This is an automated email from the ASF dual-hosted git repository.
madhan pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git
from 96da0c834 RANGER-4639: Provide an option to bypass evaluation of
chained plugin if the parent plugin has applicable policy
add e11431f8c RANGER-4035: added catagory to access-types; added marker
access-types.patch
add f338a0dc0 RANGER-3923: governed data sharing using datasets - #1
add 0178b002e Merge branch 'master' into RANGER-3923
add 429e22ade Merge branch 'master' into RANGER-3923
add 01ced14fc RANGER-3923: added support for MariaDB
add 1713b11cc Merge branch 'master' into RANGER-3923
add 51ec55c8c Merge branch 'master' into RANGER-3923
add 4bede6fe3 RANGER-3923: renamed owner => admin for dataset, datashare,
project
add 56d559ed4 RANGER-3923: renamed class RangerGdsACL to RangerGdsObjectACL
add f7a8dabb7 Merge branch 'master' into RANGER-3923
add 066948660 Merge branch 'master' into RANGER-3923
add a58595da7 Merge branch 'master' into RANGER-3923
add 91654d2c1 Merge branch 'master' into RANGER-3923
add ebcdc7f4d Merge branch 'master' into RANGER-3923
add 83dab8561 Merge branch 'master' into RANGER-3923
add 81a4aa60f RANGER-4274: updated security-zones to support admin-roles
and audit-roles: fix unit test failures - #2
add 0fbc8b383 Merge branch 'master' into RANGER-3923
add 037659771 Merge branch 'master' into RANGER-3923
add 043180fa5 RANGER-4267: link resource-based services with gds-service
add 1c50756e0 RANGER-4268: increment policy-version of linked services on
change to GDS policy
add a3fc43cfe RANGER-4265: updated ServicePolicies to include GDS policies
add 3a25058cb RANGER-4267: link resource-based services with gds-service -
#2
add 81955dd42 Merge branch 'master' into RANGER-3923
add c57bb9496 Merge branch 'master' into RANGER-3923
add dc338c184 RANGER-4265: updated ServicePolicies to include GDS policies
- #2
add c39468ce9 Merge branch 'master' into RANGER-3923
add 3056b6cbb RANGER-3923: removed RangerDataset.admins and
RangerProject.admins; replaced RangerDataShare.admins with RangerDataShare.acl
add 27a074c9a Merge branch 'master' into RANGER-3923
add 4ed78aae4 Merge branch 'master' into RANGER-3923
add 18208b1cb Merge branch 'master' into RANGER-3923
add bc978af49 RANGER-3923: removed RangerSharedResource.resourceSignature
add 33ea44fa4 Merge branch 'master' into RANGER-3923
add 839271d33 Merge branch 'master' into RANGER-3923
add 6d5cce6b2 RANGER-3923: removed RangerSharedResource.resourceSignature
add 444475c6a RANGER-3923: removed RangerSharedResource.resourceSignature
- #3
add bba84d1d7 Merge branch 'master' into RANGER-3923
add 1c95310ae RANGER-4346: fixed incorrect computation of
GdsSharedResource.resourceSignature
add 8fe7e5af3 RANGER-4324: enforce ACLs specified in RangerDataSet
add 15643298e Merge branch 'master' into RANGER-3923
add 25162b842 RANGER-4325: REST API to lookup principals (user/group/role)
by name
add 35943801d Merge branch 'master' into RANGER-3923
add 2b307095a Merge branch 'master' into RANGER-3923
add 569ff2f27 Merge branch 'master' into RANGER-3923
add d96cdc397 RANGER-4283: [WIP] UI for GDS dashboard, datasets
add a370f46d2 RANGER-4324: updated dataset retrieval API to enforce acl
add c0ea1d988 Merge branch 'master' into RANGER-3923
add 0371f6663 RANGER-4395: avoid duplicate resource entries in a datashare
add c197a2daa Merge branch 'master' into RANGER-3923
add a13a01bce RANGER-4413: fix pagination for GDS APIs
add d5dc40c8c Merge branch 'master' into RANGER-3923
add f80b8c148 Merge branch 'master' into RANGER-3923
add 3afa4244e RANGER-4440: option to store compressed Json text in
x_security_zone.jsonData
add fbf3c3ca3 RANGER-4283: [WIP] UI for GDS dataset, datashare pages
add 7528f5d13 RANGER-4410: added additional filters in APIs to search
datasets, dataShares, projects
add e9f02a412 RANGER-4323: added API to get dataset header info for
dataset listing page
