| RANGER-332 |
Ranger Plugin config to support policy manager URLs |
| RANGER-2109 |
Ranger mysql db does not allow creation of many service definitions |
| RANGER-2378 |
KeySecure HSM Integration is not compatible with Java9 |
| RANGER-2483 |
Presto plugin uses /presto/plugins instead of /presto/plugin |
| RANGER-2499 |
Improve bulk create/update policy performance |
| RANGER-2512 |
RangerRolesRESTClient for serving user group roles to the plugins for evaluation |
| RANGER-2526 |
Log does not get generated for "Deny All Other Accesses" toggle button available on Policy page. |
| RANGER-2527 |
UI Improvement for Roles create update and delete log on Audit -> Admin Tab. |
| RANGER-2529 |
Create index on obj_id and obj_class_type column of x_data_hist table |
| RANGER-2530 |
Constant increase in memory usage by ranger-usersync process and eventually going out of memory |
| RANGER-2531 |
Removing a user from a group is not reflected properly in unix based sync. |
| RANGER-2533 |
After setting 'xasecure.audit.is.enabled' to 'false', the audit log is still logged |
| RANGER-2534 |
Official logo for Apache Ranger |
| RANGER-2536 |
Ranger Hive authorizer enhancement to enable Hive policies based on resource owners |
| RANGER-2537 |
Ranger KMS having wrong bit length and version in DB after after export / import within keystore file |
| RANGER-2538 |
Ranger policy import calls via knox trusted proxy failing |
| RANGER-2539 |
Create Default Policies for Hive Databases -default, Information_schema |
| RANGER-2543 |
Delete service def request is failing |
| RANGER-2544 |
Ranger Owner Policy not getting honored for SELECT * queries. |
| RANGER-2546 |
Replace hard-coded 'python' with '$PYTHON_COMMAND_INVOKER' in setup.sh |
| RANGER-2547 |
Good coding practices: minimize use of static/unnecessary class members |
| RANGER-2548 |
Ranger-admin updates to ensure owner information in GrantRevokeData is correctly consumed |
| RANGER-2552 |
Adding a user to a group is resetting the role/permissions of the user |
| RANGER-2553 |
Hive RangerServiceDef isValidLeaf attribute values should not be copied to DataMaskDef and RowFilterDef |
| RANGER-2554 |
Log out message for Ranger needs to be more informative on Knox enabled cluster |
| RANGER-2556 |
RangerHivePlugin Row filtering and Column Masking auditing gives inconsistent audit information |
| RANGER-2559 |
Update Atlas Authorizer with forwardedAddresses and Remote IP to handle request from proxy.. |
| RANGER-2560 |
Solve the problem of the order of the configuration items of the Solr plugin |
| RANGER-2564 |
Avoid recursive audit log in Solr Plugin by user "solr" when plugin is enabled for ranger_audits collection |
| RANGER-2565 |
Remove duplicate error messages when test connection fails |
| RANGER-2567 |
Ranger fails to connect wired Solr |
| RANGER-2568 |
Ranger Hive policy creation page in Ranger Admin UI shows resources as Database,None instead of Database,Table,Column |
| RANGER-2569 |
Policy with isDenyAllElse=true denies request to check if any access is allowed |
| RANGER-2573 |
Ranger hbase policy not taking effect if column-family name is given in policy |
| RANGER-2574 |
Ranger Import of fails if policy type is not passed |
| RANGER-2577 |
Missing one dependency jar file during packaging for Ranger Ozone plugin. |
| RANGER-2580 |
RangerPolicy.getServiceType API should return name of the service-type |
| RANGER-2581 |
Ranger solr plugin fails to connect to SSL enabled Ranger |
| RANGER-2582 |
Policy history details popup not getting populated properly. |
| RANGER-2583 |
Upgrade jackson-databind |
| RANGER-2585 |
Ranger audits for hive role commands show user as "hive" instead of the effective user |
| RANGER-2586 |
Ranger KMS start fails with NoClassDefFoundError |
| RANGER-2597 |
Allow auditor role user to get details of services and policies from public API |
| RANGER-2600 |
Ranger Login Sessions audits always show "Login Type" as "Username/Password" even for kerberos login |
| RANGER-2602 |
Import is failing with "Can not construct instance of java.util.Date from String" error |
| RANGER-2603 |
Delegate Admin processing incorrectly giving policy access to user - due to owner |
| RANGER-2605 |
Update maven version to 3.6.2 |
| RANGER-2606 |
Maven central deployment publishing only the top level ranger artifact |
| RANGER-2610 |
