Issue with conditions in policy

Hi @FCB developer ,

thank you for your question. 

Policies are disabled by default from version 13.3.0 as the potential performance impact on the application outweighs current utilization of the feature - link to documentation. The feature is possible to turn on but it must be taken into consideration it might have a significant performance impact.

Please let me know if you would like to know more about turning on this feature.

Hi, @Adela Sotonova !
Can you please tell us what policies actually allow? What do they allow to limit for users?

Hello @FCB developer , policies, if turned on, will “mask” (hide) the data (columns) for users in both the Access tab as well as the Profiling results. The data, that are hidden like this, are determined based on the Policy rule. The rule is for example saying hide all data with the business terms “Personal Data” and “Email” applied and hide them for the roles MMM-metadata-manager and user jane.smith. These users then cannot see all of those data, just blank fields instead. All the other users, however, can still see them.

As Adel already mentioned, the feature is disabled by default because of the serious performance implications.

Hello @anna.spakova ,
Thanks for the detailed answer!
Can you please tell me, for the "Data" tab in the data catalog element where 50 rows are displayed as an example, can it be masked?

@FCB developer right now, without the Policies, the options are as follows:

• configure the permissions JSON that way, that the content in the Data tab would be hidden for the VIewers. The operation responsible for it is "name": "catalog:preview". Alternatively, you can configure the permissions JSON even more and create new operation set, e.g. Metadata Viewer, that would have the limited access to the Data tab, but Viewer could still see them. https://support.ataccama.com/home/docs/aip/latest/development-guides/one-development-guide/managing-identity-and-access/managing-permissions-of-users-and-roles/configuring-custom-permissions
• Create a duplicate catalog item without the sensitive columns (using either SQL Catalog Item or Virtual Catalog Item).

Hi, @anna.spakova 
Thanks for the detailed answer! It became much clearer how to use policies and permissions.json.

@Adela Sotonova , Can you please tell me how to enable Policies?