add dd226303a Merge branch 'master' into RANGER-3923
add a4566be26 RANGER-4378: updated implied-grants handling to use
RangerServiceDefHelper
add 50242093a Merge branch 'master' into RANGER-3923
add 1a33cba0a RANGER-4435: support cascade delete of datashare
add 5597dedd7 RANGER-4426: added approver in GDS request entities
add 55d2e6bfc RANGER-4445: new REST endpoints for dataset policies
add 249b47083 RANGER-4442: add creator as ADMIN in ACL dataShare, dataset
and project
add ff6f20d23 Merge branch 'master' into RANGER-3923
add bee247bd4 RANGER-4455: updated RangerGdsValidator to account for
permissions assigned to public group
add 4c37f3080 RANGER-4410: updated sharedResource search to support filter
by zone-id and zone-name
add bb2ee37f9 RANGER-4447: added API to get security-zone summary
add 2a330bbfe RANGER-4445: new REST endpoints for dataset policies - #2
add 4c0e2a1e3 Merge branch 'master' into RANGER-3923
add 955f6a7f1 RANGER-4446: added API to return dataset summary
add 809ba9be7 RANGER-4462: dataShare update/delete should be allowed for
users with service-admin/zone-admin privilege as well
add 3b2fb766c RANGER-4436: cascade delete for dataset
add f85975eb4 Merge branch 'master' into RANGER-3923
add 7234c4dd7 RANGER-4446: added description field in dataset summary
add 39b6d672a RANGER-4463: fix for incorrect principalsCount in
DatasetSummary
add 789d69629 RANGER-4446: updated Python client with
get_dataset_summary() API - #2
add 3c8ded2e7 RANGER-4464: added API to get DataShare summary
add edcb9732f RANGER-4443: enable datashare-in-dataset to be created in
granted/active state
add 66bcc8635 RANGER-4459: updated GET sharedResources API to support
filter by resource value
add 10d854a9b RANGER-4283: [WIP] UI for GDS - shared resource add/update,
request flow, pagination for internal tabs
add 805a9615d RANGER-4469: updated dataset summary API to not fail for
users having VIEW permission
add 67ebb5aec RANGER-4466: Update approver when request status is updated
add 5103c4df0 RANGER-4470: renamed defaultMasks to defaultTagMasks in
RangerDataShare, subResourceNames to subResource in RangerSharedResource
add 5aecd131e RANGER-4471: generate trxLog for dataset, project,
dataShare, sharedResource
add d0f39291c RANGER-4459: add filters for sharedResourceName and
sharedResourceNamePartial in get sharedResource API #2
add e5dd94c07 RANGER-4440: added column x_security_zone.gz_jsonData to
store compressed bytes - #3
add 0a45ab730 RANGER-4283: [WIP] UI for GDS: Added validity period
changes. Multiple default tag datamask condition for datashare and CSS
add d5cb672d2 Merge branch 'master' into RANGER-3923
add 2406a5742 RANGER-4415: new API to add multiple datashares in a dataset
add f8ae1838c RANGER-4394: database schema upgrade patches to support GDS
add 2038f9235 RANGER-4475: updated getZoneSummary() API to make all
security-zones available for users with Ranger admin role
add 811c0ece1 Merge branch 'master' into RANGER-3923
add 3114b7d67 RANGER-4283: UI for GDS: Dataset and Datashare full view,
download json, CSS
add 9d62eef59 RANGER-4410: dataShareName/partailName not working - #2
add 93b6992c5 Merge branch 'master' into RANGER-3923
add 8e8f25777 Merge branch 'master' into RANGER-3923
add dfe0a32b4 Merge branch 'master' into RANGER-3923
add 4f36557f7 Merge branch 'master' into RANGER-3923
add 21e56d955 Merge branch 'master' into RANGER-3923
add 12c80bfaf Merge branch 'master' into RANGER-3923
add 8c2363a58 RANGER-4266: gds info retrieval to plugins
add af4fdfd1b RANGER-4437: trim leading/trialing spaces in
datashare/dataset/project/shared-resource names
add 9422101b4 Merge branch 'master' into RANGER-3923
add 932f96a91 RANGER-4035: DB schema update to persist
XXAccessTypeDef.category - #2
add d600682b6 RANGER-4497: updated service-defs to assign category to
access-types
add 7ff8740db Merge branch 'master' into RANGER-3923
add 46781c62f Merge branch 'master' into RANGER-3923
