Data Set Security

This section describes options for securing your data sets.

Sentry
Sentry is a Hadoop component that provides role-based authorization in a Hadoop cluster. Among other things, it can be used to restrict access to Hive data at a granular level.
HDFS data at rest encryption
HDFS data at rest encryption allows HDFS data to be stored in encrypted directories called encryption zones. All files within an encryption zone are transparently encrypted and decrypted on the client side, meaning decrypted data is never stored in HDFS.
Data set whitelists and blacklists
BDD whitelists and blacklists control which Hive tables are processed by the DP CLI. Whitelists specify tables that should be processed and blacklists specify tables that should be ignored. Only tables that have been processed are available to BDD and its users.
Studio user roles
Studio users are assigned application-wide roles that determine which parts of the application they can access and the data they can view. Studio administrators can assign and modify user roles.
Project roles
In Studio, project roles determine which users can access project data and configuration.
Project types
In Studio, a project's type determines which users can access it.
Data set permissions
Default access to data sets in Studio is determined by how they're created.
Custom transform scripts and visualizations
Studio enables users to create custom visualizations and transform scripts, which require them to do some coding. In these cases, special security measures have been implemented to prevent users from accessing sensitive data.
Security Manager
The Security Manager is a Studio feature that filters the data that users can see in Studio. If you want to provide extra security for Studio, you can use the Component SDK to create a custom Security Manager to restrict access to specific data.