问题目前已解决,根据官方的指导,发现新优化器没有开启来,导致脱敏策略不生效
ranger版本2.4.0,脱敏策略已传输到doris,但是我用对应的用户登录doris并没有看到对应字段脱敏,是版本兼容问题?以下是发送到doris的脱敏策略以及explain:
{
"service": "doris",
"name": "masking_user_code",
"policyType": 1,
"policyPriority": 0,
"isAuditEnabled": false,
"resources": {
"column": {
"values": [
"USER_CODE"
],
"isExcludes": false,
"isRecursive": false
},
"database": {
"values": [
"ods_mdm"
],
"isExcludes": false,
"isRecursive": false
},
"catalog": {
"values": [
"internal"
],
"isExcludes": false,
"isRecursive": false
},
"table": {
"values": [
"SM_USER"
],
"isExcludes": false,
"isRecursive": false
}
},
"policyItems": [],
"denyPolicyItems": [],
"allowExceptions": [],
"denyExceptions": [],
"dataMaskPolicyItems": [
{
"dataMaskInfo": {
"dataMaskType": "MASK_HASH"
},
"accesses": [
{
"type": "SELECT",
"isAllowed": true
}
],
"users": [
"ycc1",
"ycc2"
],
"groups": [],
"roles": [],
"conditions": [],
"delegateAdmin": false
}
],
"rowFilterPolicyItems": [],
"serviceType": "doris",
"options": {},
"validitySchedules": [],
"policyLabels": [],
"isDenyAllElse": false,
"id": 11,
"guid": "cf6a84ce-a70b-4070-acad-c193ad2000f3",
"isEnabled": true,
"version": 4
}
PLAN FRAGMENT 0
OUTPUT EXPRS:
`USER_CODE`
PARTITION: UNPARTITIONED
HAS_COLO_PLAN_NODE: false
VRESULT SINK
MYSQL_PROTOCAL
1:VEXCHANGE
offset: 0
PLAN FRAGMENT 1
PARTITION: HASH_PARTITIONED: `ods_mdm`.`SM_USER`.`CUSERID`
HAS_COLO_PLAN_NODE: false
STREAM DATA SINK
EXCHANGE ID: 01
UNPARTITIONED
0:VOlapScanNode
TABLE: ods_mdm.SM_USER(SM_USER), PREAGGREGATION: OFF. Reason: __DORIS_DELETE_SIGN__ is used as conjuncts. No AggregateInfo
PREDICATES: (`ods_mdm`.`SM_USER`.`__DORIS_DELETE_SIGN__` = 0)
partitions=1/1 (SM_USER)
tablets=10/10, tabletList=93206776,93206778,93206780 ...
cardinality=10341, avgRowSize=893.2995, numNodes=8
pushAggOp=NONE