util.sql.Jisql -driver postgresql -cstring jdbc:postgresql://127.0.0.1:44455/ranger -u miniranger -p '********' -noheader -trim -c \;  -query "select version from x_db_version_h where version = 'DB_PATCHES' and inst_by = 'Ranger 2.6.0' and active = 'Y';"
2026-08-12 08:02:48,351  [I] DB_PATCHES have already been applied
I20260812 08:02:48.359043 12129 mini_ranger.cc:192] Using Ranger class path: /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-admin:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/ews/lib/*:/usr/lib/jvm/temurin-17-jdk-amd64/lib/*:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/hadoop/*:/tmp/dist-test-taskhNgPHb/build/debug/bin/postgresql.jar:/tmp/dist-test-taskhNgPHb/thirdparty/installed/common/opt/ranger/ews/webapp
I20260812 08:02:48.359127 12129 mini_ranger.cc:194] Using host: 127.0.0.1
I20260812 08:02:48.361951 12129 mini_ranger.cc:240] Ranger admin URL: http://127.0.0.1:43197
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer getKeyManagers
WARNING: Config 'ranger.keystore.file' or 'ranger.service.https.attrib.keystore.file' is not found or contains blank value
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer getTrustManagers
WARNING: Config 'ranger.truststore.file' is not found or contains blank value!
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Deriving webapp folder from catalina.base property. folder=/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-admin/ews/webapp
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Webapp file =/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-admin/ews/webapp, webAppName = /
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Adding webapp [/] = path [/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-admin/ews/webapp] .....
Aug 12, 2026 8:02:49 AM org.apache.catalina.core.StandardContext setPath
WARNING: A context path must either be an empty string or start with a '/' and do not end with a '/'. The path [/] does not meet these criteria and has been changed to []
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer start
INFO: Finished init of webapp [/] = path [/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-admin/ews/webapp].
Aug 12, 2026 8:02:49 AM org.apache.ranger.server.tomcat.EmbeddedServer startServer
INFO: Server Name : miniranger
Aug 12, 2026 8:02:49 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-43197"]
Aug 12, 2026 8:02:50 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Aug 12, 2026 8:02:50 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/9.0.98]
Aug 12, 2026 8:02:50 AM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
I20260812 08:02:50.961669 12129 mini_ranger.cc:161] Time spent starting Ranger: real 12.784s	user 0.007s	sys 0.005s
Aug 12, 2026 8:02:55 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 12, 2026 8:02:55 AM org.apache.catalina.core.ApplicationContext log
INFO: Initializing Spring root WebApplicationContext
[EL Warning]: metadata: 2026-08-12 08:02:59.583--ServerSession(265716147)--You have specified multiple ids for the entity class [org.apache.ranger.entity.view.VXXPrincipal] without specifying an @IdClass. By doing this you may lose the ability to find by identity, distributed cache support etc. Note: You may however use EntityManager find operations by passing a list of primary key fields. Else, you will have to use JPQL queries to read your entities. For other id options see @PrimaryKey.
Aug 12, 2026 8:03:18 AM com.sun.jersey.api.core.PackagesResourceConfig init
INFO: Scanning for root resource and provider classes in the packages:
  org.apache.ranger.rest
  org.apache.ranger.common
  xa.rest
Aug 12, 2026 8:03:18 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Root resource classes found:
  class org.apache.ranger.rest.PublicAPIs
  class org.apache.ranger.rest.SecurityZoneREST
  class org.apache.ranger.rest.TagREST
  class org.apache.ranger.rest.XUserREST
  class org.apache.ranger.rest.MetricsREST
  class org.apache.ranger.rest.XAuditREST
  class org.apache.ranger.rest.AssetREST
  class org.apache.ranger.rest.RoleREST
  class org.apache.ranger.rest.XKeyREST
  class org.apache.ranger.rest.UserREST
  class org.apache.ranger.rest.PublicAPIsv2
  class org.apache.ranger.rest.ServiceREST
Aug 12, 2026 8:03:18 AM com.sun.jersey.api.core.ScanningResourceConfig logClasses
INFO: Provider classes found:
  class org.apache.ranger.common.RangerJsonProvider
  class org.apache.ranger.common.RangerJsonMappingExceptionMapper
  class org.apache.ranger.common.RangerJsonParserExceptionMapper
  class org.apache.ranger.common.RangerJAXBContextResolver
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.servlet.SpringServlet getContext
INFO: Using default applicationContext
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonMappingExceptionMapper, of type org.apache.ranger.common.RangerJsonMappingExceptionMapper as a provider class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonParserExceptionMapper, of type org.apache.ranger.common.RangerJsonParserExceptionMapper as a provider class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, rangerJsonProvider, of type org.apache.ranger.common.RangerJsonProvider as a provider class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, assetREST, of type org.apache.ranger.rest.AssetREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, metricsREST, of type org.apache.ranger.rest.MetricsREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIs, of type org.apache.ranger.rest.PublicAPIs as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, publicAPIsv2, of type org.apache.ranger.rest.PublicAPIsv2 as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, roleREST, of type org.apache.ranger.rest.RoleREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, securityZoneREST, of type org.apache.ranger.rest.SecurityZoneREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, serviceREST, of type org.apache.ranger.rest.ServiceREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, tagREST, of type org.apache.ranger.rest.TagREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, userREST, of type org.apache.ranger.rest.UserREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XAuditREST, of type org.apache.ranger.rest.XAuditREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XKeyREST, of type org.apache.ranger.rest.XKeyREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.spi.spring.container.SpringComponentProviderFactory registerSpringBeans
INFO: Registering Spring bean, XUserREST, of type org.apache.ranger.rest.XUserREST as a root resource class
Aug 12, 2026 8:03:18 AM com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
INFO: Initiating Jersey application, version 'Jersey: 1.19.4 05/24/2017 03:20 PM'
Aug 12, 2026 8:03:20 AM com.sun.jersey.spi.inject.Errors processErrorMessages
WARNING: The following warnings have been detected with resource and/or provider classes:
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.RoleREST.getRolesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInExcel(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse), MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInCsv(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) throws java.io.IOException, MUST return a non-void type.
  WARNING: A HTTP GET method, public void org.apache.ranger.rest.ServiceREST.getPoliciesInJson(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,java.lang.Boolean), MUST return a non-void type.
Aug 12, 2026 8:03:20 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-43197"]
I20260812 08:03:21.677537 12129 mini_ranger.cc:274] Created Kudu service
I20260812 08:03:22.030090 12129 mini_ranger.cc:389] Successfully created Ranger user: user
I20260812 08:03:22.415743 12129 ranger_client.cc:318] Using new properties file: /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 08:03:23.281 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-08-12 08:03:23.290 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-08-12 08:03:23.291 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-08-12 08:03:23.291 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-08-12 08:03:23.291 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-08-12 08:03:23.293 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-08-12 08:03:23.294 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-08-12 08:03:23.295 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-kudu-security.xml
2026-08-12 08:03:23.339 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-08-12 08:03:23.347 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-08-12 08:03:23.348 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-08-12 08:03:23.349 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-08-12 08:03:23.350 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-08-12 08:03:23.353 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-08-12 08:03:23.357 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-08-12 08:03:23.357 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-08-12 08:03:23.358 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-08-12 08:03:23.358 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 08:03:23.359 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-08-12 08:03:23.359 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-08-12 08:03:23.397 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-08-12 08:03:23.398 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-08-12 08:03:23.399 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-08-12 08:03:23.399 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-08-12 08:03:23.399 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-08-12 08:03:23.400 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-08-12 08:03:23.400 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-08-12 08:03:23.401 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-08-12 08:03:23.401 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-08-12 08:03:23.401 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-08-12 08:03:23.402 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-08-12 08:03:23.402 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 08:03:23.402 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-08-12 08:03:23.404 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-08-12 08:03:23.404 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-08-12 08:03:23.405 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 08:03:23.407 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 08:03:23.411 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-08-12 08:03:23.412 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-08-12 08:03:23.513 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-08-12 08:03:23.513 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-08-12 08:03:23.573 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-08-12 08:03:23.573 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-08-12 08:03:23.596 [DEBUG - main] (Groups.java:476)  Creating new Groups object
2026-08-12 08:03:23.619 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-08-12 08:03:23.621 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 08:03:23.622 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 08:03:23.622 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:43197
2026-08-12 08:03:23.622 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 08:03:23.623 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 08:03:23.623 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/policy-cache
2026-08-12 08:03:23.624 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 08:03:23.624 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 08:03:23.624 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 08:03:23.627 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 08:03:23.649 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 08:03:23.650 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-08-12 08:03:23.650 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-08-12 08:03:23.695 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:43197, null)
2026-08-12 08:03:23.700 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:43197, null)
2026-08-12 08:03:23.702 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@1c481ff2
2026-08-12 08:03:23.703 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 08:03:23.704 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 08:03:23.704 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 08:03:23.704 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 08:03:23.705 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 08:03:23.705 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-08-12 08:03:23.706 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM)  = true
2026-08-12 08:03:23.706 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled  = true
2026-08-12 08:03:23.707 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled  = true
2026-08-12 08:03:23.708 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 28549632, Free memory:223108608
2026-08-12 08:03:23.708 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-08-12 08:03:23.709 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-08-12 08:03:23.726 [DEBUG - main] (UserGroupInformation.java:244) Hadoop login
2026-08-12 08:03:23.742 [DEBUG - main] (UserGroupInformation.java:190) hadoop login commit
2026-08-12 08:03:23.746 [DEBUG - main] (UserGroupInformation.java:212) Using local user: UnixPrincipal: slave
2026-08-12 08:03:23.749 [DEBUG - main] (UserGroupInformation.java:216) Using user: "UnixPrincipal: slave" with name: slave
2026-08-12 08:03:23.749 [DEBUG - main] (UserGroupInformation.java:228) User entry: "slave"
2026-08-12 08:03:23.750 [DEBUG - main] (UserGroupInformation.java:799) UGI loginUser: slave (auth:SIMPLE)
2026-08-12 08:03:23.751 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-08-12 08:03:24.262 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:03:24.445 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0): 
2026-08-12 08:03:24.446 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-08-12 08:03:24.475 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):28226155:28319995
2026-08-12 08:03:24.475 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-08-12 08:03:24.476 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 08:03:24.476 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):426629306:767455333
2026-08-12 08:03:24.476 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-08-12 08:03:24.476 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 45326848, Free memory:206331392
2026-08-12 08:03:24.477 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):427996995:768886491
2026-08-12 08:03:24.477 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-08-12 08:03:24.477 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 08:03:24.477 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 08:03:24.478 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 45326848, Free memory:206331392
2026-08-12 08:03:24.478 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 08:03:24.478 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-08-12 08:03:24.478 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-08-12 08:03:24.597 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:03:24.732 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-08-12 08:03:24.734 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 08:03:24.734 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):136229009:255858638
2026-08-12 08:03:24.734 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 08:03:24.734 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 49521152, Free memory:202137088
2026-08-12 08:03:24.736 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 08:03:24.745 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 08:03:24.748 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 08:03:24.750 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-08-12 08:03:24.756 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@6ac4944a)
2026-08-12 08:03:24.758 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 52666880, Free memory:198991360
2026-08-12 08:03:24.763 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-08-12 08:03:24.763 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-08-12 08:03:24.765 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 08:03:24.766 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 08:03:24.767 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 08:03:24.771 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 08:03:24.773 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 08:03:24.782 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-08-12 08:03:24.784 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:03:24.786 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:03:24.787 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:24.787 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:24.787 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:24.788 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:24.788 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.788 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.790 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:03:06 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:03:24.791 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 08:03:24.791 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:24.791 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.791 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.792 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.792 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.792 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.792 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.792 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.793 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.793 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.793 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.793 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.794 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:24.794 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 08:03:24.797 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:24.798 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:24.798 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 08:03:24.799 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:24.799 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:03:24.801 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:03:24.802 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 08:03:24.802 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:24.802 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:24.802 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:24.803 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:24.804 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:24.804 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 08:03:24.805 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:24.805 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:24.805 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:24.805 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:24.805 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:24.805 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:24.806 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:24.806 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:03:24.809 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:03:24.810 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:24.811 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:24.811 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:03:24.811 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:24.812 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:24.813 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 08:03:24.813 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:24.813 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:24.813 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:03:24.813 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:03:24.813 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:24.814 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:24.814 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:03:24.814 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:24.814 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:24.814 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 08:03:24.814 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-08-12 08:03:24.814 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():12625807:12639505