NPE in PolicyRefresher if service-policies in policy-cache contain only service definition |
| RANGER-2612 |
Last updated time of tag based policies under "Plugin Status" tab are not getting updated |
| RANGER-2613 |
Public API for listing roles needs to return a Java list of RangerRole objects |
| RANGER-2614 |
Unable to create service |
| RANGER-2615 |
Unable to create Role |
| RANGER-2616 |
Add reencryptEncryptedKey, batch reencryption interface to KMS and improve logs |
| RANGER-2617 |
Provide descriptive error message when role delete not allowed |
| RANGER-2618 |
Restrict rolename change when a policy/another role with that role exist |
| RANGER-2619 |
Admin Audit Details not displayed for edit role |
| RANGER-2620 |
Create empty Role cache file when no roles are present in ranger yet. |
| RANGER-2622 |
Ranger UI side code improvement. |
| RANGER-2623 |
Add Validations to RoleREST apis |
| RANGER-2624 |
Issue downloading Ranger Roles in non-kerberized cluster |
| RANGER-2626 |
Block unauthenticated access to Ranger REST endpoints in kerberized environment |
| RANGER-2630 |
Ensure that entity deletes are handled even when Atlas sets deleted entity's state as not ACTIVE |
| RANGER-2631 |
Ranger Audit logs for SHOW commands related to ROLE operations in Hive |
| RANGER-2633 |
RangerYarnAuthorizer should get the remoteIPaddress from the accessRequest from YARN |
| RANGER-2635 |
Backport hadoop-kms changes in ranger-kms |
| RANGER-2637 |
RangerTags loading issue when Ranger admin service is not available. |
| RANGER-2638 |
Ranger admin Logging improvement |
| RANGER-2641 |
Upgrade scenario fails in MYSQL DB |
| RANGER-2642 |
Grant/Revoke REST invocations by non-service users should not specify resource owner |
| RANGER-2644 |
Improvement in Ranger encryption algorithm usage. |
| RANGER-2647 |
Show display name instead of name in UI |
| RANGER-2648 |
Provide policy list page url with service name |
| RANGER-2649 |
Unix user doesn't get 'Admin' role when set through assignment rules |
| RANGER-2650 |
Public group should not be given access to all kafka resources in default ranger policies |
| RANGER-2655 |
Ranger UI improvement |
| RANGER-2656 |
RangerHiveAuthorizer filterListCmdObjects failed to filter database / tables when HMS calls the authorizer for filtering |
| RANGER-2659 |
Zone-based policies are not listed for USER_ROLE with delegate admin privilege |
| RANGER-2660 |
Option to create missing users/groups/roles while creating/updating/importing policies |
| RANGER-2661 |
NullPointerException on RangerRolesProvider.loadUserGroupRoles |
| RANGER-2665 |
Policy engine for delegate-admin processing is not built correctly when policy-deltas are enabled and a zone policy is updated |
| RANGER-2667 |
Running the disable-presto-plugin.sh script will always get stuck |
| RANGER-2671 |
Running the setup.sh in usersync a second time will change the permissions and owner of hadoop core-site.xml |
| RANGER-2675 |
Add Logs if keystore is not initialised during Ranger start |
| RANGER-2677 |
Fix corner case of Ranger Audit login going into race condition |
| RANGER-2678 |
RangerUgSyncRESTClient sets password as username for basic auth |
| RANGER-2679 |
upgrade spring framework version to 4.3.23 to be compatible with current spring security version(4.2.13) |
| RANGER-2680 |
Ranger Usersync and Tagsync is not updating session cookie until restart |
| RANGER-2685 |
set_globals.sh will throw an exception "cp ews/logs/* failed" |
| RANGER-2687 |
NoClassDefFoundError when Ranger Knox plugin is enabled |
| RANGER-2688 |
Make cookie name configurable |
| RANGER-2690 |
Default service display name is not getting set for Tag service |
| RANGER-2691 |
Upgrade with MsSQL fails because of invalid syntax |
| RANGER-2692 |
RangerKafkaAuthorizer support for ConsumerGroup resource for authorization |
| RANGER-2694 |
TagSync fails to start due to NoClassDefFoundError |
| RANGER-2696 |
Fix unit test failure in TestPolicyEngine.testValiditySchedulerApplicable |
| RANGER-2698 |
Fix Ranger Unit Test failing in Ranger hive Plugin |
| RANGER-2702 |
Upgrade Kafka Version in Ranger to 2.4 |
| RANGER-2703 |
Grant operation succeeds even though there is no delegate admin permission |
| RANGER-2705 |
Group sync does does not parse DNs properly |
| RANGER-2707 |
ranger.usersync.enabled not respected on initial ugsync startup |
| RANGER-2708 |
