This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a change to branch
dependabot/maven/mysql-mysql-connector-java-8.0.28
in repository https://gitbox.apache.org/repos/asf/ranger.git
discard 3d8d91482 Bump mysql-connector-java from 5.1.31 to 8.0.28
add 057bba4f5 RANGER-3822: redact password in RangerService.toString()
add f59f3a7e4 RANGER-3794: Improve performance of delete users/groups
utility
add 0ec279474 RANGER-3809: Dummy impl for
RangerKafkaAuthorizer#authorizeByResourceType
add 3ce8112e7 RANGER-3387: Added extra validation for handling PUT/POST
requests coming from KNOX proxy with different CSRF header than the one set by
the client
add e10a247cc RANGER-3825: Ranger internal user is unable to change his
password after the upgrade
add c51fedfba RANGER-3813: Fix ConcurrentModificationException in
UnixUserGroupBuilder
add 79e96286b RANGER-3809: Handling authorizeByResourceType call in Kafka
Ranger Plugin shim
add 8875a7eab RANGER-3840: SHOW DATABASES doesn't list databases owned by
the user
add 3bd591fbd RANGER-3829: IncrementalSync value to be read from config
(FIX)
add 76349ecae RANGER-3790: Ranger tagsync module should not depend on
kafka server
add 1199de317 RANGER-3846: Ranger DB patch 058 failing when multiple
policies having same resourceSignature
add a9fdb1beb RANGER-3824: Tag resource API error message is not proper
for duplicate resource & not able to update resource resource
add 3dc951065 RANGER-3849 Unit test cases for ServiceREST.java to increase
coverage
add 348ae02a4 RANGER-3834 Unit test cases for RoleREST.java. Added getter
for RangerDaoManager in RoleRefUpdater instead of accessing the member variable
directly
add a064f8d91 RANGER-3848: Enable auto-renew for kerberos in Java client
add 026be3eeb RANGER-3828: plugin-nestedstructure with tagsync
AtlasNestedStructureResourceMapper class
add 4ec6c5599 RANGER-3816: getResourceACLs() updated to handle macros in
resource values
add c4ee5a860 RANGER-3853: Persist db updates immediately using
Transaction Management
add 1671b142a RANGER-3854: Persist db updates immediately using
Transaction Management in J10056
add 8dd9cae37 RANGER-3857: Fix Ranger java patch J10055 performance issue
add d9f825dab RANGER-3856: Ranger admin client updated with option to work
with non-kerberized server
add eaeaeb4ed RANGER-3837: Changed ensureAdminAccess and
getRoleIfAccessible so that both admins and service admins can now
get,create,edit,delete roles
add 9e11e9ec9 RANGER-3861: Allow service creator user to create
users/groups/roles in default policies
add dc609a2e2 RANGER-3864: Spurious creation of service-resource objects
in Ranger
add 4ea5a785f RANGER-3865: support user attribute references in masking
expressions
add e7cd999f0 RANGER-3858: On dev-support, service creation and
ranger-kafka-plugin setup are failed
add df608eebe RANGER-3898:Bug in Ranger Roles Cache
add df35a705f RANGER-3808: Ranger Rest API
/roles/roles/{id}/addUsersAndGroups thorws 404 erro
add 85a8663ac RANGER-3897: RangerUserStore cache improvement
add d80f8f9e6 RANGER-3080: service-admin/zone-admin users should be
allowed to create/update policies with resource-excludes flag
add bcba8b798 RANGER-3911: NPE fix in RangerDefaultPolicyEvaluator
add ab7e6e254 RANGER-3885: removed unimplemented REST API /users/firstnames
add cff64a580 RANGER-3633: removed eclipse .project file from git
add 3444c6625 RANGER-3914: Change sync_source column's datatype from
varchar to text
add c3f1c4a6a RANGER-3852: performance and scalability analyzer tool for
apache ranger
add 32a4b1a76 RANGER-3913: Reduce number of calls to
FilenameUtils.wildcardMatch() when evaluating resource matching
add cb721160e RANGER-3847: REST APIs error handling updated to return
appropriate HTTP status for Json errors
add 6c8a14288 RANGER-3804: Update policy UI to support multiple
resource-sets
add 0095b1c84 RANGER-3907:Skip auditing of operation like monitorHealth in
HDFS Ranger Plugin audit handler
add c4517287c RANGER-3918:Namespace policy that is created in Ranger by
HBase Grant command not getting honored
add 495d72003 RANGER-3934: improve tag cache handling to reduce resource
usage
add 2b4635d07 RANGER-3804: Update policy UI to support multiple
resource-sets: fix build issue - #2
add ce033d82f RANGER-3901 : Upgrade jquery-ui to 1.13.2
add 1a31c3010 Ranger-3912: Ranger Policy report for a given user should
fetch policies maintained for roles belonging to that user and groups of the
user
add 2c8ff5770 RANGER-3775: fixed incorrect update to logback.xml by
RANGER-3704
add be4025ff0 RANGER-3796: updated policy change logs to handle
additionalResources field - #3
add 2e7573773 RANGER-3941: optimize cache refresh in RangerUserStoreCache
add b9f3abffa RANGER-3940: updates to enable use of includes() and
intersects() in condition expressions
add f0ef01899 RANGER-3888: Validity Scheduler, recurrence schedule: When
there is no interval but schedule is specified, policy is created RANGER-3887:
Validity Scheduler, recurrence schedule: Ranger accepts invalidstart/endTime
RANGER-3886: Validity Scheduler, recurrence schedule: Ranger reports
overlapping ranges though there are no overlapping values RANGER-3931: Validity
Scheduler, recurrence schedule: When schedule Year is not in the time interval
specified within startTime, end [...]