2026-08-12 08:03:24.814 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:03:24.815 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 08:03:24.817 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-08-12 08:03:24.818 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):39330:39518
2026-08-12 08:03:24.818 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-08-12 08:03:24.819 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):20204:55593
2026-08-12 08:03:24.819 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):20879723:20914844
2026-08-12 08:03:24.819 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:24.820 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 08:03:24.820 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-08-12 08:03:24.820 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 08:03:24.821 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-08-12 08:03:24.821 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:24.822 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-08-12 08:03:24.822 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:03:24.822 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 08:03:24.822 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-08-12 08:03:24.823 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 08:03:24.823 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 08:03:24.823 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 08:03:24.830 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.830 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:24.832 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):1020301:1023923
2026-08-12 08:03:24.832 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.832 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1988800:1991160
2026-08-12 08:03:24.833 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.833 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.833 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.833 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:24.834 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):43081:43691
2026-08-12 08:03:24.834 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.834 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):643355:645648
2026-08-12 08:03:24.834 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.834 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.835 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.835 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:24.835 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):67544:67790
2026-08-12 08:03:24.835 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.835 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):652963:655300
2026-08-12 08:03:24.836 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.836 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.836 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.836 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.837 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):10717:11108
2026-08-12 08:03:24.837 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.837 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):762389:764617
2026-08-12 08:03:24.837 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.837 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.838 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.838 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.838 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10708:10972
2026-08-12 08:03:24.838 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.838 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):614181:617004
2026-08-12 08:03:24.839 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.839 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.839 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.839 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.840 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):12694:12313
2026-08-12 08:03:24.840 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.840 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):657896:659584
2026-08-12 08:03:24.840 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.840 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.840 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.841 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.841 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):13624:13314
2026-08-12 08:03:24.841 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.841 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):615195:616330
2026-08-12 08:03:24.841 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.842 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.842 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.842 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.842 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):12962:12397
2026-08-12 08:03:24.842 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.843 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):631765:585425
2026-08-12 08:03:24.843 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.844 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.844 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.844 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.844 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):11522:12005
2026-08-12 08:03:24.844 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.845 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):664453:666114
2026-08-12 08:03:24.845 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.845 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.845 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.845 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.846 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):12844:12993
2026-08-12 08:03:24.846 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.846 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):647125:648306
2026-08-12 08:03:24.846 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.846 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.847 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.847 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.847 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):12589:12021
2026-08-12 08:03:24.847 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.847 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):669843:671337
2026-08-12 08:03:24.848 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.848 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.848 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:24.848 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:24.849 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):12100:11714
2026-08-12 08:03:24.849 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:24.849 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):725556:725432
2026-08-12 08:03:24.849 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.849 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:24.850 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:03:24.850 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:03:24.851 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:24.851 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:24.851 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:24.851 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:24.851 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.852 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.852 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:03:06 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:03:24.852 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-08-12 08:03:24.855 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-08-12 08:03:24.855 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-08-12 08:03:24.856 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 08:03:24.856 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:24.856 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:24.856 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:24.856 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:24.860 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 08:03:24.860 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:24.860 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:24.860 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:24.860 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:24.861 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.861 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Wed Aug 12 08:03:16 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-08-12 08:03:24.862 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 08:03:24.862 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:24.863 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.863 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.863 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.863 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.863 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.863 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.864 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.864 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.864 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.864 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.864 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.864 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:24.865 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 08:03:24.865 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:24.865 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:24.866 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:24.866 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:24.867 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:03:24.867 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:03:24.867 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-08-12 08:03:24.868 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-08-12 08:03:24.868 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-08-12 08:03:24.868 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:24.868 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:24.868 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:24.868 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:24.869 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:24.869 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:03:24.869 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:03:24.870 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:24.870 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:24.870 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:03:24.871 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 08:03:24.871 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 08:03:24.871 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-08-12 08:03:24.872 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():4078017:4401872
2026-08-12 08:03:24.872 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:03:24.872 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:24.873 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-08-12 08:03:24.873 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-08-12 08:03:24.874 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@2f19f2aa
2026-08-12 08:03:24.875 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:03:24.875 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:03:24.875 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-08-12 08:03:24.876 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-08-12 08:03:24.882 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-08-12 08:03:24.892 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-08-12 08:03:24.903 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-08-12 08:03:24.905 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 08:03:24.906 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-08-12 08:03:24.906 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 08:03:24.906 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 08:03:24.907 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 08:03:24.907 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-08-12 08:03:24.907 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 08:03:24.907 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:03:24.908 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-08-12 08:03:24.908 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):33007718:33464104
2026-08-12 08:03:24.908 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):34627436:35082848
2026-08-12 08:03:24.908 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-08-12 08:03:24.909 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):17490:16746
2026-08-12 08:03:24.909 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):42820083:43634939
2026-08-12 08:03:24.909 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:24.909 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 08:03:24.910 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-08-12 08:03:24.910 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 08:03:24.910 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-08-12 08:03:24.910 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:24.911 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-08-12 08:03:24.912 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:03:24.912 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 08:03:24.912 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-08-12 08:03:24.912 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 08:03:24.913 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 08:03:24.913 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 08:03:24.913 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:03:24.918 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-08-12 08:03:24.919 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:03:24.919 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:03:24.920 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:03:24.920 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:03:24.920 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:24.920 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:24.921 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:24.921 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:24.921 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.921 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:24.922 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:03:06 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:03:24.923 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 08:03:24.924 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 08:03:24.925 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 08:03:25.016 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:03:25.042 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 08:03:25.043 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 08:03:25.054 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 08:03:25.054 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 08:03:25.055 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 08:03:25.055 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-08-12 08:03:25.055 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 08:03:25.056 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-08-12 08:03:25.056 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-08-12 08:03:25.056 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):1061004:1276995
2026-08-12 08:03:25.056 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 08:03:25.056 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 08:03:25.058 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-08-12 08:03:25.067 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-08-12 08:03:25.068 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-08-12 08:03:25.068 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):55684557:154516158
2026-08-12 08:03:25.068 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1d81e101
2026-08-12 08:03:25.070 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-08-12 08:03:25.071 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-08-12 08:03:25.071 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:25.072 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:25.072 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:25.072 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:03:25.072 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:03:25.073 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():25550:24771
2026-08-12 08:03:25.073 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:03:25.073 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:25.074 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):29057:16554
2026-08-12 08:03:25.074 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):2916324:2915301
2026-08-12 08:03:25.074 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:25.075 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-08-12 08:03:25.077 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-08-12 08:03:25.077 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:25.078 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:25.079 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):98244:106668
2026-08-12 08:03:25.079 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:25.079 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):868426:870308
2026-08-12 08:03:25.079 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.079 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.080 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:25.080 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:25.080 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):14357:15289
2026-08-12 08:03:25.080 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:25.080 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):571407:573275
2026-08-12 08:03:25.080 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.081 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.081 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:25.081 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:25.082 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):11457:12013