Ranger public group check uses wrong comparison for equality |
| RANGER-2714 |
Fix Failing Kylin test cases |
| RANGER-2715 |
"Service display Name" attribute on all tabs in Ranger(UI) |
| RANGER-2717 |
Edit repo/service fails(Knox proxy) |
| RANGER-2718 |
Utility to update user and group names in stored policy json |
| RANGER-2719 |
Fix Ranger Atlas Plugin packaging issue |
| RANGER-2720 |
Search filter not work properly. |
| RANGER-2722 |
policies/hive/for-resource api call is returning deleted policies |
| RANGER-2729 |
RANGER-2660 should creates external users rather internal |
| RANGER-2730 |
Missing JAVA Patch record in the ranger admin x_db_version_h table |
| RANGER-2731 |
BaseDao.batchCreate uses the wrong property |
| RANGER-2735 |
Update Atlas serviceDef for upgrade case of RANGER-2734 |
| RANGER-2743 |
Upgrade Tomcat Version to 7.0.100 |
| RANGER-2747 |
Ranger integration with presto works on "Release 317" but fails on versions later |
| RANGER-2749 |
Ranger depends on commons-lang but doesn't specify it in it's pom |
| RANGER-2750 |
Permission "alter" has to be there for TOPIC and CLUSTER resource in RangerKafkaPlugin ServiceDef |
| RANGER-2752 |
Upgrade from 0.7.0 to master fails due to schema issue |
| RANGER-2755 |
Update Atlas service-def and plugin for changes in ATLAS-3653 |
| RANGER-2756 |
A spelling mistake in RangerHiveAuthorizer |
| RANGER-2757 |
Ranger Knox SSO logout issue |
| RANGER-2761 |
Policy evaluators are not correctly updated when using policy deltas for downloads to plugins |
| RANGER-2762 |
Logout issue when knox-trusted proxy is enabled |
| RANGER-2763 |
Hive SET Role command in Ranger hive plugin |
| RANGER-2764 |
Role API : Duplicate key value violates unique constraint "x_ranger_global_state_uk_state_name" |
| RANGER-2765 |
Correct permissions are not getting loaded for entity-label in Atlas service |
| RANGER-2773 |
Enhanced logging messages for RangerScriptConditionEvaluator class |
| RANGER-2775 |
Pagination not working for role in Ranger admin UI page |
| RANGER-2776 |
Unable to access service through knox, facing NPE when authorization is set to Ranger |
| RANGER-2777 |
Ranger Knox Plugin failed to download Roles |
| RANGER-2781 |
default policy creation fails for policy-items with no users |
| RANGER-2785 |
Ranger Ozone plugin does not include configuration jars |
| RANGER-2786 |
Ranger usersync group modifyTimestamp parsing should be in 24 hours format |
| RANGER-2788 |
Fix schema-registry servicedef with correct values of id and itemIds. |
| RANGER-2789 |
GET API service/xusers/users turns very slow when there are more than 1000 users |
| RANGER-2790 |
Import start and import end are not in sequence |
| RANGER-2793 |
Admin log clogged with a warning |
| RANGER-2794 |
Search is not working in Role page |
| RANGER-2795 |
Update Presto serviceDef for upgrade case of RANGER-2754 |
| RANGER-2797 |
changing error to debug as it does not make impact on transactions |
| RANGER-2800 |
Ranger DB upgrade script for version name change in x_ranger_global_state table |
| RANGER-2801 |
Update apache thrift version in ranger |
| RANGER-2802 |
Java patch J10034 may fail in upgrade case |
| RANGER-2803 |
Modify db_setup.py script to handle pre-created user's tablespace for Oracle |
| RANGER-2804 |
Ranger Ozone plugin unable to write to solr audits in SSL enabled cluster |
| RANGER-2805 |
Create role with non-existing group/user failing due to concurrent threads |
| RANGER-2806 |
RangerScriptConditionEvaluator does not initialize correctly with openJDK 11 |
| RANGER-2807 |
Change audit format for access logs |
| RANGER-2809 |
Solr plugin fails to download policies with authentication error in a secure cluster |
| RANGER-2812 |
Upgrade Nimbus-Jose-JWT and netty versions |
| RANGER-2813 |
[HBase]Not able to pull execute permission given to user from getUserPermissions API in HBase Ranger Coprocessor |
| RANGER-2814 |
RangerServiceResource signature should not include service-specific information |
| RANGER-2815 |
Ranger HDFSAuditDestination flush call should be privileged one |
| RANGER-2817 |
Service configuration update does not cause policies in the service to get downloaded to plugin |
| RANGER-2818 |
[Ozone Ranger Plugin] Init Failed due to CNF JacksonJsonProvider |
| RANGER-2821 |
Update ranger authorizer for Atlas to add admin-purge |
| RANGER-2822 |