add 0399fe98d RANGER-3916 : Ranger UI fails to open when the Ranger admin
domain name includes service keyword in it.
add 9bd76099c RANGER-3932 : Modifying the security zone name should also
change the resourcesignature of their policy.
add 017c74027 RANGER-3900: performance improvement in roles deletion
add d234db259 RANGER-3902: dbLoadTime is not added correctly in
RangerServicePoliciesCache
add 86a8a28b2 RANGER-3940: build fix: removed unused import - #2
add 62cbf40a6 RANGER-3500: updated policy retrieval to support sortBy and
sortOrder
add 706bcd4ee RANGER-3941: updated unit tests for updates/optimizations
introduced in earlier commit - #2
add ac079b44b RANGER-3946: updated YARN plugin packaging to include
commons-lang library
add 5340a1b8d RANGER-2737: fixed user retrieval API to populate missing
details
add 50cd652b1 RANGER-3951: optimized memory used for tags in plugins and
server
add 31f7be80b RANGER-2928: removed support for application/xml in all
Ranger REST APIs
add cd55d2105 RANGER-3948: updated Json annotation to skip serialization
of empty values
add e35fe23f7 RANGER-3953: fix potential NPE during policy-engine
initialization
add b1920deea RANGER-3955: eliminate duplicate strings in RangerUserStore,
ServiceTags, ServicePolicies
add b6e432463 RANGER-3888: fixed unit tests for earlier commit in
RANGER-3888 - #2
add 24ea37c29 RANGER-3920: when sync'ing users from LDAP, intermittent
User/Group/UserGroup membership is missing
add 8b743bcbd RANGER-3498: log4j dependency removed from nestedstructure
plugin; agents-cred dependency updated to replace logback with slf4j-api - #4
add fa71315bc RANGER-3956: updated commons-text library version to 1.10.0
add f8eff7838 RANGER-3534: improvements in RangerHiveAuditHandler
add 30106ed98 RANGER-3959: restrict scripts from accessing Java classes
and methods
add c3e2324dd RANGER-3787: non-daemon threads started by
ElasticSearchAuditDestination cause Spark application hanging
add 73f1a3b22 RANGER-3960: Upgrade spring-security version to 5.7.5
add 161d92475 RANGER-3959: restrict scripts from accessing some built-in
methods - #2
add d35b2cc99 RANGER-3966: fix to use user-roles from request context
consitently
add 56b241b14 RANGER-3961: AuditFileSpool logs out all events that were
not audited successfully
add 1620539bd RANGER-3962: Add preload directive to HSTS header
add 3efdceb95 RANGER-3969: Remove os.path.join causing incorrect windows
path
add ed8edb334 RANGER-3969: Python client updated with fix to use correct
path seperator
add 128afbbff RANGER-3821:Update commons-codec version to 1.15
add 70b03177a RANGER-3972:Upgrade jettison version to 1.5.2
add 738f5011f RANGER-3974:Upgrade jackson version to 2.14.0
add 618fe7ccb RANGER-3975:Upgrade netty-all version to 4.1.85.Final
add 920801572 Bump mysql-connector-java from 5.1.31 to 8.0.28
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (3d8d91482)
\
N -- N -- N
refs/heads/dependabot/maven/mysql-mysql-connector-java-8.0.28 (920801572)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.project | 17 -
agents-audit/pom.xml | 9 +
.../destination/ElasticSearchAuditDestination.java | 28 +-
.../org/apache/ranger/audit/provider/MiscUtil.java | 39 +
.../apache/ranger/audit/queue/AuditFileSpool.java | 2 +-
agents-common/pom.xml | 9 +
.../admin/client/AbstractRangerAdminClient.java | 16 +
.../ranger/admin/client/RangerAdminRESTClient.java | 34 +-
.../admin/client/datatype/GrantRevokeData.java | 4 +-
.../ranger/admin/client/datatype/RESTResponse.java | 4 +-
.../hadoop/constants/RangerHadoopConstants.java | 1 +
.../ranger/authorization/utils/StringUtil.java | 173 ++++
.../RangerScriptConditionEvaluator.java | 2 +-