2026-08-12 08:03:25.082 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:25.082 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):634863:741784
2026-08-12 08:03:25.082 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.082 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.083 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:25.083 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:25.083 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):59142:60080
2026-08-12 08:03:25.083 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:25.084 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):656583:760823
2026-08-12 08:03:25.084 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.085 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:25.085 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=5a772895):223552644:327614616
2026-08-12 08:03:25.085 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 63152640, Free memory:188505600
2026-08-12 08:03:25.086 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-08-12 08:03:25.087 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 08:03:25.088 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 08:03:25.088 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 08:03:25.142 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 08:03:25.143 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):54197152:54488154
2026-08-12 08:03:25.143 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 08:03:25.144 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 08:03:25.145 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):443051503:667663022
2026-08-12 08:03:25.145 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 08:03:25.146 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-08-12 08:03:25.152 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-08-12 08:03:25.152 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-08-12 08:03:25.219 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@1a87c87e has been put on the queue
2026-08-12 08:03:25.219 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@1a87c87e has been taken from the queue
2026-08-12 08:03:25.332 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-08-12 08:03:25.336 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1809) Failed to get groups for user user
java.io.IOException: No groups found for user user
	at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
	at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3551)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2177)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2068)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:3986)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4007)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4946)
	at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
	at org.apache.hadoop.security.Groups.getGroupsSet(Groups.java:232)
	at org.apache.hadoop.security.UserGroupInformation.getGroupsSet(UserGroupInformation.java:1807)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
	at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
	at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
	at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
	at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2026-08-12 08:03:25.342 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-08-12 08:03:25.342 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(2614fc1a_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 08:03:25.342 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 08:03:25.343 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-08-12 08:03:25.343 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 08:03:25.343 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 08:03:25.344 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 08:03:25.344 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:25.344 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-08-12 08:03:25.344 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-08-12 08:03:25.345 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:25.345 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=2614fc1a, enricherName=TagEnricher):868324:870227
2026-08-12 08:03:25.345 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:25.345 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-08-12 08:03:25.345 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-08-12 08:03:25.345 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-08-12 08:03:25.346 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 08:03:25.346 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 08:03:25.347 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:03:25.348 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:03:25.348 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-08-12 08:03:25.348 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-08-12 08:03:25.349 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 08:03:25.349 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:03:25.350 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):296838:298831
2026-08-12 08:03:25.350 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@6dd86715
2026-08-12 08:03:25.350 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:03:25.350 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):26243:27047
2026-08-12 08:03:25.351 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@1e391684
2026-08-12 08:03:25.352 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:03:25.352 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):32597:31830
2026-08-12 08:03:25.352 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@3917aedb
2026-08-12 08:03:25.353 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:03:25.353 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):611099:613608
2026-08-12 08:03:25.354 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@35433514
2026-08-12 08:03:25.354 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@56bc3fac]]
2026-08-12 08:03:25.354 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):5775942:5815063
2026-08-12 08:03:25.354 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-08-12 08:03:25.355 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 08:03:25 UTC 2026)
2026-08-12 08:03:25.355 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 08:03:25 UTC 2026) : true
2026-08-12 08:03:25.355 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.356 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:25.356 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 08:03:25.356 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 08:03:25.357 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:25.357 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:25.357 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:25.358 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:25.358 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:25.358 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 08:03:25.358 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:25.359 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:25.359 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:25.359 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:25.359 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:25.360 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:25.360 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-08-12 08:03:25.360 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:03:25.361 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 08:03:25.361 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:25.361 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:25.361 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-08-12 08:03:25.362 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:03:25.362 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 08:03:25.362 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():5852674:5967886
2026-08-12 08:03:25.362 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:03:25.363 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:25.363 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-08-12 08:03:25.363 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 08:03:25.363 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[all]
2026-08-12 08:03:25.364 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca)
2026-08-12 08:03:25.364 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca): null
2026-08-12 08:03:25.364 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca)
2026-08-12 08:03:25.365 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca)
2026-08-12 08:03:25.365 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca)
2026-08-12 08:03:25.365 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-08-12 08:03:25.365 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-08-12 08:03:25.365 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca): true
2026-08-12 08:03:25.366 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):933537:932744
2026-08-12 08:03:25.366 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca): false
2026-08-12 08:03:25.366 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@2f7b41ca): null
2026-08-12 08:03:25.366 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 08:03:25.366 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=2614fc1a,policyId=2, policyName=db;table;):11023112:11138280
2026-08-12 08:03:25.367 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.367 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 08:03:25.367 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 08:03:25.367 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:25.367 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:25.368 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:25.368 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=2614fc1a_0):25599647:25820185
2026-08-12 08:03:25.368 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:25.368 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.368 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.369 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.369 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.369 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 08:03:25.369 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:03:25.369 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):29149:29077
2026-08-12 08:03:25.370 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@5180a0cb
2026-08-12 08:03:25.370 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:03:25.370 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):21624:21667
2026-08-12 08:03:25.370 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@68b67740
2026-08-12 08:03:25.370 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-08-12 08:03:25.370 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):1405975:1407823
2026-08-12 08:03:25.371 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-08-12 08:03:25.371 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): ret=false
2026-08-12 08:03:25.371 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.371 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.371 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.372 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0
2026-08-12 08:03:25.372 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:03:25 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null}
2026-08-12 08:03:25.372 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:03:25 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 08:03:25.373 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:03:25 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 08:03:25.373 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:25.373 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={dcdc32f2-e888-4ee9-b97b-cb416cc76b00-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}]
2026-08-12 08:03:25.380 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@1af9c734 has been put on the queue
2026-08-12 08:03:25.380 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@1af9c734 has been taken from the queue
I20260812 08:03:25.398363 14139 server.cc:273] Received an EOF from the subprocess
W20260812 08:03:25.399380 14109 server.cc:408] The subprocess has exited with status 9
I20260812 08:03:25.406306 14140 server.cc:440] outbound queue shut down: Aborted: 
I20260812 08:03:25.406325 14136 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:03:25.406313 14138 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:03:25.406322 14137 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 08:03:25.406929 12129 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 08:03:25.407084 12129 ranger_client.cc:318] Using existing properties file: /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 08:03:26.298 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-audit.xml)
2026-08-12 08:03:26.308 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-audit.xml does not exists
2026-08-12 08:03:26.308 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-audit.xml): couldn't find resource file location
2026-08-12 08:03:26.308 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-audit.xml), result=false
2026-08-12 08:03:26.309 [DEBUG - main] (RangerPluginConfig.java:329) ==> addAuditResource(Service Type: kudu
2026-08-12 08:03:26.311 [DEBUG - main] (RangerPluginConfig.java:352) <== addAuditResource(Service Type: kudu)
2026-08-12 08:03:26.311 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-security.xml)
2026-08-12 08:03:26.312 [DEBUG - main] (RangerConfiguration.java:51) addResourceIfReadable(ranger-kudu-security.xml): resource file is file:/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/ranger-kudu-security.xml
2026-08-12 08:03:26.353 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.getGroups with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"GetGroups"})
2026-08-12 08:03:26.362 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginFailure with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of failed kerberos logins and latency (milliseconds)"})
2026-08-12 08:03:26.363 [DEBUG - main] (MutableMetricsFactory.java:43) field org.apache.hadoop.metrics2.lib.MutableRate org.apache.hadoop.security.UserGroupInformation$UgiMetrics.loginSuccess with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Rate of successful kerberos logins and latency (milliseconds)"})
2026-08-12 08:03:26.364 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeInt org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailures with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since last successful login"})
2026-08-12 08:03:26.365 [DEBUG - main] (MutableMetricsFactory.java:43) field private org.apache.hadoop.metrics2.lib.MutableGaugeLong org.apache.hadoop.security.UserGroupInformation$UgiMetrics.renewalFailuresTotal with annotation @org.apache.hadoop.metrics2.annotation.Metric(always=false, sampleName="Ops", valueName="Time", about="", interval=10, type=DEFAULT, value={"Renewal failures since startup"})
2026-08-12 08:03:26.368 [DEBUG - main] (MetricsSystemImpl.java:231) UgiMetrics, User and group related metrics
2026-08-12 08:03:26.372 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-security.xml), result=true
2026-08-12 08:03:26.372 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-policymgr-ssl.xml)
2026-08-12 08:03:26.373 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-policymgr-ssl.xml does not exists
2026-08-12 08:03:26.373 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 08:03:26.374 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-policymgr-ssl.xml), result=false
2026-08-12 08:03:26.374 [DEBUG - main] (RangerPluginConfig.java:358) ==> addSslConfigResource(Service Type: kudu
2026-08-12 08:03:26.407 [DEBUG - main] (RangerPluginConfig.java:380) <== addSslConfigResource(Service Type: kudu)
2026-08-12 08:03:26.408 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-audit.xml)
2026-08-12 08:03:26.409 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-audit.xml does not exists
2026-08-12 08:03:26.409 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-audit.xml): couldn't find resource file location
2026-08-12 08:03:26.409 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-audit.xml), result=false
2026-08-12 08:03:26.409 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-security.xml)
2026-08-12 08:03:26.410 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-security.xml does not exists
2026-08-12 08:03:26.410 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-security.xml): couldn't find resource file location
2026-08-12 08:03:26.410 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-security.xml), result=false
2026-08-12 08:03:26.411 [DEBUG - main] (RangerConfiguration.java:45) ==> addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml)
2026-08-12 08:03:26.411 [DEBUG - main] (RangerConfiguration.java:97) Conf file path ranger-kudu-kudu-policymgr-ssl.xml does not exists
2026-08-12 08:03:26.411 [DEBUG - main] (RangerConfiguration.java:64) addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml): couldn't find resource file location
2026-08-12 08:03:26.412 [DEBUG - main] (RangerConfiguration.java:69) <== addResourceIfReadable(ranger-kudu-kudu-policymgr-ssl.xml), result=false
2026-08-12 08:03:26.413 [DEBUG - main] (RangerPluginConfig.java:121) ranger.plugin.kudu.use.x-forwarded-for.ipaddress:false
2026-08-12 08:03:26.413 [DEBUG - main] (RangerPluginConfig.java:122) ranger.plugin.kudu.trusted.proxy.ipaddresses:[null]
2026-08-12 08:03:26.414 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 08:03:26.416 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 08:03:26.422 [DEBUG - main] (RangerPluginConfig.java:243) superUsers=[], superGroups=[]
2026-08-12 08:03:26.422 [DEBUG - main] (RangerPluginConfig.java:234) auditExcludedUsers=[], auditExcludedGroups=[], auditExcludedRoles=[]
2026-08-12 08:03:26.512 [DEBUG - main] (MiscUtil.java:909) ==> MiscUtil.initLocalHost()
2026-08-12 08:03:26.512 [DEBUG - main] (MiscUtil.java:918) <== MiscUtil.initLocalHost()
2026-08-12 08:03:26.567 [DEBUG - main] (Shell.java:874) setsid exited with exit code 0
2026-08-12 08:03:26.568 [DEBUG - main] (SecurityUtil.java:136) Setting hadoop.security.token.service.use_ip to true
2026-08-12 08:03:26.589 [DEBUG - main] (Groups.java:476)  Creating new Groups object
2026-08-12 08:03:26.603 [DEBUG - main] (Groups.java:150) Group mapping impl=org.apache.hadoop.security.NullGroupsMapping; cacheTimeout=300000; warningDeltaMs=5000
2026-08-12 08:03:26.604 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 08:03:26.605 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 08:03:26.605 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:43197
2026-08-12 08:03:26.605 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 08:03:26.606 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 08:03:26.606 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/policy-cache
2026-08-12 08:03:26.606 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 08:03:26.606 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 08:03:26.607 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 08:03:26.608 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 08:03:26.626 [DEBUG - main] (PolicyRefresher.java:69) ==> PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 08:03:26.626 [DEBUG - main] (RangerPluginContext.java:145) ==> RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu)