Best practices: Refactor embeddedserver code and remove redundant code |
| RANGER-2823 |
RangerResouceTrie.copySubTree() does not set up TrieNode's child nodes correctly |
| RANGER-2824 |
Allow from an override policy having deny-items is ignored |
| RANGER-2828 |
RangerExportPolicy with resource filter fails to fetch policies |
| RANGER-2831 |
presto-server-333 start failed due to NoClassDefFoundError |
| RANGER-2833 |
Enforcing Strict transport security |
| RANGER-2836 |
Make Elasticsearch port and protocol properties configurable |
| RANGER-2838 |
Kafka Testcase failing the build with NoClassDefFoundError |
| RANGER-2839 |
Assorted improvements for debugging and handling of thread terminations, clean-up of unused data, etc. |
| RANGER-2840 |
Create policy with non existing group is failing due to to multiple threads creating same group |
| RANGER-2841 |
Refactor userstore enricher in order to support userstore download without service information |
| RANGER-2844 |
presto-server-333 can not show schemas/tables after integrated with Ranger master branch |
| RANGER-2853 |
"Unauthenticated : Please check the permission in the policy for the user": An NPE in ranger admin when enable kms. |
| RANGER-2855 |
import policy for ranger is not working properly if updateifexist parameter is passed |
| RANGER-2856 |
A policy should be deleted if it has no policyItems |
| RANGER-2858 |
'show databases' gives permission denied error, even though the user has permissions on a few of the databases in security zone policies |
| RANGER-2864 |
Group creation is failing during import policy |
| RANGER-2869 |
Ranger audit module to provide an option to generate a GUID for each audit log |
| RANGER-2872 |
The Ranger authentication group permission of the ES does not take effect. |
| RANGER-2874 |
Tag policies not getting enforced for ADLS path |
| RANGER-2875 |
Security zone policy not getting enforced correctly for some servicedef |
| RANGER-2876 |
allow-exception policy-items are not correctly handled when access-type is '_any' |
| RANGER-2877 |
ElasticSearch-Plugin throws NullPointException when the type of request is 'PutMappingRequest' |
| RANGER-2881 |
Delegate Admin user having role "user" able to create policy which has non-existing users/groups |
| RANGER-2885 |
Add missing PermType Java codes for new versions of Kafka |
| RANGER-2886 |
Exporting tag policies fails when 'polResource' query parameter is used |
| RANGER-2893 |
show grant on database xxx will fail in ranger hive plugin |
| RANGER-2903 |
Remove elasticsearch audit's is_enabled property from config |
| RANGER-2905 |
Failed to log Audit event in Elasticsearch |
| RANGER-2911 |
ES plugin missing implemention for some ES request |
| RANGER-2912 |
ranger and plugins will throw GSSAPI error when write audit log to ElasticSearch when cluster running on none security mode |
| RANGER-2913 |
Import policy fails when policy with same name present in multiple service |
| RANGER-2914 |
Invalid obj name in DB script for MS-SQL |
| RANGER-2915 |
Support tag based policies for Ozone resources in Ranger |
| RANGER-2917 |
Avoid recursive audit log in ES Plugin by user elasticsearch when plugin is enabled for ranger_audits index |
| RANGER-2918 |
Ranger Audit for HBase does not capture predicates |
| RANGER-2919 |
Source policies gets deleted after importing policy with deleteifexists parameter |
| RANGER-2921 |
Regression: When all resource and tag(if applicable) policies are deleted then plugin continues to use old set of policies |
| RANGER-2922 |
Query info not included for solr query audits in Ranger |
| RANGER-2930 |
Change atlas version to 2.1.0 for Ranger 2.1.0 release |
| RANGER-2931 |
Fix PMD Error of RANGER-2922 |
| RANGER-2938 |
[Ranger Audits] Zone Name field is not populated in case of Deny Operations via Security Zones |
| RANGER-2944 |
Presto plugin lookupResource throws NPE if not set service password |
| RANGER-2945 |
Need to check if RANGER_LOGIN_PASSWORD exists in HadoopConfigHolder |
| RANGER-2947 |
[Ranger][Policy Import] Usage of serviceType config while importing ranger policy for any service |
| RANGER-2958 |
Unable to run build using docker script - build_ranger_using_docker.sh |
| RANGER-2968 |
HDFS plugin package - missing library |
| RANGER-2978 |
Ranger upgrade fails due to missing DB function. |
| RANGER-2979 |
Test failure due to NPE |