.../contextenricher/RangerAdminTagRetriever.java | 16 +-
.../plugin/contextenricher/RangerTagEnricher.java | 14 +-
.../plugin/contextenricher/RangerTagForEval.java | 8 +-
.../contextenricher/RangerUserStoreEnricher.java | 9 +-
.../apache/ranger/plugin/model/AuditFilter.java | 4 +-
.../org/apache/ranger/plugin/model/GroupInfo.java | 4 +-
.../ranger/plugin/model/RangerBaseModelObject.java | 9 +-
.../apache/ranger/plugin/model/RangerMetrics.java | 2 +-
.../ranger/plugin/model/RangerPluginInfo.java | 2 +-
.../apache/ranger/plugin/model/RangerPolicy.java | 118 ++-
.../ranger/plugin/model/RangerPolicyDelta.java | 10 +-
.../org/apache/ranger/plugin/model/RangerRole.java | 6 +-
.../ranger/plugin/model/RangerSecurityZone.java | 4 +-
.../plugin/model/RangerSecurityZoneHeaderInfo.java | 4 +-
.../apache/ranger/plugin/model/RangerService.java | 11 +-
.../ranger/plugin/model/RangerServiceDef.java | 194 ++++-
.../plugin/model/RangerServiceHeaderInfo.java | 4 +-
.../ranger/plugin/model/RangerServiceResource.java | 15 +-
.../ranger/plugin/model/RangerServiceTags.java | 2 +-
.../org/apache/ranger/plugin/model/RangerTag.java | 50 +-
.../apache/ranger/plugin/model/RangerTagDef.java | 71 +-
.../ranger/plugin/model/RangerTagResourceMap.java | 2 +-
.../plugin/model/RangerValidityRecurrence.java | 6 +-
.../plugin/model/RangerValiditySchedule.java | 2 +-
.../ranger/plugin/model/ServiceDeleteResponse.java | 2 +-
.../org/apache/ranger/plugin/model/UserInfo.java | 4 +-
.../RangerValidityScheduleValidator.java | 64 +-
.../policyengine/RangerPolicyEngineImpl.java | 59 +-
.../policyengine/RangerPolicyRepository.java | 2 +-
.../policyengine/RangerRequestScriptEvaluator.java | 51 +-
.../plugin/policyengine/RangerResourceACLs.java | 13 +-
.../RangerAbstractPolicyEvaluator.java | 106 ++-
.../RangerDefaultDataMaskPolicyItemEvaluator.java | 37 +-
.../RangerDefaultPolicyEvaluator.java | 4 +-
.../RangerDefaultPolicyItemEvaluator.java | 2 +-
.../policyevaluator/RangerPolicyEvaluator.java | 5 +-
.../RangerDefaultPolicyResourceMatcher.java | 4 +
.../resourcematcher/RangerPathResourceMatcher.java | 62 +-
.../resourcematcher/RangerURLResourceMatcher.java | 15 +-
.../ranger/plugin/service/RangerBasePlugin.java | 6 +
.../plugin/service/ResourceLookupContext.java | 2 +-
.../ranger/plugin/store/AbstractPredicateUtil.java | 20 +-
.../plugin/store/EmbeddedServiceDefsUtil.java | 7 +-
.../apache/ranger/plugin/store/ServiceStore.java | 2 +
.../ranger/plugin/store/StoredServiceResource.java | 4 +-
.../apache/ranger/plugin/store/TagValidator.java | 1 +
.../ranger/plugin/util/GrantRevokeRequest.java | 2 +-
.../ranger/plugin/util/GrantRevokeRoleRequest.java | 2 +-
.../apache/ranger/plugin/util/MacroProcessor.java | 43 +-
.../plugin/util/RangerAccessRequestUtil.java | 14 +
.../ranger/plugin/util/RangerCommonConstants.java | 33 +-
.../plugin/util/RangerRequestExprResolver.java | 103 ++-
.../plugin/util/RangerRequestedResources.java | 2 +-
.../org/apache/ranger/plugin/util/RangerRoles.java | 2 +-
.../plugin/util/RangerServiceTagsDeltaUtil.java | 250 ++++--
.../apache/ranger/plugin/util/RangerUserStore.java | 37 +-
.../ranger/plugin/util/ScriptEngineUtil.java | 92 +-
.../apache/ranger/plugin/util/SearchFilter.java | 15 +-
.../apache/ranger/plugin/util/ServicePolicies.java | 84 +-
.../org/apache/ranger/plugin/util/ServiceTags.java | 59 +-
.../ranger-servicedef-nestedstructure.json | 186 ++++
.../ranger/authorization/utils/TestStringUtil.java | 219 +++++
.../RangerRequestScriptEvaluatorTest.java | 111 ++-
.../ranger/plugin/model/TestRangerService.java | 48 ++
.../ranger/plugin/policyengine/TestPolicyACLs.java | 6 +-