2026-08-12 08:03:26.627 [DEBUG - main] (RangerPluginContext.java:158) Value for property[ranger.plugin.kudu.policy.source.impl] was [org.apache.ranger.admin.client.RangerAdminRESTClient].
2026-08-12 08:03:26.656 [DEBUG - main] (RangerAdminRESTClient.java:777) ==> RangerAdminRESTClient.init(http://127.0.0.1:43197, null)
2026-08-12 08:03:26.660 [DEBUG - main] (RangerAdminRESTClient.java:787) <== RangerAdminRESTClient.init(http://127.0.0.1:43197, null)
2026-08-12 08:03:26.661 [DEBUG - main] (RangerPluginContext.java:178) <== RangerBasePlugin.createAdminClient(kudu, kudu, ranger.plugin.kudu): policySourceImpl=org.apache.ranger.admin.client.RangerAdminRESTClient, client=org.apache.ranger.admin.client.RangerAdminRESTClient@1c481ff2
2026-08-12 08:03:26.663 [DEBUG - main] (RangerRolesProvider.java:60) ==> RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 08:03:26.663 [DEBUG - main] (RangerRolesProvider.java:83) <== RangerRolesProvider(serviceName=kudu).RangerRolesProvider()
2026-08-12 08:03:26.663 [DEBUG - main] (PolicyRefresher.java:97) <== PolicyRefresher(serviceName=kudu).PolicyRefresher()
2026-08-12 08:03:26.664 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 08:03:26.664 [DEBUG - main] (PolicyRefresher.java:559) ==> PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 08:03:26.664 [DEBUG - main] (RangerRolesProvider.java:98) ==> RangerRolesProvider(serviceName= kudu serviceType= kudu).loadUserGroupRoles()
2026-08-12 08:03:26.666 [INFO - main] (RangerPerfTracerFactory.java:44) ThreadCPUTimeSupported (by JVM)  = true
2026-08-12 08:03:26.666 [INFO - main] (RangerPerfTracerFactory.java:47) ThreadCPUTimeEnabled  = true
2026-08-12 08:03:26.666 [INFO - main] (RangerPerfTracerFactory.java:54) ThreadCPUTimeEnabled  = true
2026-08-12 08:03:26.667 [DEBUG - main] (RangerRolesProvider.java:107) In-Use memory: 28525264, Free memory:223132976
2026-08-12 08:03:26.668 [DEBUG - main] (RangerRolesProvider.java:160) ==> RangerRolesProvider(serviceName=kudu).loadUserGroupRolesFromAdmin()
2026-08-12 08:03:26.668 [DEBUG - main] (RangerAdminRESTClient.java:200) ==> RangerAdminRESTClient.getRolesIfUpdated(-1, 0)
2026-08-12 08:03:26.681 [DEBUG - main] (UserGroupInformation.java:244) Hadoop login
2026-08-12 08:03:26.694 [DEBUG - main] (UserGroupInformation.java:190) hadoop login commit
2026-08-12 08:03:26.698 [DEBUG - main] (UserGroupInformation.java:212) Using local user: UnixPrincipal: slave
2026-08-12 08:03:26.700 [DEBUG - main] (UserGroupInformation.java:216) Using user: "UnixPrincipal: slave" with name: slave
2026-08-12 08:03:26.701 [DEBUG - main] (UserGroupInformation.java:228) User entry: "slave"
2026-08-12 08:03:26.701 [DEBUG - main] (UserGroupInformation.java:799) UGI loginUser: slave (auth:SIMPLE)
2026-08-12 08:03:26.702 [DEBUG - main] (RangerAdminRESTClient.java:234) Checking Roles updated as user : slave (auth:SIMPLE)
2026-08-12 08:03:26.908 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:03:27.110 [DEBUG - main] (RangerAdminRESTClient.java:275) <== RangerAdminRESTClient.getRolesIfUpdated(-1, 0): 
2026-08-12 08:03:27.110 [DEBUG - main] (RangerRolesProvider.java:266) ==> RangerRolesProvider(serviceName=kudu).saveToCache()
2026-08-12 08:03:27.150 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.saveToCache(serviceName=kudu):38340395:39487173
2026-08-12 08:03:27.151 [DEBUG - main] (RangerRolesProvider.java:318) <== RangerRolesProvider.saveToCache(serviceName=kudu)
2026-08-12 08:03:27.151 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 08:03:27.151 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRolesFromAdmin(serviceName=kudu):453803124:483615390
2026-08-12 08:03:27.152 [DEBUG - main] (RangerRolesProvider.java:196) <== RangerRolesProvider(serviceName=kudu serviceType= kudu ).loadUserGroupRolesFromAdmin()
2026-08-12 08:03:27.152 [DEBUG - main] (RangerRolesProvider.java:124) In-Use memory: 45302480, Free memory:206355760
2026-08-12 08:03:27.152 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerRolesProvider.loadUserGroupRoles(serviceName=kudu):455223013:485031149
2026-08-12 08:03:27.153 [DEBUG - main] (RangerRolesProvider.java:153) <== RangerRolesProvider(serviceName=kudu).loadUserGroupRoles()
2026-08-12 08:03:27.153 [DEBUG - main] (PolicyRefresher.java:566) <== PolicyRefresher(serviceName=kudu).loadRoles()
2026-08-12 08:03:27.153 [DEBUG - main] (PolicyRefresher.java:227) ==> PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 08:03:27.153 [DEBUG - main] (PolicyRefresher.java:236) In-Use memory: 45302480, Free memory:206355760
2026-08-12 08:03:27.153 [DEBUG - main] (PolicyRefresher.java:290) ==> PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 08:03:27.154 [DEBUG - main] (RangerAdminRESTClient.java:115) ==> RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0)
2026-08-12 08:03:27.154 [DEBUG - main] (RangerAdminRESTClient.java:150) Checking Service policy if updated with old api call
2026-08-12 08:03:27.177 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:03:27.312 [DEBUG - main] (RangerAdminRESTClient.java:191) <== RangerAdminRESTClient.getServicePoliciesIfUpdated(-1, 0): serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null
2026-08-12 08:03:27.314 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 08:03:27.314 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicyFromPolicyAdmin(serviceName=kudu):138868297:160624609
2026-08-12 08:03:27.315 [DEBUG - main] (PolicyRefresher.java:333) <== PolicyRefresher(serviceName=kudu).loadPolicyfromPolicyAdmin()
2026-08-12 08:03:27.315 [DEBUG - main] (PolicyRefresher.java:253) In-Use memory: 49496784, Free memory:202161456
2026-08-12 08:03:27.317 [DEBUG - main] (RangerBasePlugin.java:348) ==> setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true ui.pages=tag-based-policies } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 08:03:27.325 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 08:03:27.329 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 08:03:27.331 [DEBUG - main] (RangerBasePlugin.java:441) Creating engine from policies
2026-08-12 08:03:27.336 [DEBUG - main] (PolicyEngine.java:185) ==> PolicyEngine(, serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null, org.apache.ranger.plugin.policyengine.RangerPluginContext@6ac4944a)
2026-08-12 08:03:27.338 [DEBUG - main] (PolicyEngine.java:196) In-Use memory: 52642512, Free memory:199015728
2026-08-12 08:03:27.342 [DEBUG - main] (RangerPluginContext.java:109) ==> cleanResourceMatchers()
2026-08-12 08:03:27.342 [DEBUG - main] (RangerPluginContext.java:119) <== cleanResourceMatchers()
2026-08-12 08:03:27.344 [DEBUG - main] (RangerSecurityZoneMatcher.java:143) ==> RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 08:03:27.344 [DEBUG - main] (RangerSecurityZoneMatcher.java:202) <== RangerSecurityZoneMatcher.buildZoneTrie()
2026-08-12 08:03:27.346 [DEBUG - main] (RangerPolicyDeltaUtil.java:174) ==> hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null]
2026-08-12 08:03:27.348 [DEBUG - main] (RangerPolicyDeltaUtil.java:226) <== hasPolicyDeltas(servicePolicies:[serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={sqoop:READ} isAllowed={true} }RangerPolicyItemAccess={type={sqoop:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={kylin:QUERY} isAllowed={true} }RangerPolicyItemAccess={type={kylin:OPERATION} isAllowed={true} }RangerPolicyItemAccess={type={kylin:MANAGEMENT} isAllowed={true} }RangerPolicyItemAccess={type={kylin:ADMIN} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:all} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:monitor} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:manage} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:view_index_metadata} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:read_cross_cluster} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:write} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:delete_index} isAllowed={true} }RangerPolicyItemAccess={type={elasticsearch:create_index} isAllowed={true} }RangerPolicyItemAccess={type={trino:select} isAllowed={true} }RangerPolicyItemAccess={type={trino:insert} isAllowed={true} }RangerPolicyItemAccess={type={trino:create} isAllowed={true} }RangerPolicyItemAccess={type={trino:drop} isAllowed={true} }RangerPolicyItemAccess={type={trino:delete} isAllowed={true} }RangerPolicyItemAccess={type={trino:use} isAllowed={true} }RangerPolicyItemAccess={type={trino:alter} isAllowed={true} }RangerPolicyItemAccess={type={trino:grant} isAllowed={true} }RangerPolicyItemAccess={type={trino:revoke} isAllowed={true} }RangerPolicyItemAccess={type={trino:show} isAllowed={true} }RangerPolicyItemAccess={type={trino:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={trino:all} isAllowed={true} }RangerPolicyItemAccess={type={trino:execute} isAllowed={true} }RangerPolicyItemAccess={type={trino:read_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={trino:write_sysinfo} isAllowed={true} }RangerPolicyItemAccess={type={presto:select} isAllowed={true} }RangerPolicyItemAccess={type={presto:insert} isAllowed={true} }RangerPolicyItemAccess={type={presto:create} isAllowed={true} }RangerPolicyItemAccess={type={presto:drop} isAllowed={true} }RangerPolicyItemAccess={type={presto:delete} isAllowed={true} }RangerPolicyItemAccess={type={presto:use} isAllowed={true} }RangerPolicyItemAccess={type={presto:alter} isAllowed={true} }RangerPolicyItemAccess={type={presto:grant} isAllowed={true} }RangerPolicyItemAccess={type={presto:revoke} isAllowed={true} }RangerPolicyItemAccess={type={presto:show} isAllowed={true} }RangerPolicyItemAccess={type={presto:impersonate} isAllowed={true} }RangerPolicyItemAccess={type={presto:all} isAllowed={true} }RangerPolicyItemAccess={type={presto:execute} isAllowed={true} }RangerPolicyItemAccess={type={ozone:all} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write} isAllowed={true} }RangerPolicyItemAccess={type={ozone:create} isAllowed={true} }RangerPolicyItemAccess={type={ozone:list} isAllowed={true} }RangerPolicyItemAccess={type={ozone:delete} isAllowed={true} }RangerPolicyItemAccess={type={ozone:read_acl} isAllowed={true} }RangerPolicyItemAccess={type={ozone:write_acl} isAllowed={true} }RangerPolicyItemAccess={type={kudu:select} isAllowed={true} }RangerPolicyItemAccess={type={kudu:insert} isAllowed={true} }RangerPolicyItemAccess={type={kudu:update} isAllowed={true} }RangerPolicyItemAccess={type={kudu:delete} isAllowed={true} }RangerPolicyItemAccess={type={kudu:alter} isAllowed={true} }RangerPolicyItemAccess={type={kudu:create} isAllowed={true} }RangerPolicyItemAccess={type={kudu:drop} isAllowed={true} }RangerPolicyItemAccess={type={kudu:metadata} isAllowed={true} }RangerPolicyItemAccess={type={kudu:all} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:read} isAllowed={true} }RangerPolicyItemAccess={type={nestedstructure:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:read} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:write} isAllowed={true} }RangerPolicyItemAccess={type={hdfs:execute} isAllowed={true} }RangerPolicyItemAccess={type={hbase:read} isAllowed={true} }RangerPolicyItemAccess={type={hbase:write} isAllowed={true} }RangerPolicyItemAccess={type={hbase:create} isAllowed={true} }RangerPolicyItemAccess={type={hbase:admin} isAllowed={true} }RangerPolicyItemAccess={type={hbase:execute} isAllowed={true} }RangerPolicyItemAccess={type={hive:select} isAllowed={true} }RangerPolicyItemAccess={type={hive:update} isAllowed={true} }RangerPolicyItemAccess={type={hive:create} isAllowed={true} }RangerPolicyItemAccess={type={hive:drop} isAllowed={true} }RangerPolicyItemAccess={type={hive:alter} isAllowed={true} }RangerPolicyItemAccess={type={hive:index} isAllowed={true} }RangerPolicyItemAccess={type={hive:lock} isAllowed={true} }RangerPolicyItemAccess={type={hive:all} isAllowed={true} }RangerPolicyItemAccess={type={hive:read} isAllowed={true} }RangerPolicyItemAccess={type={hive:write} isAllowed={true} }RangerPolicyItemAccess={type={hive:repladmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:serviceadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:tempudfadmin} isAllowed={true} }RangerPolicyItemAccess={type={hive:refresh} isAllowed={true} }RangerPolicyItemAccess={type={kms:create} isAllowed={true} }RangerPolicyItemAccess={type={kms:delete} isAllowed={true} }RangerPolicyItemAccess={type={kms:rollover} isAllowed={true} }RangerPolicyItemAccess={type={kms:setkeymaterial} isAllowed={true} }RangerPolicyItemAccess={type={kms:get} isAllowed={true} }RangerPolicyItemAccess={type={kms:getkeys} isAllowed={true} }RangerPolicyItemAccess={type={kms:getmetadata} isAllowed={true} }RangerPolicyItemAccess={type={kms:generateeek} isAllowed={true} }RangerPolicyItemAccess={type={kms:decrypteek} isAllowed={true} }RangerPolicyItemAccess={type={knox:allow} isAllowed={true} }RangerPolicyItemAccess={type={storm:submitTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileUpload} isAllowed={true} }RangerPolicyItemAccess={type={storm:fileDownload} isAllowed={true} }RangerPolicyItemAccess={type={storm:killTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:rebalance} isAllowed={true} }RangerPolicyItemAccess={type={storm:activate} isAllowed={true} }RangerPolicyItemAccess={type={storm:deactivate} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyConf} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getUserTopology} isAllowed={true} }RangerPolicyItemAccess={type={storm:getTopologyInfo} isAllowed={true} }RangerPolicyItemAccess={type={storm:uploadNewCredentials} isAllowed={true} }RangerPolicyItemAccess={type={yarn:submit-app} isAllowed={true} }RangerPolicyItemAccess={type={yarn:admin-queue} isAllowed={true} }RangerPolicyItemAccess={type={kafka:publish} isAllowed={true} }RangerPolicyItemAccess={type={kafka:consume} isAllowed={true} }RangerPolicyItemAccess={type={kafka:configure} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe} isAllowed={true} }RangerPolicyItemAccess={type={kafka:kafka_admin} isAllowed={true} }RangerPolicyItemAccess={type={kafka:create} isAllowed={true} }RangerPolicyItemAccess={type={kafka:delete} isAllowed={true} }RangerPolicyItemAccess={type={kafka:idempotent_write} isAllowed={true} }RangerPolicyItemAccess={type={kafka:describe_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter_configs} isAllowed={true} }RangerPolicyItemAccess={type={kafka:cluster_action} isAllowed={true} }RangerPolicyItemAccess={type={kafka:alter} isAllowed={true} }RangerPolicyItemAccess={type={solr:query} isAllowed={true} }RangerPolicyItemAccess={type={solr:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:create} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:read} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:update} isAllowed={true} }RangerPolicyItemAccess={type={schema-registry:delete} isAllowed={true} }RangerPolicyItemAccess={type={nifi:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:READ} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:WRITE} isAllowed={true} }RangerPolicyItemAccess={type={nifi-registry:DELETE} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null], ret:[false]
2026-08-12 08:03:27.349 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 08:03:27.360 [DEBUG - main] (RangerPolicyRepository.java:230) RangerPolicyRepository : building policy-repository for service[kudu], and zone:[null] with auditMode[AUDIT_DEFAULT]
2026-08-12 08:03:27.362 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:03:27.364 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:03:27.364 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:27.364 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:27.365 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:27.365 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:27.366 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.366 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.368 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:03:06 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:03:27.369 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 08:03:27.369 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:27.370 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.370 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.370 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.370 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.371 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.371 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.371 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.371 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.372 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.372 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.372 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.372 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(2): 
2026-08-12 08:03:27.373 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 08:03:27.377 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:27.377 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:27.378 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 08:03:27.378 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:27.378 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:03:27.382 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:03:27.382 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 08:03:27.382 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:27.383 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:27.383 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:27.383 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:27.385 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:27.385 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 08:03:27.385 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:27.386 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:27.386 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:27.386 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:27.387 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:27.387 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:27.387 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:27.387 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:03:27.392 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:03:27.394 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:27.394 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= db, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:27.395 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:03:27.395 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:27.396 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=database, resource=RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:27.397 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 08:03:27.397 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:27.397 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:27.398 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:03:27.398 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:03:27.398 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:27.398 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= table, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:27.399 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:03:27.399 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:27.399 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=table, resource=RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }})
2026-08-12 08:03:27.399 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}
2026-08-12 08:03:27.400 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:195) RangerDefaultPolicyResourceMatcher.init(): no matcher created for column. Continuing ...