add fe10fa806 Merge branch 'master' into RANGER-3923
add 6323d7f9f Merge branch 'master' into RANGER-3923
add 89c9cffd9 Merge branch 'master' into RANGER-3923
add 3ce76358f RANGER-4514: fixed incorrect sortType, sortBy values in
GdsREST API response
add 458335460 Merge branch 'master' into RANGER-3923
add 84b16b847 Merge branch 'master' into RANGER-3923
add e05ab29e8 RANGER-4480: fixed pagination issues in GDS REST APIs
add 72055fb26 RANGER-4283: update GDS UI for add principals, listing of
datasets/datashares/shared-resources, service and zone selection
add 32671b441 Merge branch 'master' into RANGER-3923
add bee10c5fb Merge branch 'master' into RANGER-3923
add 3842fd756 RANGER-4269: gds enricher implementation to grant access
using dataset/project policies
add 4f362e1bf RANGER-4269: gds enricher implementation to grant access
using dataset/project policies - #2
add 87bec2676 RANGER-4269: gds policy engine implementation of
getResourceACLs() API - #3
add c71e57fd6 RANGER-4283: [WIP] UI for GDS: shared resource design fix,
CSS. bug fixes
add 1ea1b0cfb RANGER-4522: fixed NPE in RangerGdsInfoRefresher.run()
add eb9d71b33 RANGER-4497: updated service-defs to assign category to
access-types - #2
add 37606e29e RANGER:4397: updated dataShare retrieval API to support
excludeDatasetId flag
add b57e62594 RANGER-4526: RangerBasePlugin updates to support GDS in
disconnected mode
add 0449db784 RANGER-4269: gds policy engine implementation - #4
add ba960b237 RANGER-4530: fixed update APIs to not require guid in the
payload
add 515a5098b RANGER-4531: updated GdsPolicyEngine with methods to find
datasets/projects for principals
add be4a778a6 Merge branch 'master' into RANGER-3923
add d53934b41 Merge branch 'master' into RANGER-3923
add 62545bdb5 Merge branch 'master' into RANGER-3923
add 9e05af16b RANGER-4282: updated audit logs to capture datasets and
projects
add a86520d03 RANGER-4538: updated plugin-status to record GDS info
download details
add df89f8a0d Merge branch 'master' into RANGER-3923
add 6de7d4cce RANGER-4541: fix to allow users with Ranger admin privilege
to update status of RangerDataShareInDataset
add 6dd92b6fa RANGER-4541: fixed validation of DataShareInDataset and
DatasetInProject status update and delete
add ef9a05358 Merge branch 'master' into RANGER-3923
add d5115581d Merge branch 'master' into RANGER-3923
add 51ecff4e1 RANGER-4302: caching of ServiceGdsInfo in Ranger admin using
RangerCache implementation
add 6e3c22bd3 RANGER-4558: fixed validation for create/update of
shared-resources in a dataShare
add 67dd53692 Merge branch 'master' into RANGER-3923
add 0097c2e0c RANGER-4535: updated get datasets API to include permission
assigned to public group
add 7179a19c1 RANGER-4534: updated handling of query param
gdsPermission=NONE in APIs retrieving GDS objects
add cf35a719d Merge branch 'master' into RANGER-3923
add e013def2a RANGER-4579: updated GDS REST APIs to support retrieval of
datasets/projects shared with the caller
add 1513655b2 RANGER-4283: GDS UI updates in dataShare pages
add a37a896c7 Merge branch 'master' into RANGER-3923
add 56f9d8c08 RANGER-4533: updated REST API /public/v2/api/service-headers
to exclude GDS service - #2
add 7968a28a1 Merge branch 'master' into RANGER-3923
add d95046056 RANGER-4283: [WIP] UI for GDS: updated datashare tab in
dataset detail view
add 4a8eaba36 Merge branch 'master' into RANGER-3923
add 425910b15 RANGER-4608: updated getDataShare() API to enforce ACL
specified in the datashare
add fff59fdd4 RANGER-4603: added query param createdBy for dataset GET API
add 678a4c6da RANGER-4604: added query param createdBy for security-zone
GET API
add 0364ef1be RANGER-4609:Support in File-based Tag Retriever to provide
tag-deltas
add fbeddbe45 RANGER-4616: modified committer info for doc purpose
add 1be421d9c RANGER-4467: User Agent info not logged under 'Login
sessions' when login fails
add 4d3803776 RANGER-4502 : Getting Error to load backbone.js latest UI.