.../plugin/policyengine/TestPolicyEngine.java | 31 +-
.../policyengine/test_aclprovider_default.json | 32 +
...gine_hive_mask_filter_with_req_expressions.json | 109 +++
.../test-validity-schedules-invalid.json | 204 +++++
agents-cred/pom.xml | 15 +-
credentialbuilder/pom.xml | 9 +
.../scripts/create-ranger-services.py | 4 +-
.../ranger-docker/scripts/ranger-kafka-setup.sh | 1 +
dev-support/ranger-pmd-ruleset.xml | 1 +
distro/src/main/assembly/plugin-yarn.xml | 1 +
distro/src/main/assembly/tagsync.xml | 1 -
hbase-agent/pom.xml | 19 +
.../authorization/hbase/RangerHBaseResource.java | 5 +-
hdfs-agent/pom.xml | 19 +
.../authorization/hadoop/RangerHdfsAuthorizer.java | 6 +-
.../hive/authorizer/RangerHiveAuditHandler.java | 112 ++-
.../hive/authorizer/RangerHiveAuthorizer.java | 13 +-
.../hive/authorizer/RangerHivePolicyProvider.java | 6 +-
.../main/java/org/apache/ranger/RangerClient.java | 24 +-
intg/src/main/python/README.md | 2 +-
.../python/apache_ranger/client/ranger_client.py | 6 +-
intg/src/main/python/setup.py | 2 +-
kms/pom.xml | 19 +
.../hadoop/crypto/key/kms/server/KMSMDCFilter.java | 51 +-
knox-agent/pom.xml | 14 +
.../admin/client/RangerAdminJersey2RESTClient.java | 14 +-
.../kafka/authorizer/RangerKafkaAuthorizer.java | 14 +
.../authorizer/KafkaRangerAuthorizerGSSTest.java | 79 +-
.../KafkaRangerAuthorizerSASLSSLTest.java | 96 ++-
.../authorizer/KafkaRangerAuthorizerTest.java | 131 ++-
.../authorizer/KafkaRangerTopicCreationTest.java | 52 +-
.../kafka/authorizer/KafkaTestUtils.java | 5 +-
.../src/test/resources/kafka-policies.json | 40 +
{docs => plugin-nestedstructure}/.gitignore | 0
{docs => plugin-nestedstructure}/LICENSE | 0
plugin-nestedstructure/NOTICE | 18 +
plugin-nestedstructure/README.md | 168 ++++
plugin-nestedstructure/conf/log4j.properties | 37 +
.../conf/ranger-nestedstructure-audit.xml | 39 +
.../conf/ranger-nestedstructure-policymgr-ssl.xml | 50 ++
.../conf/ranger-nestedstructure-security.xml | 62 ++
plugin-nestedstructure/pom.xml | 106 +++
.../nestedstructure/authorizer/AccessResult.java | 54 ++
.../nestedstructure/authorizer/DataMasker.java | 283 +++++++
.../authorizer/FieldLevelAccess.java | 62 ++
.../authorizer/JsonManipulator.java | 168 ++++
.../nestedstructure/authorizer/MaskTypes.java | 54 ++
.../authorizer/MaskingException.java | 32 +
.../authorizer/NestedStructureAccessType.java | 45 +
.../authorizer/NestedStructureAuditHandler.java | 95 +++
.../authorizer/NestedStructureAuthorizer.java | 285 +++++++
.../authorizer/NestedStructureResource.java | 46 +
.../authorizer/NestedStructureService.java | 37 +
.../authorizer/RecordFilterJavaScript.java | 110 +++
.../nestedstructure/authorizer/ExampleClient.java | 47 ++
.../nestedstructure/authorizer/TestDataMasker.java | 266 ++++++
.../authorizer/TestJsonManipulator.java | 363 ++++++++
.../authorizer/TestNestedStructureAuthorizer.java | 105 +++
.../authorizer/TestRecordFilterJavaScript.java | 66 ++
.../test/resources/servicedef-nestedstructure.json | 186 ++++
.../src/test/resources/test_customer_records.json | 164 ++++
plugin-schema-registry/pom.xml | 10 +
plugin-solr/pom.xml | 9 +
pom.xml | 35 +-
ranger-authn/pom.xml | 10 +
ranger-examples/plugin-sampleapp/pom.xml | 9 +
ranger-hdfs-plugin-shim/pom.xml | 9 +
.../kafka/authorizer/RangerKafkaAuthorizer.java | 44 +-
.../classloader/RangerPluginClassLoader.java | 40 +-
ranger-solr-plugin-shim/pom.xml | 9 +
ranger-storm-plugin-shim/pom.xml | 9 +
ranger-tools/src/main/python/README.md | 95 +++
ranger-tools/src/main/python/config/README.md | 94 +++
ranger-tools/src/main/python/outputs/README.md | 27 +
.../src/main/python/performance_analyzer.py | 237 ++++++