2026-08-12 08:03:27.400 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():18002097:18033361
2026-08-12 08:03:27.400 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:03:27.401 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} })
2026-08-12 08:03:27.402 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=2, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, serviceType=kudu, conditionsDisabled=false)
2026-08-12 08:03:27.404 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=2, policyItemIndex=1):28538:29048
2026-08-12 08:03:27.404 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=2, conditionsCount=0)
2026-08-12 08:03:27.404 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=2):15335:94906
2026-08-12 08:03:27.405 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=2, policyName=db;table;):27308534:27348141
2026-08-12 08:03:27.405 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:27.405 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 08:03:27.406 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), false
2026-08-12 08:03:27.406 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 08:03:27.407 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:db;table;, priority:9971
2026-08-12 08:03:27.407 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:27.408 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={db,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} {RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} optIgnoreCase={true} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={true} policyValues={table,} policyIsExcludes={false} isMatchAny={false} options={wildCard=true;ignoreCase=true;} }}} } }} }
2026-08-12 08:03:27.409 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:03:27.409 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 08:03:27.409 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=2; name=db;table;; evalOrder=9971
2026-08-12 08:03:27.409 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 08:03:27.409 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 08:03:27.410 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 08:03:27.419 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.419 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:27.420 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):992016:994899
2026-08-12 08:03:27.421 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.421 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):1803086:1805511
2026-08-12 08:03:27.421 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.421 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.422 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.422 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:27.422 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):38447:39077
2026-08-12 08:03:27.422 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.422 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):611184:612713
2026-08-12 08:03:27.422 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.423 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.423 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.423 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:27.423 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):59039:59298
2026-08-12 08:03:27.423 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.424 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):580737:583114
2026-08-12 08:03:27.424 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.424 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.424 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.424 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.425 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):26829:27267
2026-08-12 08:03:27.425 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.425 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):675738:677549
2026-08-12 08:03:27.425 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.425 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.426 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.426 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.426 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):10053:10394
2026-08-12 08:03:27.426 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.426 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):624107:626190
2026-08-12 08:03:27.427 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.427 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.427 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.427 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.427 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):10373:10584
2026-08-12 08:03:27.428 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.428 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):543998:545625
2026-08-12 08:03:27.428 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.428 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.428 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.428 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.429 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):9572:10136
2026-08-12 08:03:27.429 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.429 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):562849:564039
2026-08-12 08:03:27.429 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.429 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.430 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.430 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.430 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):29605:29916
2026-08-12 08:03:27.430 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.431 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):658900:716815
2026-08-12 08:03:27.431 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.432 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.432 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.432 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.432 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):60030:12913
2026-08-12 08:03:27.432 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.433 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):698906:700882
2026-08-12 08:03:27.433 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.433 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.433 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.433 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(database, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.434 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=database):13467:13689
2026-08-12 08:03:27.434 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(database, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.434 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=database):704027:704894
2026-08-12 08:03:27.434 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.435 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(database, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=database; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.435 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.435 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(table, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.435 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=table):11933:12015
2026-08-12 08:03:27.435 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(table, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.436 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=table):582652:584022
2026-08-12 08:03:27.436 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.436 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(table, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=table; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.436 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.436 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(column, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.437 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=column):12223:12161
2026-08-12 08:03:27.437 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(column, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.437 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=column):617606:619598
2026-08-12 08:03:27.437 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.437 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(column, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=column; optIgnoreCase=true; optWildcard=true; wildcardChars=*?{}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.438 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:03:27.438 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:03:27.439 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:27.439 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:27.439 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:27.439 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:27.439 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.440 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.440 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:03:06 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:03:27.440 [DEBUG - main] (PolicyEngine.java:238) PolicyEngine : Building tag-policy-repository for tag-service tag
2026-08-12 08:03:27.442 [DEBUG - main] (RangerPolicyRepository.java:284) RangerPolicyRepository : building tag-policy-repository for tag service:[tag], with auditMode[AUDIT_DEFAULT]
2026-08-12 08:03:27.443 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }
2026-08-12 08:03:27.444 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 08:03:27.444 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:27.444 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:27.444 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:27.444 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:27.448 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={tag=[]}
2026-08-12 08:03:27.448 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:27.448 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:27.449 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [tag]
2026-08-12 08:03:27.449 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [tag]
2026-08-12 08:03:27.449 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.449 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [tag] update-date[Wed Aug 12 08:03:16 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[[RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 2=[]}
2026-08-12 08:03:27.450 [DEBUG - main] (RangerPolicyRepository.java:1091) ==> RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true })
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1115) ==> RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.451 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.452 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.452 [DEBUG - main] (RangerPolicyRepository.java:1149) ==> RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.452 [DEBUG - main] (RangerPolicyRepository.java:1158) <== RangerPolicyRepository.scrubPolicyItems(1): 
2026-08-12 08:03:27.453 [DEBUG - main] (RangerPolicyRepository.java:1142) <== RangerPolicyRepository.scrubPolicy(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}): false
2026-08-12 08:03:27.453 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:73) ==> RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:27.453 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:27.454 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:27.454 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:27.454 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:03:27.455 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:03:27.455 [DEBUG - main] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=tag)
2026-08-12 08:03:27.455 [DEBUG - main] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag)
2026-08-12 08:03:27.455 [DEBUG - main] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=tag): true
2026-08-12 08:03:27.456 [DEBUG - main] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=tag) : [RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:27.456 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:27.456 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:27.456 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:811) ==> RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:27.456 [DEBUG - main] (RangerPluginContext.java:66) ==> getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} })
2026-08-12 08:03:27.457 [DEBUG - main] (RangerPluginContext.java:82) <== getResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }) : ret=null
2026-08-12 08:03:27.457 [DEBUG - main] (RangerAbstractResourceMatcher.java:89) ==> RangerAbstractResourceMatcher.init()
2026-08-12 08:03:27.457 [DEBUG - main] (ResourceMatcher.java:107) ==> setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:27.458 [DEBUG - main] (ResourceMatcher.java:116) <== setDelimiters(value= EXPIRES_ON, startDelimiter={, endDelimiter=}, escapeChar=\, prefix=
2026-08-12 08:03:27.458 [DEBUG - main] (RangerAbstractResourceMatcher.java:141) <== RangerAbstractResourceMatcher.init()
2026-08-12 08:03:27.458 [DEBUG - main] (RangerPluginContext.java:90) ==> setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 08:03:27.458 [DEBUG - main] (RangerPluginContext.java:103) <== setResourceMatcher(resourceDefName=tag, resource=RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }, matcher=RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }})
2026-08-12 08:03:27.459 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:860) <== RangerDefaultPolicyResourceMatcher.createResourceMatcher(RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }): RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}
2026-08-12 08:03:27.459 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():4065542:4065704
2026-08-12 08:03:27.459 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:03:27.460 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:27.461 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:60) ==> RangerDefaultPolicyItemEvaluator(policyId=1, policyItem=RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }, serviceType=tag, conditionsDisabled=false)
2026-08-12 08:03:27.461 [DEBUG - main] (RangerCustomConditionEvaluator.java:146) ==> RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator)
2026-08-12 08:03:27.462 [DEBUG - main] (RangerCustomConditionEvaluator.java:161) <== RangerCustomConditionEvaluator.newConditionEvaluator(org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator): org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator@2f19f2aa
2026-08-12 08:03:27.462 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:38) ==> RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:03:27.463 [DEBUG - main] (RangerScriptConditionEvaluator.java:47) ==> RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:03:27.463 [DEBUG - main] (RangerScriptConditionEvaluator.java:70) RangerScriptConditionEvaluator.init() - engineName=JavaScript
2026-08-12 08:03:27.464 [DEBUG - main] (ScriptEngineUtil.java:60) ==> ScriptEngineUtil.createScriptEngine(serviceType=tag)
2026-08-12 08:03:27.470 [DEBUG - main] (GraalScriptEngineCreator.java:99) ===>> GraalScriptEngineCreator.getGraalVmConfigs()
2026-08-12 08:03:27.484 [DEBUG - main] (GraalScriptEngineCreator.java:135) <<=== GraalScriptEngineCreator.getGraalVmConfigs(): ret={polyglot.js.nashorn-compat=true, polyglot.js.allowHostAccess=true}
2026-08-12 08:03:27.497 [DEBUG - main] (GraalScriptEngineCreator.java:92) GraalScriptEngineCreator.getScriptEngine(): failed to create engine type graal.js
2026-08-12 08:03:27.499 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 08:03:27.500 [DEBUG - main] (JavaScriptEngineCreator.java:50) JavaScriptEngineCreator.getScriptEngine(): failed to create engine type JavaScript
2026-08-12 08:03:27.500 [DEBUG - main] (ScriptEngineUtil.java:185) Cannot get plugin-class-loader for serviceType tag
2026-08-12 08:03:27.500 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 08:03:27.501 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 08:03:27.501 [DEBUG - main] (ScriptEngineUtil.java:85) <== ScriptEngineUtil.createScriptEngine(serviceType=tag): ret=null
2026-08-12 08:03:27.501 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 08:03:27.501 [DEBUG - main] (RangerScriptConditionEvaluator.java:84) <== RangerScriptConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } })
2026-08-12 08:03:27.501 [DEBUG - main] (RangerScriptTemplateConditionEvaluator.java:60) <== RangerScriptTemplateConditionEvaluator.init(RangerPolicyCondition={type={accessed-after-expiry} values={yes } }): script=ctx.isAccessedAfter('expiry_date');; reverseResult=false
2026-08-12 08:03:27.502 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerConditionEvaluator.init(policyId=1, policyItemIndex=1, policyConditionType=accessed-after-expiry):39098016:39167279
2026-08-12 08:03:27.502 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyItemEvaluator.getPolicyItemConditionEvaluators(policyId=1, policyItemIndex=1):40891586:40994359
2026-08-12 08:03:27.502 [DEBUG - main] (RangerDefaultPolicyItemEvaluator.java:70) <== RangerDefaultPolicyItemEvaluator(policyId=1, conditionsCount=1)
2026-08-12 08:03:27.502 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):21183:20590
2026-08-12 08:03:27.503 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=EXPIRES_ON):49178166:49289376
2026-08-12 08:03:27.503 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:27.503 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:375) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms()
2026-08-12 08:03:27.503 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:392) ==> RangerOptimizedPolicyEvaluator.checkIfHasAllPerms(), true
2026-08-12 08:03:27.503 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:149) ==> RangerOptimizedPolicyEvaluator.computeEvalOrder()
