This is an automated email from the ASF dual-hosted git repository.

maheshbandal pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/master by this push:
     new 668b80b85 RANGER-5410: Rename should not be allowed on a table having 
row filter or column masking policy
668b80b85 is described below

commit 668b80b856430fc07b661da5f5b9025fe8086765
Author: Mahesh Bandal <[email protected]>
AuthorDate: Thu Nov 27 11:26:31 2025 +0530

    RANGER-5410: Rename should not be allowed on a table having row filter or 
column masking policy
---
 .../ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
 
b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
index d5176ff97..d8a49414a 100644
--- 
a/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
+++ 
b/hive-agent/src/main/java/org/apache/ranger/authorization/hive/authorizer/RangerHiveAuthorizer.java
@@ -2566,7 +2566,7 @@ private boolean 
isBlockAccessIfRowfilterColumnMaskSpecified(HiveOperationType hi
             ret = hiveOpType == HiveOperationType.EXPORT;
 
             if (!ret) {
-                if (request.getHiveAccessType() == HiveAccessType.UPDATE && 
RangerHivePlugin.blockUpdateIfRowfilterColumnMaskSpecified) {
+                if ((request.getHiveAccessType() == HiveAccessType.UPDATE || 
request.getHiveAccessType() == HiveAccessType.ALTER) && 
RangerHivePlugin.blockUpdateIfRowfilterColumnMaskSpecified) {
                     ret = true;
                 }
             }

Reply via email to