.../python/ranger_performance_tool}/__init__.py | 0
.../python/ranger_performance_tool/perf_globals.py | 48 ++
.../ranger_perf_assets/__init__.py | 17 +
.../ranger_perf_assets/default_primary_config.json | 38 +
.../default_secondary_config.json | 58 ++
.../ranger_perf_assets/path.py | 21 +
.../ranger_perf_object_stores/__init__.py | 17 +
.../base_object_stores.py | 237 ++++++
.../ranger_perf_object_stores/random_generators.py | 188 +++++
.../service_object_stores.py | 189 +++++
.../ranger_perf_utils/__init__.py | 0
.../ranger_perf_utils/config_utils.py | 85 ++
.../ranger_perf_utils/dataframe_utils.py | 129 +++
.../ranger_perf_utils/extra_unused_utils.py | 99 +++
.../ranger_perf_utils/logging_utils.py | 293 +++++++
ranger-tools/src/main/python/requirements.txt | 22 +
.../src/main/python/setup_performance_analyzer.py | 55 ++
.../optimized/current/ranger_core_db_mysql.sql | 19 +-
...playName-col-in-x_service_def_and_x_service.sql | 6 +-
...cSource-col-in-x_user-x_portal_user-x_group.sql | 6 +-
...c-col-datatype-x_user-x_portal_user-x_group.sql | 38 +
.../optimized/current/ranger_core_db_oracle.sql | 19 +-
...playName-col-in-x_service_def_and_x_service.sql | 6 +-
...cSource-col-in-x_user-x_portal_user-x_group.sql | 34 +-
...c-col-datatype-x_user-x_portal_user-x_group.sql | 77 ++
.../optimized/current/ranger_core_db_postgres.sql | 19 +-
...playName-col-in-x_service_def_and_x_service.sql | 6 +-
...cSource-col-in-x_user-x_portal_user-x_group.sql | 6 +-
...c-col-datatype-x_user-x_portal_user-x_group.sql | 44 +
.../current/ranger_core_db_sqlanywhere.sql | 20 +-
...playName-col-in-x_service_def_and_x_service.sql | 6 +-
...cSource-col-in-x_user-x_portal_user-x_group.sql | 6 +-
...c-col-datatype-x_user-x_portal_user-x_group.sql | 42 +
.../optimized/current/ranger_core_db_sqlserver.sql | 19 +-
...playName-col-in-x_service_def_and_x_service.sql | 6 +-
...cSource-col-in-x_user-x_portal_user-x_group.sql | 6 +-
...c-col-datatype-x_user-x_portal_user-x_group.sql | 75 ++
security-admin/pom.xml | 9 +
security-admin/scripts/deleteUserGroupUtil.py | 83 +-
.../org/apache/ranger/biz/PolicyRefUpdater.java | 6 +-
.../apache/ranger/biz/RangerPolicyRetriever.java | 2 +-
.../apache/ranger/biz/RangerTagDBRetriever.java | 10 +-
.../java/org/apache/ranger/biz/RoleDBStore.java | 4 +-
.../java/org/apache/ranger/biz/RoleRefUpdater.java | 22 +-
.../org/apache/ranger/biz/SecurityZoneDBStore.java | 9 +-
.../apache/ranger/biz/SecurityZoneRefUpdater.java | 34 +-
.../java/org/apache/ranger/biz/ServiceDBStore.java | 201 ++++-
.../java/org/apache/ranger/biz/TagDBStore.java | 178 ++--
.../main/java/org/apache/ranger/biz/UserMgr.java | 4 +-
.../main/java/org/apache/ranger/biz/XUserMgr.java | 87 +-
.../common/RangerJsonMappingExceptionMapper.java | 44 +
.../common/RangerJsonParserExceptionMapper.java | 41 +
.../org/apache/ranger/common/RangerRoleCache.java | 5 +-
.../ranger/common/RangerServicePoliciesCache.java | 12 +-
.../ranger/common/RangerServiceTagsCache.java | 28 +-
.../apache/ranger/common/RangerUserStoreCache.java | 78 +-
.../java/org/apache/ranger/common/StringUtil.java | 21 +-
.../java/org/apache/ranger/common/db/BaseDao.java | 45 +
.../java/org/apache/ranger/db/XXGroupGroupDao.java | 28 +-
.../java/org/apache/ranger/db/XXPolicyDao.java | 45 +
.../apache/ranger/db/XXPolicyRefAccessTypeDao.java | 4 +-
.../apache/ranger/db/XXPolicyRefConditionDao.java | 4 +-
.../ranger/db/XXPolicyRefDataMaskTypeDao.java | 4 +-
.../org/apache/ranger/db/XXPolicyRefGroupDao.java | 4 +-
.../apache/ranger/db/XXPolicyRefResourceDao.java | 5 +-
.../org/apache/ranger/db/XXPolicyRefRoleDao.java | 4 +-
.../org/apache/ranger/db/XXPolicyRefUserDao.java | 4 +-