2026-08-12 08:03:27.503 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:232) <== RangerOptimizedPolicyEvaluator.computeEvalOrder(), policyName:EXPIRES_ON, priority:9930
2026-08-12 08:03:27.504 [DEBUG - main] (RangerOptimizedPolicyEvaluator.java:113) <== RangerOptimizedPolicyEvaluator.init()
2026-08-12 08:03:27.504 [DEBUG - main] (RangerPolicyRepository.java:1107) <== RangerPolicyRepository.buildPolicyEvaluator(RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }},RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }): RangerDefaultPolicyEvaluator={RangerAbstractPolicyEvaluator={policy={RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}} }resourceMatcher={RangerDefaultPolicyResourceMatcher={isInitialized=true, matchers={{RangerDefaultResourceMatcher={RangerAbstractResourceMatcher={resourceDef={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} policyResource={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} optIgnoreCase={false} optQuotedCaseSensitive={false} optQuoteChars={"} optWildCard={false} policyValues={EXPIRES_ON,} policyIsExcludes={false} isMatchAny={false} options={wildCard=false;ignoreCase=false;} }}} } }} }
2026-08-12 08:03:27.505 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:03:27.505 [DEBUG - main] (RangerPolicyRepository.java:946) policy evaluation order: 1 policies
2026-08-12 08:03:27.505 [DEBUG - main] (RangerPolicyRepository.java:952) policy evaluation order: #1 - policy id=1; name=EXPIRES_ON; evalOrder=9930
2026-08-12 08:03:27.505 [DEBUG - main] (RangerPolicyRepository.java:955) dataMask policy evaluation order: 0 policies
2026-08-12 08:03:27.506 [DEBUG - main] (RangerPolicyRepository.java:963) rowFilter policy evaluation order: 0 policies
2026-08-12 08:03:27.506 [DEBUG - main] (RangerPolicyRepository.java:971) audit policy evaluation order: 0 policies
2026-08-12 08:03:27.506 [DEBUG - main] (RangerPolicyRepository.java:1037) ==> RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:03:27.510 [DEBUG - main] (RangerTagEnricher.java:103) ==> RangerTagEnricher.init()
2026-08-12 08:03:27.510 [DEBUG - main] (RangerAbstractContextEnricher.java:77) ==> RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:03:27.511 [DEBUG - main] (RangerAbstractContextEnricher.java:91) <== RangerAbstractContextEnricher.init(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} })
2026-08-12 08:03:27.511 [DEBUG - main] (RangerServiceDefHelper.java:141) ==> RangerServiceDefHelper(). The RangerServiceDef: RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }
2026-08-12 08:03:27.512 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: _nodes={database=[table], column=[], table=[column]}
2026-08-12 08:03:27.512 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:27.512 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:27.512 [DEBUG - main] (RangerServiceDefHelper.java:865) Returning sources: [database]
2026-08-12 08:03:27.512 [DEBUG - main] (RangerServiceDefHelper.java:885) Returning sinks: [column]
2026-08-12 08:03:27.513 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.513 [DEBUG - main] (RangerServiceDefHelper.java:532) Created graph for resources: null
2026-08-12 08:03:27.513 [DEBUG - main] (RangerServiceDefHelper.java:428) Found [3] resource hierarchies for service [kudu] update-date[Wed Aug 12 08:03:06 UTC 2026]: {0=[[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }], [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]], 1=[], 2=[]}
2026-08-12 08:03:27.515 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 08:03:27.517 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 08:03:27.517 [DEBUG - main] (RangerAdminRESTClient.java:794) ==> RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 08:03:27.528 [DEBUG - main] (RangerAdminRESTClient.java:1027) checkAndResetSessionCookie(): status=200, sessionIdCookie=null, newCookie=null
2026-08-12 08:03:27.553 [DEBUG - main] (RangerAdminRESTClient.java:865) <== RangerAdminRESTClient.getServiceTagsIfUpdated(-1, 0): 
2026-08-12 08:03:27.553 [DEBUG - main] (RangerTagEnricher.java:1092) ==> RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 08:03:27.565 [DEBUG - main] (RangerTagEnricher.java:1122) <== RangerTagRetriever(serviceName=kudu).saveToCache()
2026-08-12 08:03:27.566 [DEBUG - main] (RangerTagEnricher.java:290) ==> RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 08:03:27.566 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 08:03:27.566 [DEBUG - main] (RangerTagEnricher.java:446) Processing all service-tags
2026-08-12 08:03:27.567 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 08:03:27.567 [DEBUG - main] (RangerTagEnricher.java:708) ==> setEnrichedServiceTagsInPlugin()
2026-08-12 08:03:27.567 [DEBUG - main] (RangerTagEnricher.java:720) <== setEnrichedServiceTagsInPlugin()
2026-08-12 08:03:27.567 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerTagEnricher.setServiceTags(newTagVersion=1,isDelta=false):1282289:1311938
2026-08-12 08:03:27.568 [DEBUG - main] (RangerTagEnricher.java:377) <== RangerTagEnricher.setServiceTags(serviceTags=ServiceTags={op=add_or_update, serviceName=kudu, tagVersion=1, tagUpdateTime={null}isDelta={false}tagsChangeExtent={ALL}, serviceResources={[]}, tags={{}}, resourceToTagIds={{}}, isTagsDeduped={true}, cachedTags={{}}}, rebuildOnlyIndex=false)
2026-08-12 08:03:27.568 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 08:03:27.572 [DEBUG - RangerTagRefresher(serviceName=kudu)-21] (RangerTagEnricher.java:914) ==> RangerTagRefresher().run()
2026-08-12 08:03:27.573 [DEBUG - main] (RangerTagEnricher.java:169) Scheduled tagDownloadRefresher to download tags every 60000 milliseconds
2026-08-12 08:03:27.574 [DEBUG - main] (RangerTagEnricher.java:182) <== RangerTagEnricher.init()
2026-08-12 08:03:27.574 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerContextEnricher.init(appId=kudu,name=TagEnricher):54421837:67106065
2026-08-12 08:03:27.574 [DEBUG - main] (RangerPolicyRepository.java:1084) <== RangerPolicyRepository.buildContextEnricher(RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }): org.apache.ranger.plugin.contextenricher.RangerTagEnricher@1d81e101
2026-08-12 08:03:27.576 [DEBUG - main] (RangerAuditPolicyEvaluator.java:56) RangerAuditPolicyEvaluator(auditFilter={accessResult=DENIED, resources=null, accessTypes=null, actions=null, users=null, groups=null, roles=null, isAudited=true}, priority=1, matchAnyResource=true)
2026-08-12 08:03:27.577 [DEBUG - main] (RangerAuditPolicyEvaluator.java:65) ==> RangerAuditPolicyEvaluator.init(1)
2026-08-12 08:03:27.577 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:108) ==> RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:27.578 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:93) ==> RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:27.579 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:215) ==> RangerAbstractPolicyEvaluator.getPrunedPolicy(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }})
2026-08-12 08:03:27.579 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:263) <== RangerAbstractPolicyEvaluator.getPrunedPolicy(isPruningNeeded=false) : RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}
2026-08-12 08:03:27.579 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:143) ==> RangerDefaultPolicyResourceMatcher.init()
2026-08-12 08:03:27.579 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerDefaultPolicyResourceMatcher.init():56626:56538
2026-08-12 08:03:27.580 [DEBUG - main] (RangerDefaultPolicyResourceMatcher.java:252) <== RangerDefaultPolicyResourceMatcher.init(): ret=true
2026-08-12 08:03:27.580 [DEBUG - main] (RangerAbstractPolicyEvaluator.java:120) <== RangerAbstractPolicyEvaluator.init(RangerPolicy={id={1} guid={null} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={null} service={null} name={null} policyType={3} policyPriority={1} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={null} resources={} additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}, RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} })
2026-08-12 08:03:27.581 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.getPolicyConditionEvaluators(policyId=1):13537:12484
2026-08-12 08:03:27.581 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEvaluator.init(policyId=1, policyName=null):3822142:3821425
2026-08-12 08:03:27.581 [DEBUG - main] (RangerDefaultPolicyEvaluator.java:175) <== RangerDefaultPolicyEvaluator.init()
2026-08-12 08:03:27.582 [DEBUG - main] (RangerAuditPolicyEvaluator.java:216) RangerAuditPolicyItemEvaluator(RangerAuditPolicyItem={RangerPolicyItem={accessTypes={} users={} groups={} roles={} conditions={} delegateAdmin={false} } accessResult={DENIED} actions={} accessTypes={} isAudited={true}}, matchAnyUser=true, matchAnyAction=true, hasResourceOwner=false)
2026-08-12 08:03:27.582 [DEBUG - main] (RangerAuditPolicyEvaluator.java:79) <== RangerAuditPolicyEvaluator.init(1)
2026-08-12 08:03:27.583 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.583 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:27.583 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):86132:86323
2026-08-12 08:03:27.583 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=1; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.583 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):615993:617345
2026-08-12 08:03:27.584 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.584 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=2; leafNodeCount=1; singleChildNodeCount=1; maxDepth=2; evaluatorListCount=1; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.584 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.584 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.584 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):13378:13654
2026-08-12 08:03:27.584 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.585 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):523446:524657
2026-08-12 08:03:27.585 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.585 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.585 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.585 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=0, isMultiThreaded=false)
2026-08-12 08:03:27.585 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):13283:12157
2026-08-12 08:03:27.586 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=0, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.586 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):521851:523403
2026-08-12 08:03:27.586 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.586 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=0, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.586 [DEBUG - main] (RangerResourceTrie.java:113) ==> RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false)
2026-08-12 08:03:27.586 [DEBUG - main] (RangerResourceTrie.java:383) ==> buildTrie(tag, evaluatorCount=1, isMultiThreaded=false)
2026-08-12 08:03:27.587 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(resourceDef=tag):40868:39593
2026-08-12 08:03:27.587 [DEBUG - main] (RangerResourceTrie.java:505) <== buildTrie(tag, evaluatorCount=1, isMultiThreaded=false) :nodeValue=ROOT; isSetup=false; isSharingParentWildcardEvaluators=false; childCount=0; evaluators=[]; wildcardEvaluators=[ ]
2026-08-12 08:03:27.587 [DEBUG - main] (RangerPerfTracer.java:113) [PERF]:main:RangerResourceTrie.init(name=tag):568350:569555
2026-08-12 08:03:27.587 [DEBUG - main] (RangerResourceTrie.java:173) resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.587 [DEBUG - main] (RangerResourceTrie.java:181) <== RangerResourceTrie(tag, evaluatorCount=1, isOptimizedForRetrieval=false, isOptimizedForSpace=false): resourceName=tag; optIgnoreCase=false; optWildcard=false; wildcardChars={}\$; nodeCount=1; leafNodeCount=1; singleChildNodeCount=0; maxDepth=1; evaluatorListCount=0; wildcardEvaluatorListCount=0; evaluatorListRefCount=0; wildcardEvaluatorListRefCount=0
2026-08-12 08:03:27.588 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:RangerPolicyEngine.init(hashCode=5a772895):235475195:249510999
2026-08-12 08:03:27.588 [DEBUG - main] (PolicyEngine.java:294) In-Use memory: 63128272, Free memory:188529968
2026-08-12 08:03:27.588 [DEBUG - main] (PolicyEngine.java:298) <== PolicyEngine()
2026-08-12 08:03:27.590 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 08:03:27.590 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 08:03:27.590 [DEBUG - main] (PolicyRefresher.java:399) ==> PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 08:03:27.635 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 08:03:27.636 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.saveToCache(serviceName=kudu):44646827:45194629
2026-08-12 08:03:27.636 [DEBUG - main] (PolicyRefresher.java:482) <== PolicyRefresher(serviceName=kudu).saveToCache()
2026-08-12 08:03:27.637 [DEBUG - main] (RangerBasePlugin.java:524) <== setPolicies(serviceName=kudu, serviceId=1, policyVersion=3, policyUpdateTime=Wed Aug 12 08:03:22 UTC 2026, policies=[RangerPolicy={id={2} guid={87d8a2fa-bb7d-4a4a-a725-8f2f8b71707c} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={kudu} name={db;table;} policyType={0} policyPriority={0} description={null} resourceSignature={null} isAuditEnabled={true} serviceType={kudu} resources={database={RangerPolicyResource={values={db } isExcludes={false} isRecursive={false} }} table={RangerPolicyResource={values={table } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }} denyPolicyItems={} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], tagPolicies=serviceName=tag, serviceId=2, policyVersion=2, policyUpdateTime=Wed Aug 12 08:03:21 UTC 2026, policies=[RangerPolicy={id={1} guid={c2bbec16-5cbb-4df1-a18b-a5c5c452332a} isEnabled={true} createdBy={null} updatedBy={null} createTime={null} updateTime={null} version={1} service={tag} name={EXPIRES_ON} policyType={0} policyPriority={0} description={Policy for data with EXPIRES_ON tag} resourceSignature={null} isAuditEnabled={true} serviceType={tag} resources={tag={RangerPolicyResource={values={EXPIRES_ON } isExcludes={false} isRecursive={false} }} } additionalResources={} policyLabels={} policyConditions={} policyItems={} denyPolicyItems={RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={select} isAllowed={true} }RangerPolicyItemAccess={type={insert} isAllowed={true} }RangerPolicyItemAccess={type={update} isAllowed={true} }RangerPolicyItemAccess={type={delete} isAllowed={true} }RangerPolicyItemAccess={type={alter} isAllowed={true} }RangerPolicyItemAccess={type={create} isAllowed={true} }RangerPolicyItemAccess={type={drop} isAllowed={true} }RangerPolicyItemAccess={type={metadata} isAllowed={true} }RangerPolicyItemAccess={type={all} isAllowed={true} }} users={} groups={public } roles={} conditions={RangerPolicyCondition={type={accessed-after-expiry} values={yes } }} delegateAdmin={false} }} allowExceptions={} denyExceptions={} dataMaskPolicyItems={} rowFilterPolicyItems={} options={} validitySchedules={, zoneName=null, isDenyAllElse={false} }}], serviceDef=RangerServiceDef={id={100} guid={0d047248-baff-4cf9-8e9e-d5d377284b2e} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:04 UTC 2026} updateTime={Wed Aug 12 08:03:16 UTC 2026} version={21} name={tag} displayName={tag} implClass={org.apache.ranger.services.tag.RangerServiceTag} label={TAG} description={TAG Service Definition} rbKeyLabel={null} rbKeyDescription={null} options={ui.pages=tag-based-policies enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[ {'accessResult': 'DENIED', 'isAudited': true} ]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=false, ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={105106} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={105107} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105108} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={105109} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105110} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105111} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={105112} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={105113} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={105114} name={all} label={ALL} rbKeyLabel={null} impliedGrants={drop metadata select create insert update delete alter } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={accessed-after-expiry} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptTemplateConditionEvaluator} evaluatorOptions={{scriptTemplate=ctx.isAccessedAfter('expiry_date');}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={Accessed after expiry_date (yes/no)?} description={Accessed after expiry_date? (yes/no)} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }RangerPolicyConditionDef={itemId={2} name={expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={RangerContextEnricherDef={itemId={1} name={TagEnricher} enricher={org.apache.ranger.plugin.contextenricher.RangerTagEnricher} enricherOptions={{tagRetrieverClassName=org.apache.ranger.plugin.contextenricher.RangerAdminTagRetriever, tagRefresherPollingInterval=60000}} }} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={RangerDataMaskTypeDef={itemId={203204} name={trino:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203205} name={trino:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203206} name={trino:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203207} name={trino:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203208} name={trino:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203209} name={trino:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203215} name={trino:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={203216} name={trino:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17018} name={presto:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={cast(regexp_replace(regexp_replace(regexp_replace({col},'([A-Z])', 'X'),'([a-z])','x'),'([0-9])','0') as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17019} name={presto:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'X'} transformer={cast(regexp_replace({col}, '(.*)(.