.../java/org/apache/ranger/db/XXPortalUserDao.java | 21 +
.../apache/ranger/db/XXRMSServiceResourceDao.java | 16 +-
.../main/java/org/apache/ranger/db/XXRoleDao.java | 15 +
.../org/apache/ranger/db/XXRoleRefGroupDao.java | 24 +
.../org/apache/ranger/db/XXRoleRefRoleDao.java | 22 +
.../org/apache/ranger/db/XXRoleRefUserDao.java | 23 +
.../java/org/apache/ranger/db/XXServiceDao.java | 16 +
.../org/apache/ranger/db/XXTagResourceMapDao.java | 92 +-
.../PatchForAtlasServiceDefUpdate_J10013.java | 2 +-
.../PatchForExternalUserStatusUpdate_J10056.java | 29 +-
.../PatchForKafkaServiceDefUpdate_J10025.java | 32 +-
.../PatchForKafkaServiceDefUpdate_J10033.java | 34 +-
...atchForMigratingOldRegimePolicyJson_J10046.java | 16 +-
...PatchForSolrSvcDefAndPoliciesUpdate_J10055.java | 408 +++++----
.../patch/PatchForSyncSourceUpdate_J10054.java | 74 +-
.../patch/PatchForUpdatingPolicyJson_J10019.java | 16 +-
.../patch/PatchForUpdatingTagsJson_J10020.java | 4 +
...ForUpdateToUniqueResoureceSignature_J10053.java | 50 ++
.../java/org/apache/ranger/rest/AssetREST.java | 60 +-
.../java/org/apache/ranger/rest/MetricsREST.java | 2 +-
.../java/org/apache/ranger/rest/PublicAPIs.java | 24 +-
.../java/org/apache/ranger/rest/PublicAPIsv2.java | 106 ++-
.../main/java/org/apache/ranger/rest/RoleREST.java | 41 +-
.../org/apache/ranger/rest/SecurityZoneREST.java | 9 +
.../java/org/apache/ranger/rest/ServiceREST.java | 125 +--
.../apache/ranger/rest/ServiceTagsProcessor.java | 12 +-
.../main/java/org/apache/ranger/rest/TagREST.java | 116 ++-
.../main/java/org/apache/ranger/rest/UserREST.java | 41 +-
.../java/org/apache/ranger/rest/XAuditREST.java | 17 +-
.../main/java/org/apache/ranger/rest/XKeyREST.java | 12 +-
.../java/org/apache/ranger/rest/XUserREST.java | 208 +++--
.../ranger/security/context/RangerAPIList.java | 1 -
.../RangerAuthenticationEntryPoint.java | 12 +-
.../web/filter/RangerCSRFPreventionFilter.java | 18 +-
.../web/filter/RangerKRBAuthenticationFilter.java | 8 +-
.../RangerSecurityContextFormationFilter.java | 2 +-
.../apache/ranger/service/RangerPolicyService.java | 36 +-
.../org/apache/ranger/service/XUserService.java | 2 +-
.../main/resources/META-INF/jpa_named_queries.xml | 64 +-
.../src/main/resources/conf.dist/logback.xml | 3 +-
.../ui-bg_diagonals-thick_18_b81900_40x40.png | Bin 418 -> 528 bytes
.../ui-bg_diagonals-thick_20_666666_40x40.png | Bin 312 -> 436 bytes
.../css/images/ui-bg_glass_100_f6f6f6_1x400.png | Bin 262 -> 376 bytes
.../css/images/ui-bg_glass_100_fdf5ce_1x400.png | Bin 348 -> 458 bytes
.../css/images/ui-bg_glass_65_ffffff_1x400.png | Bin 207 -> 317 bytes
.../images/ui-bg_gloss-wave_35_f6a828_500x100.png | Bin 5815 -> 5925 bytes
.../ui-bg_highlight-soft_100_eeeeee_1x100.png | Bin 278 -> 394 bytes
.../ui-bg_highlight-soft_75_ffe45c_1x100.png | Bin 328 -> 438 bytes
.../css/images/ui-icons_222222_256x240.png | Bin 6922 -> 7077 bytes
.../css/images/ui-icons_228ef1_256x240.png | Bin 4549 -> 4670 bytes
.../css/images/ui-icons_ef8c08_256x240.png | Bin 4549 -> 4670 bytes
.../css/images/ui-icons_ffd27a_256x240.png | Bin 4549 -> 4670 bytes
.../css/images/ui-icons_ffffff_256x240.png | Bin 6299 -> 6539 bytes
.../webapp/libs/other/jquery-ui/css/jquery-ui.css | 110 +--
.../libs/other/jquery-ui/css/jquery-ui.min.css | 6 +-
.../other/jquery-ui/js/jquery-ui-1.13.1.custom.js | 165 ++--
.../libs/other/jquery-ui/js/jquery-ui.min.js | 4 +-
security-admin/src/main/webapp/login.jsp | 2 +-
.../src/main/webapp/scripts/modules/XAOverrides.js | 6 +-
.../scripts/views/policies/PermissionList.js | 95 ++-
.../scripts/views/policies/RangerPolicyCreate.js | 5 +-