{4}$)', x -> regexp_replace(x[1], '.', 'X') || x[2]) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17020} name={presto:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={cast(regexp_replace({col}, '(^.{4})(.*)', x -> x[1] || regexp_replace(x[2], '.', 'X')) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17021} name={presto:MASK_HASH} label={Hash} description={Hash the value of a varchar with sha256} transformer={cast(to_hex(sha256(to_utf8({col}))) as {type})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17022} name={presto:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17023} name={presto:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17029} name={presto:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={date_trunc('year', {col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={17030} name={presto:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205206} name={nestedstructure:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205207} name={nestedstructure:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205208} name={nestedstructure:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({field}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205209} name={nestedstructure:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({field})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205210} name={nestedstructure:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205211} name={nestedstructure:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205217} name={nestedstructure:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({field}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={205218} name={nestedstructure:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3004} name={hive:MASK} label={Redact} description={Replace lowercase with 'x', uppercase with 'X', digits with '0'} transformer={mask({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3005} name={hive:MASK_SHOW_LAST_4} label={Partial mask: show last 4} description={Show last 4 characters; replace rest with 'x'} transformer={mask_show_last_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3006} name={hive:MASK_SHOW_FIRST_4} label={Partial mask: show first 4} description={Show first 4 characters; replace rest with 'x'} transformer={mask_show_first_n({col}, 4, 'x', 'x', 'x', -1, '1')} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3007} name={hive:MASK_HASH} label={Hash} description={Hash the value} transformer={mask_hash({col})} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3008} name={hive:MASK_NULL} label={Nullify} description={Replace with NULL} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3009} name={hive:MASK_NONE} label={Unmasked (retain original value)} description={No masking} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3015} name={hive:MASK_DATE_SHOW_YEAR} label={Date: show only year} description={Date: show only year} transformer={mask({col}, 'x', 'x', 'x', -1, '1', 1, 0, -1)} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } RangerDataMaskTypeDef={itemId={3016} name={hive:CUSTOM} label={Custom} description={Custom} transformer={null} dataMaskOptions={{}} rbKeyLabel={null} rbKeyDescription={null} } } accessTypes={} resources={RangerResourceDef={itemId={1} name={tag} type={string} level={1} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={false} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{__isValidLeaf=true, wildCard=false, __accessTypeRestrictions=[], ignoreCase=false}} validationRegEx={null} validationMessage={null} uiHint={{ "singleValue":true }} label={TAG} description={TAG} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} } } }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={205208} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={205209} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={205210} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata update insert } category={null} }RangerAccessTypeDef={itemId={205211} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={205212} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={205213} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={all drop metadata select update create insert delete alter } category={null} }} }, auditMode=audit-defaultserviceConfig={ranger.plugin.audit.filters=[ {'accessResult': 'DENIED', 'isAudited': true} ]}, policyDeltas=null, serviceDef=RangerServiceDef={id={105} guid={d3aebcf2-3bd1-4c7e-9610-c321b41fdb81} isEnabled={true} createdBy={null} updatedBy={null} createTime={Wed Aug 12 08:03:06 UTC 2026} updateTime={Wed Aug 12 08:03:06 UTC 2026} version={1} name={kudu} displayName={kudu} implClass={org.apache.ranger.services.kudu.RangerServiceKudu} label={Kudu} description={Kudu} rbKeyLabel={null} rbKeyDescription={null} options={enableDenyAndExceptionsInPolicies=true enableTagBasedPolicies=true } configs={RangerServiceConfigDef={itemId={ranger.plugin.audit.filters} name={ranger.plugin.audit.filters} type={string} subType={null} mandatory={false} defaultValue={[]} validationRegEx={null} validationMessage={null} uiHint={null} label={Ranger Default Audit Filters} description={null} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} resources={RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }} accessTypes={RangerAccessTypeDef={itemId={1} name={select} label={SELECT} rbKeyLabel={null} impliedGrants={metadata } category={READ} }RangerAccessTypeDef={itemId={2} name={insert} label={INSERT} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={3} name={update} label={UPDATE} rbKeyLabel={null} impliedGrants={metadata } category={UPDATE} }RangerAccessTypeDef={itemId={4} name={delete} label={DELETE} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={5} name={alter} label={ALTER} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={6} name={create} label={CREATE} rbKeyLabel={null} impliedGrants={metadata } category={CREATE} }RangerAccessTypeDef={itemId={7} name={drop} label={DROP} rbKeyLabel={null} impliedGrants={metadata } category={DELETE} }RangerAccessTypeDef={itemId={8} name={metadata} label={METADATA} rbKeyLabel={null} impliedGrants={} category={MANAGE} }RangerAccessTypeDef={itemId={9} name={all} label={ALL} rbKeyLabel={null} impliedGrants={metadata select insert update delete alter create drop } category={null} }} policyConditions={RangerPolicyConditionDef={itemId={1} name={_expression} evaluator={org.apache.ranger.plugin.conditionevaluator.RangerScriptConditionEvaluator} evaluatorOptions={{engineName=JavaScript, ui.isMultiline=true}} validationRegEx={null} validationMessage={null} uiHint={{ "isMultiline":true }} label={Enter boolean expression} description={Boolean expression} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} }} contextEnrichers={} enums={} dataMaskDef={RangerDataMaskDef={maskTypes={} accessTypes={} resources={} }} rowFilterDef={RangerRowFilterDef={accessTypes={} resources={} }} markerAccessTypes={RangerAccessTypeDef={itemId={10} name={_CREATE} label={_CREATE} rbKeyLabel={null} impliedGrants={metadata create alter } category={null} }RangerAccessTypeDef={itemId={11} name={_READ} label={_READ} rbKeyLabel={null} impliedGrants={metadata select } category={null} }RangerAccessTypeDef={itemId={12} name={_UPDATE} label={_UPDATE} rbKeyLabel={null} impliedGrants={metadata insert update } category={null} }RangerAccessTypeDef={itemId={13} name={_DELETE} label={_DELETE} rbKeyLabel={null} impliedGrants={drop metadata delete } category={null} }RangerAccessTypeDef={itemId={14} name={_MANAGE} label={_MANAGE} rbKeyLabel={null} impliedGrants={metadata } category={null} }RangerAccessTypeDef={itemId={15} name={_ALL} label={_ALL} rbKeyLabel={null} impliedGrants={drop all metadata select insert update create delete alter } category={null} }} }, auditMode=audit-default, securityZones=null)
2026-08-12 08:03:27.638 [DEBUG - main] (RangerPerfTracer.java:109) [PERF]:main:PolicyRefresher.loadPolicy(serviceName=kudu):447806958:484655642
2026-08-12 08:03:27.638 [DEBUG - main] (PolicyRefresher.java:283) <== PolicyRefresher(serviceName=kudu).loadPolicy()
2026-08-12 08:03:27.639 [DEBUG - PolicyRefresher(serviceName=kudu)-19] (PolicyRefresher.java:195) ==> PolicyRefresher(serviceName=kudu).run()
2026-08-12 08:03:27.639 [DEBUG - main] (PolicyRefresher.java:149) Scheduled policyDownloadRefresher to download policies every 30000 milliseconds
2026-08-12 08:03:27.639 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
2026-08-12 08:03:27.697 [DEBUG - pool-3-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.InboundRequest@78ac70bb has been put on the queue
2026-08-12 08:03:27.697 [DEBUG - pool-4-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.InboundRequest@78ac70bb has been taken from the queue
2026-08-12 08:03:27.795 [DEBUG - pool-4-thread-1] (Groups.java:344) GroupCacheLoader - load.
2026-08-12 08:03:27.798 [DEBUG - pool-4-thread-1] (UserGroupInformation.java:1809) Failed to get groups for user user
java.io.IOException: No groups found for user user
	at org.apache.hadoop.security.Groups.noGroupsForUser(Groups.java:198)
	at org.apache.hadoop.security.Groups.access$400(Groups.java:74)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:366)
	at org.apache.hadoop.security.Groups$GroupCacheLoader.load(Groups.java:302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3551)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2302)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2177)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2068)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.get(LocalCache.java:3986)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache.getOrLoad(LocalCache.java:4007)
	at org.apache.hadoop.thirdparty.com.google.common.cache.LocalCache$LocalLoadingCache.get(LocalCache.java:4946)
	at org.apache.hadoop.security.Groups.getGroupInternal(Groups.java:260)
	at org.apache.hadoop.security.Groups.getGroupsSet(Groups.java:232)
	at org.apache.hadoop.security.UserGroupInformation.getGroupsSet(UserGroupInformation.java:1807)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.getUserGroups(RangerKuduAuthorizer.java:246)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorizeRequests(RangerKuduAuthorizer.java:178)
	at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.authorize(RangerKuduAuthorizer.java:117)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:50)
	at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.executeRequest(RangerProtocolHandler.java:36)
	at org.apache.kudu.subprocess.ProtocolHandler.unpackAndExecuteRequest(ProtocolHandler.java:53)
	at org.apache.kudu.subprocess.MessageParser.parseAndExecuteRequest(MessageParser.java:106)
	at org.apache.kudu.subprocess.MessageParser.run(MessageParser.java:65)
	at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:840)
2026-08-12 08:03:27.802 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:114) ==> RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } }, policyType=0)
2026-08-12 08:03:27.802 [INFO - pool-4-thread-1] (RangerPolicyEngineImpl.java:124) RangerPolicyEngineImpl.evaluatePolicies(19e01194_0, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 08:03:27.803 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:75) ==> preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={null} clusterType={null} context={ISREQUESTPREPROCESSED={false} } })
2026-08-12 08:03:27.803 [DEBUG - pool-4-thread-1] (RangerAccessRequestImpl.java:343) Old Remote/Client IP Address=null, new IP Address=null
2026-08-12 08:03:27.803 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:86) ==> RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 08:03:27.803 [DEBUG - pool-4-thread-1] (RangerSecurityZoneMatcher.java:135) <== RangerSecurityZoneMatcher.getZonesForResourceAndChildren(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 08:03:27.804 [DEBUG - pool-4-thread-1] (PolicyEngine.java:393) getMatchedZonesForResourceAndChildren(resource=RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): ret=null
2026-08-12 08:03:27.804 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:189) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:27.804 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:202) ==> RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]
2026-08-12 08:03:27.804 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:233) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } }) with dataStore:[null]): tags count=0
2026-08-12 08:03:27.804 [DEBUG - pool-4-thread-1] (RangerTagEnricher.java:195) <== RangerTagEnricher.enrich(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={false} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerContextEnricher.enrich(requestHashCode=19e01194, enricherName=TagEnricher):801697:802770
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (RangerDefaultRequestProcessor.java:142) <== preProcess(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:609) ==> RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0)
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:618) zoneNames:[null]
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (PolicyEngine.java:414) zoneName:[null]
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:684) ==> RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 08:03:27.805 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:710) ==> RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null)
2026-08-12 08:03:27.807 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:819) ==> RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:03:27.808 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:897) <== RangerPolicyEngineImpl.evaluateTagPolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={0} reason={null} additionalInfo={}})
2026-08-12 08:03:27.808 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:520) ==> RangerPolicyRepository.setAuditEnabledFromCache()
2026-08-12 08:03:27.808 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:531) <== RangerPolicyRepository.setAuditEnabledFromCache():false
2026-08-12 08:03:27.809 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 08:03:27.809 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:03:27.810 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):324514:325932
2026-08-12 08:03:27.810 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@12e211aa
2026-08-12 08:03:27.810 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:03:27.811 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):27235:26917
2026-08-12 08:03:27.811 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@9040322
2026-08-12 08:03:27.811 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:03:27.812 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):37147:37992
2026-08-12 08:03:27.812 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCollector@40be43e2
2026-08-12 08:03:27.813 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:03:27.814 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):1299315:1303838
2026-08-12 08:03:27.815 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalSubsetCollector@48294d8d
2026-08-12 08:03:27.815 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[org.apache.ranger.plugin.policyevaluator.RangerAbstractPolicyEvaluator$RangerDefaultPolicyResourceEvaluator@56bc3fac]]
2026-08-12 08:03:27.815 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):6876040:6878429
2026-08-12 08:03:27.815 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=1
2026-08-12 08:03:27.816 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:182) ==> RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 08:03:27 UTC 2026)
2026-08-12 08:03:27.816 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:199) <== RangerDefaultPolicyEvaluator.isApplicable(Wed Aug 12 08:03:27 UTC 2026) : true
2026-08-12 08:03:27.816 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:208) ==> RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={-1} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.817 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:601) ==> RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:27.817 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:744) ==> RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } })
2026-08-12 08:03:27.818 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:244) ==> getResourceHierarchies(policyType=0, keys=database,table)
2026-08-12 08:03:27.818 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:27.818 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:27.819 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:27.819 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): true
2026-08-12 08:03:27.819 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:267) ==> hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table)
2026-08-12 08:03:27.819 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:287) <== hierarchyHasAllResources(hierarchy=RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, resourceNames=database,table): false
2026-08-12 08:03:27.820 [DEBUG - pool-4-thread-1] (RangerServiceDefHelper.java:260) <== getResourceHierarchies(policyType=0, keys=database,table) : [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }],[RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={3} name={column} type={string} level={30} parent={table} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Column} description={Column} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:27.820 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:687) ==> isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} })
2026-08-12 08:03:27.820 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:713) <== isHierarchyValidForResources(RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} },RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }) : true