.../scripts/views/policies/RangerPolicyForm.js | 482 ++---------
.../scripts/views/policies/RangerPolicyRO.js | 36 +-
.../webapp/scripts/views/policies/ResourceList.js | 171 ++++
.../views/security_zone/ZoneResourceForm.js | 32 +-
.../views/service/ServiceAuditFilterResources.js | 2 +-
security-admin/src/main/webapp/styles/xa.css | 32 +-
.../src/main/webapp/templates/helpers/XAHelpers.js | 3 +
.../templates/policies/RangerPolicyForm_tmpl.html | 9 +
.../templates/policies/RangerPolicyRO_tmpl.html | 42 +-
.../templates/policies/ResourceItem_tmpl.html | 26 +
.../templates/policies/ResourceList_tmpl.html | 37 +
.../security_zone/ZoneResourcesForm_tmpl.html | 6 +-
.../org/apache/ranger/biz/TestServiceDBStore.java | 2 +-
.../java/org/apache/ranger/biz/TestXUserMgr.java | 24 +-
.../java/org/apache/ranger/rest/TestRoleREST.java | 933 +++++++++++++++++++++
.../org/apache/ranger/rest/TestServiceREST.java | 263 +++++-
.../java/org/apache/ranger/rest/TestUserREST.java | 6 -
storm-agent/pom.xml | 9 +
.../AtlasNestedStructureResourceMapper.java | 95 +++
.../source/atlas/AtlasNotificationMapper.java | 4 +-
.../tagsync/source/atlas/AtlasTagSource.java | 28 +-
.../nestedstructureplugin/ResourceTests.java | 139 +++
.../ldapusersync/process/LdapUserGroupBuilder.java | 2 +-
.../process/PolicyMgrUserGroupBuilder.java | 63 +-
.../unixusersync/process/UnixUserGroupBuilder.java | 134 ++-
306 files changed, 12661 insertions(+), 2513 deletions(-)
delete mode 100644 .project
create mode 100644
agents-common/src/main/resources/service-defs/ranger-servicedef-nestedstructure.json
create mode 100644
agents-common/src/test/java/org/apache/ranger/authorization/utils/TestStringUtil.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/model/TestRangerService.java
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_hive_mask_filter_with_req_expressions.json
copy {docs => plugin-nestedstructure}/.gitignore (100%)
copy {docs => plugin-nestedstructure}/LICENSE (100%)
create mode 100644 plugin-nestedstructure/NOTICE
create mode 100644 plugin-nestedstructure/README.md
create mode 100644 plugin-nestedstructure/conf/log4j.properties
create mode 100644 plugin-nestedstructure/conf/ranger-nestedstructure-audit.xml
create mode 100644
plugin-nestedstructure/conf/ranger-nestedstructure-policymgr-ssl.xml
create mode 100644
plugin-nestedstructure/conf/ranger-nestedstructure-security.xml
create mode 100644 plugin-nestedstructure/pom.xml
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/AccessResult.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/DataMasker.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/FieldLevelAccess.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/JsonManipulator.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/MaskTypes.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/MaskingException.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/NestedStructureAccessType.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/NestedStructureAuditHandler.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/NestedStructureAuthorizer.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/NestedStructureResource.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/NestedStructureService.java
create mode 100644
plugin-nestedstructure/src/main/java/org/apache/ranger/authorization/nestedstructure/authorizer/RecordFilterJavaScript.java
create mode 100644
plugin-nestedstructure/src/test/java/org/apache/ranger/authorization/nestedstructure/authorizer/ExampleClient.java
create mode 100644
plugin-nestedstructure/src/test/java/org/apache/ranger/authorization/nestedstructure/authorizer/TestDataMasker.java
create mode 100644
plugin-nestedstructure/src/test/java/org/apache/ranger/authorization/nestedstructure/authorizer/TestJsonManipulator.java
create mode 100644
plugin-nestedstructure/src/test/java/org/apache/ranger/authorization/nestedstructure/authorizer/TestNestedStructureAuthorizer.java
create mode 100644
plugin-nestedstructure/src/test/java/org/apache/ranger/authorization/nestedstructure/authorizer/TestRecordFilterJavaScript.java
create mode 100644
plugin-nestedstructure/src/test/resources/servicedef-nestedstructure.json
create mode 100644
plugin-nestedstructure/src/test/resources/test_customer_records.json
create mode 100644 ranger-tools/src/main/python/README.md
create mode 100644 ranger-tools/src/main/python/config/README.md
create mode 100644 ranger-tools/src/main/python/outputs/README.md
create mode 100644 ranger-tools/src/main/python/performance_analyzer.py
copy {intg/src/main/python/apache_ranger =>
ranger-tools/src/main/python/ranger_performance_tool}/__init__.py (100%)
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/perf_globals.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_assets/__init__.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_assets/default_primary_config.json
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_assets/default_secondary_config.json
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_assets/path.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_object_stores/__init__.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_object_stores/base_object_stores.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_object_stores/random_generators.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_object_stores/service_object_stores.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_utils/__init__.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_utils/config_utils.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_utils/dataframe_utils.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_utils/extra_unused_utils.py
create mode 100644
ranger-tools/src/main/python/ranger_performance_tool/ranger_perf_utils/logging_utils.py
create mode 100644 ranger-tools/src/main/python/requirements.txt
create mode 100644 ranger-tools/src/main/python/setup_performance_analyzer.py
create mode 100644
security-admin/db/mysql/patches/060-change-syncsrc-col-datatype-x_user-x_portal_user-x_group.sql
create mode 100644
security-admin/db/oracle/patches/060-change-syncsrc-col-datatype-x_user-x_portal_user-x_group.sql
create mode 100644
security-admin/db/postgres/patches/060-change-syncsrc-col-datatype-x_user-x_portal_user-x_group.sql
create mode 100644
security-admin/db/sqlanywhere/patches/060-change-syncsrc-col-datatype-x_user-x_portal_user-x_group.sql
create mode 100644
security-admin/db/sqlserver/patches/060-change-syncsrc-col-datatype-x_user-x_portal_user-x_group.sql
create mode 100644
security-admin/src/main/java/org/apache/ranger/common/RangerJsonMappingExceptionMapper.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/common/RangerJsonParserExceptionMapper.java
create mode 100644
security-admin/src/main/webapp/scripts/views/policies/ResourceList.js
create mode 100644
security-admin/src/main/webapp/templates/policies/ResourceItem_tmpl.html
create mode 100644
security-admin/src/main/webapp/templates/policies/ResourceList_tmpl.html
create mode 100644
security-admin/src/test/java/org/apache/ranger/rest/TestRoleREST.java
create mode 100644
tagsync/src/main/java/org/apache/ranger/tagsync/nestedstructureplugin/AtlasNestedStructureResourceMapper.java
create mode 100644
tagsync/src/test/java/org/apache/ranger/tagsync/nestedstructureplugin/ResourceTests.java