2026-08-12 08:03:27.820 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:772) <== RangerDefaultPolicyResourceMatcher.getMatchingHierarchy(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }): [RangerResourceDef={itemId={1} name={database} type={string} level={10} parent={null} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Database} description={Database} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }, RangerResourceDef={itemId={2} name={table} type={string} level={20} parent={database} mandatory={true} lookupSupported={true} recursiveSupported={false} excludesSupported={true} matcher={org.apache.ranger.plugin.resourcematcher.RangerDefaultResourceMatcher} matcherOptions={{wildCard=true, ignoreCase=true}} validationRegEx={null} validationMessage={null} uiHint={null} label={Table} description={Table} rbKeyLabel={null} rbKeyDescription={null} rbKeyValidationMessage={null} accessTypeRestrictions={[]} isValidLeaf={true} }]
2026-08-12 08:03:27.820 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:27.821 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:27.821 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(db): false
2026-08-12 08:03:27.821 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(db, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:40) ==> RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:70) ==> RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null})
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerAbstractResourceMatcher.java:313) isAllValuesRequested(table): false
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:121) <== RangerDefaultResourceMatcher.getMatchType(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerDefaultResourceMatcher.java:61) <== RangerDefaultResourceMatcher.isMatch(table, {token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): true
2026-08-12 08:03:27.822 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerDefaultPolicyResourceMatcher.getMatchType():4937530:4938039
2026-08-12 08:03:27.823 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyResourceMatcher.java:679) <== RangerDefaultPolicyResourceMatcher.getMatchType(RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }{token:USER=user, _REQUEST=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, ISREQUESTPREPROCESSED=true, RESOURCE_ZONE_NAMES=null}): SELF
2026-08-12 08:03:27.823 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1457) ==> RangerDefaultPolicyEvaluator.matchPolicyCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } })
2026-08-12 08:03:27.823 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1497) <== RangerDefaultPolicyEvaluator.matchCustomConditions(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }): true
2026-08-12 08:03:27.823 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:803) ==> RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 08:03:27.823 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:814) Checking for accessType:[all]
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21)
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21): null
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1381) ==> RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21)
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:77) ==> RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21)
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:159) ==> RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21)
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:129) ==> RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null)
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:151) <== RangerDefaultPolicyItemEvaluator.matchUserGroup(RangerPolicyItem={accessTypes={RangerPolicyItemAccess={type={metadata} isAllowed={true} }} users={user } groups={} roles={} conditions={} delegateAdmin={false} }, user, [], null, null): true
2026-08-12 08:03:27.824 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:179) <== RangerDefaultPolicyItemEvaluator.matchUserGroupAndOwner(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21): true
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyItemEvaluator.isMatch(resource=db/table):462462:462228
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyItemEvaluator.java:120) <== RangerDefaultPolicyItemEvaluator.isMatch(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21): false
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:1411) <== RangerDefaultPolicyEvaluator.getMatchingPolicyItem(org.apache.ranger.plugin.policyengine.RangerAccessRequestWrapper@35d16d21): null
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:900) <== RangerDefaultPolicyEvaluator.evaluatePolicyItems(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}, SELF)
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEvaluator.evaluate(requestHashCode=19e01194,policyId=2, policyName=db;table;):8634927:8633552
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerDefaultPolicyEvaluator.java:263) <== RangerDefaultPolicyEvaluator.evaluate(policyId=2, RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ALL_ACCESS_TYPE_RESULTS={{}} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, RangerAccessResult={isAccessDetermined={false} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:539) ==> RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:547) <== RangerPolicyRepository.storeAuditEnabledInCache()
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:811) <== RangerPolicyEngineImpl.evaluatePoliciesForOneAccessTypeNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:702) <== RangerPolicyEngineImpl.evaluatePoliciesNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0, zoneName=null): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:676) <== RangerPolicyEngineImpl.zoneAwareAccessEvaluationWithNoAudit(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType =0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:27.825 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:109) [PERF]:pool-4-thread-1:RangerPolicyEngine.evaluatePolicies(requestHashCode=19e01194_0):23322863:23322524
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:158) <== RangerPolicyEngineImpl.evaluatePolicies(RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, policyType=0): RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:203) ==> RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1081) ==> RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1116) <== RangerPolicyEngineImpl.evaluateTagAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1122) ==> RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:49) ==> RangerPolicyResourceEvaluatorsRetriever.getEvaluators({database=db, table=table})
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(db, null)
2026-08-12 08:03:27.826 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=db):44312:44767
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(db, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@1e6e9c2c
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:629) ==> RangerResourceTrie.traverse(table, null)
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerResourceTrie.traverse(resource=table):15623:15965
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerResourceTrie.java:720) <== RangerResourceTrie.traverse(table, null): evaluators=org.apache.ranger.plugin.policyengine.RangerResourceTrie$EvalCountCollector@269afe00
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerResourceEvaluatorsRetriever.java:126) <== RangerResourceEvaluatorsRetriever.getEvaluators({database=db, table=table}) : evaluator:[[]]
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerPerfTracer.java:113) [PERF]:pool-4-thread-1:RangerPolicyRepository.getLikelyMatchEvaluators(resource=db/table):1050850:1052077
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerPolicyRepository.java:755) <== RangerPolicyRepository.getLikelyMatchPolicyEvaluators(db/table): evaluatorCount=0
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:1147) <== RangerPolicyEngineImpl.evaluateResourceAuditPolicies(request=RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }, result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={false} isAudited={false} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): ret=false
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerPolicyEngineImpl.java:239) <== RangerPolicyEngineImpl.evaluateAuditPolicies(result=RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:73) ==> RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.827 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:105) ==> RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={null} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.828 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:296) generateNextAuditEventId(): 37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0
2026-08-12 08:03:27.828 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:151) <== RangerDefaultAuditHandler.getAuthzEvents(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}): AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:03:27 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null}
2026-08-12 08:03:27.828 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:190) ==> RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:03:27 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0;seq_num=0;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 08:03:27.828 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:203) <== RangerDefaultAuditHandler.logAuthzAudit(AuthzAuditEvent{repositoryType=105;repositoryName=kudu;user=user;eventTime=Wed Aug 12 08:03:27 UTC 2026;accessType=all;resourcePath=db/table;resourceType=table;action=all;accessResult=0;agentId=kudu;policyId=-1;resultReason=null;aclEnforcer=ranger-acl;sessionId=null;clientType=null;clientIP=null;requestData=null;agentHostname=dist-test-slave-w206;logType=RangerAudit;eventId=37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0;seq_num=1;event_count=1;event_dur_ms=0;tags=[];clusterName=Cluster 1;zoneName=null;policyVersion=null;additionalInfo=null})
2026-08-12 08:03:27.828 [DEBUG - pool-4-thread-1] (RangerDefaultAuditHandler.java:81) <== RangerDefaultAuditHandler.processResult(RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}})
2026-08-12 08:03:27.829 [DEBUG - pool-4-thread-1] (RangerKuduAuthorizer.java:192) RangerAccessRequest [RangerAccessRequestImpl={resource={RangerResourceImpl={ownerUser={null} elements={database=db; table=table; } }} accessType={all} user={user} userGroups={} userRoles={} accessTime={null} clientIPAddress={null} forwardedAddresses={} remoteIPAddress={null} clientType={null} action={all} requestData={null} sessionId={null} resourceMatchingScope={SELF} resourceElementMatchingScopes={{}} clusterName={Cluster 1} clusterType={} context={ISANYACCESS={null} token:USER={user} ISREQUESTPREPROCESSED={true} RESOURCE_ZONE_NAMES={null} } }] receives result [RangerAccessResult={isAccessDetermined={true} isAllowed={false} isAuditedDetermined={true} isAudited={true} auditLogId={37021677-7f4c-48ab-bc6b-1d60aa2d1d86-0} policyType={0} policyId={-1} zoneName={null} auditPolicyId={2} policyVersion={null} evaluatedPoliciesCount={1} reason={null} additionalInfo={}}]
2026-08-12 08:03:27.837 [DEBUG - pool-4-thread-1] (QueueUtil.java:56) Message: org.apache.kudu.subprocess.OutboundResponse@4c299cb3 has been put on the queue
2026-08-12 08:03:27.837 [DEBUG - pool-5-thread-1] (QueueUtil.java:41) Message: org.apache.kudu.subprocess.OutboundResponse@4c299cb3 has been taken from the queue
I20260812 08:03:27.857038 14202 server.cc:273] Received an EOF from the subprocess
W20260812 08:03:27.857584 14173 server.cc:408] The subprocess has exited with status 9
I20260812 08:03:27.863351 14199 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:03:27.863333 14200 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:03:27.863330 14205 server.cc:440] outbound queue shut down: Aborted: 
I20260812 08:03:27.863325 14197 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 08:03:27.864001 12129 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 08:03:27.864488 12129 ranger_client.cc:318] Using overwritten properties file: /tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/log_conf/kudu-ranger-subprocess-log4j2.properties
2026-08-12 08:03:28.830 [INFO - main] (RangerPluginConfig.java:143) PolicyEngineOptions: { evaluatorType: auto, evaluateDelegateAdminOnly: false, disableContextEnrichers: false, disableCustomConditions: false, disableTagPolicyEvaluation: false, disablePolicyRefresher: false, disableTagRetriever: false, disableUserStoreRetriever: false, enableTagEnricherWithLocalRefresher: false, enableUserStoreEnricherWithLocalRefresher: false, disableTrieLookupPrefilter: false, optimizeTrieForRetrieval: false, cacheAuditResult: false, disableRoleResolution: true, optimizeTrieForSpace: false, optimizeTagTrieForRetrieval: false, optimizeTagTrieForSpace: false, enableResourceMatcherReuse: true }
2026-08-12 08:03:28.836 [INFO - main] (RangerBasePlugin.java:99) ranger.plugin.kudu.null_safe.supplier=v2
2026-08-12 08:03:29.035 [INFO - main] (AuditProviderFactory.java:80) AuditProviderFactory: creating..
2026-08-12 08:03:29.036 [INFO - main] (AuditProviderFactory.java:118) AuditProviderFactory: initializing..
2026-08-12 08:03:29.037 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.rest.url=http://127.0.0.1:43197
2026-08-12 08:03:29.037 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.access.cluster.name=Cluster 1
2026-08-12 08:03:29.037 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.service.name=kudu
2026-08-12 08:03:29.038 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.cache.dir=/tmp/dist-test-taskhNgPHb/test-tmp/ranger_client-test.0.RangerClientTestBase.TestLogging.1786521655082539-12129-0/policy-cache
2026-08-12 08:03:29.038 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.source.impl=org.apache.ranger.admin.client.RangerAdminRESTClient
2026-08-12 08:03:29.038 [INFO - main] (AuditProviderFactory.java:150) AUDIT PROPERTY: ranger.plugin.kudu.policy.pollIntervalMs=30000
2026-08-12 08:03:29.038 [INFO - main] (AuditProviderFactory.java:281) No v3 audit configuration found. Trying v2 audit configurations
2026-08-12 08:03:29.040 [INFO - Ranger async Audit cleanup] (AuditProviderFactory.java:501) RangerAsyncAuditCleanup: Waiting to audit cleanup start signal
2026-08-12 08:03:29.110 [INFO - main] (RangerBasePlugin.java:308) Created PolicyRefresher Thread(PolicyRefresher(serviceName=kudu)-19)
2026-08-12 08:03:29.550 [INFO - main] (RangerRolesProvider.java:179) RangerRolesProvider(serviceName=kudu): found updated version. lastKnownRoleVersion=-1; newVersion=1
2026-08-12 08:03:29.707 [INFO - main] (PolicyRefresher.java:315) PolicyRefresher(serviceName=kudu): found updated version. lastKnownVersion=-1; newVersion=3
2026-08-12 08:03:29.725 [INFO - main] (PolicyEngine.java:212) Policy engine will not perform in place update while processing policies.
2026-08-12 08:03:29.759 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:03:29.818 [INFO - main] (ScriptEngineUtil.java:77) createScriptEngine(serviceType=tag): no engine creator found
2026-08-12 08:03:29.818 [WARN - main] (ScriptEngineUtil.java:81) createScriptEngine(serviceType=tag): failed to create script engine
2026-08-12 08:03:29.819 [ERROR - main] (RangerScriptConditionEvaluator.java:78) failed to initialize condition 'accessed-after-expiry': script engine 'JavaScript' was not created
2026-08-12 08:03:29.819 [INFO - main] (RangerPolicyRepository.java:933) This policy engine contains 1 policy evaluators
2026-08-12 08:03:29.826 [INFO - main] (RangerTagEnricher.java:439) Policy-Engine will not use read-write locking to update tags in place when tag-deltas are provided
2026-08-12 08:03:29.827 [INFO - main] (RangerTagEnricher.java:154) Created RangerTagRefresher Thread(RangerTagRefresher(serviceName=kudu)-21)
2026-08-12 08:03:29.871 [INFO - main] (RangerTagEnricher.java:321) Number of duplicate tags removed from the received serviceTags:[0]. Number of tags in the de-duplicated serviceTags :[0].
2026-08-12 08:03:29.872 [INFO - main] (RangerTagEnricher.java:452) There are no tagged resources for service kudu
2026-08-12 08:03:29.872 [INFO - main] (RangerTagEnricher.java:967) RangerTagRefresher(serviceName=kudu).populateTags() - Updated tags-cache to new version of tags, lastKnownVersion=-1; newVersion=1
2026-08-12 08:03:29.877 [INFO - main] (RangerBasePlugin.java:488) Switching policy engine from [-1]
2026-08-12 08:03:29.878 [INFO - main] (RangerBasePlugin.java:490) Switched policy engine to [3]
2026-08-12 08:03:29.929 [INFO - main] (PolicyRefresher.java:503) No files matching '.+json_*' found
2026-08-12 08:03:29.930 [INFO - main] (RangerKuduAuthorizer.java:91) Finished Ranger Kudu plugin initialization
I20260812 08:03:30.105064 14257 server.cc:273] Received an EOF from the subprocess
W20260812 08:03:30.105871 14228 server.cc:408] The subprocess has exited with status 9
I20260812 08:03:30.111471 14258 server.cc:440] outbound queue shut down: Aborted: 
I20260812 08:03:30.111493 14254 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:03:30.111518 14255 server.cc:366] get failed, inbound queue shut down: Aborted: 
I20260812 08:03:30.111493 14256 server.cc:366] get failed, inbound queue shut down: Aborted: 
W20260812 08:03:30.112154 12129 subprocess_protocol.cc:66] error closing read fd: Bad file descriptor
I20260812 08:03:30.112262 12129 mini_ranger.cc:67] Stopping Ranger...
I20260812 08:03:30.499950 12129 mini_ranger.cc:69] Stopped Ranger
2026-08-12 08:03:30.500 UTC [13475] LOG:  received smart shutdown request
2026-08-12 08:03:30.505 UTC [13475] LOG:  background worker "logical replication launcher" (PID 13485) exited with exit code 1
2026-08-12 08:03:30.505 UTC [13479] LOG:  shutting down
2026-08-12 08:03:30.508 UTC [13479] LOG:  checkpoint starting: shutdown immediate
2026-08-12 08:03:31.479 UTC [13479] LOG:  checkpoint complete: wrote 1555 buffers (9.5%); 0 WAL file(s) added, 0 removed, 0 recycled; write=0.030 s, sync=0.931 s, total=0.974 s; sync files=832, longest=0.008 s, average=0.002 s; distance=8448 kB, estimate=8448 kB; lsn=0/1CBAC18, redo lsn=0/1CBAC18
2026-08-12 08:03:31.488 UTC [13475] LOG:  database system is shut down
[       OK ] RangerClientTestBase.TestLogging (58961 ms)
[----------] 1 test from RangerClientTestBase (58961 ms total)

[----------] Global test environment tear-down
[==========] 22 tests from 3 test suites ran. (156502 ms total)
[  PASSED  ] 22 tests.