add c4bb32b44 RANGER-4613: updated trx log retrieval API to support
objectId query param
add f54e14ead RANGER-4618: added service displayName field in
ZoneServiceSummary Object
add ebfc4c11f RANGER-4617: updated DatasetSummary to include ACL principal
counts
add de4a379b2 RANGER-4624: database schema updates to support GDS
add 866b919ce Merge branch 'master' into RANGER-3923
add 2dc2a7e25 RANGER-4566: Java patch to set x_access_type_def.category
add 97b7f669e RANGER-4267: moved GDS service creation to init, instead of
at resource services creation
add 0e36d4252 RANGER-4283: GDS UI - datashare detailed view updates
add 3b9ec333e RANGER-4490: added API to fetch DataShareInDataset Summary
add b0099089e Merge branch 'master' into RANGER-3923
add e4da912da RANGER-4302: RangerCache updated to support value loader to
use callers context in Ranger admin - #2
add 9b478f0b8 RANGER-4631: updated admin audits UI to correctly render
operation for datashares/datasets
add 64da8ed3a Merge branch 'master' into RANGER-3923
add 501f1cc21 Merge branch 'master' into RANGER-3923
add fca13a78a Merge branch 'master' into RANGER-3923
add fb0d1d53d RANGER-4448: updated GDS CRUD APIs to return appropriate
status code on failure
add 2f7f76261 RANGER-4283: GDS UI - updated request listing page, created
history tab in dataset and datashare detail view
add 65b17ec97 Merge branch 'master' into RANGER-3923
No new revisions were added by this update.
Summary of changes:
.../destination/ElasticSearchAuditDestination.java | 2 +
.../audit/destination/SolrAuditDestination.java | 2 +
.../apache/ranger/audit/model/AuthzAuditEvent.java | 37 +-
.../audit/provider/solr/SolrAuditProvider.java | 2 +
.../admin/client/AbstractRangerAdminClient.java | 6 +
.../ranger/admin/client/RangerAdminClient.java | 2 +
.../ranger/admin/client/RangerAdminRESTClient.java | 76 +
.../hadoop/config/RangerPluginConfig.java | 7 +
.../ranger/authorization/utils/JsonUtils.java | 95 +-
.../ranger/authorization/utils/StringUtil.java | 24 +-
.../plugin/audit/RangerDefaultAuditHandler.java | 17 +
.../RangerAdminGdsInfoRetriever.java | 90 +
.../plugin/contextenricher/RangerGdsEnricher.java | 353 +++
.../contextenricher/RangerGdsInfoRetriever.java | 57 +
.../ranger/plugin/errors/ValidationErrorCode.java | 29 +-
.../ranger/plugin/model/RangerDatasetHeader.java | 99 +
.../org/apache/ranger/plugin/model/RangerGds.java | 824 +++++++
.../ranger/plugin/model/RangerPluginInfo.java | 53 +
.../ranger/plugin/model/RangerPolicyDelta.java | 3 +-
.../model/RangerPolicyResourceSignature.java | 26 +
.../ranger/plugin/model/RangerServiceDef.java | 63 +-
.../plugin/model/RangerServiceHeaderInfo.java | 19 +-
.../model/validation/RangerPolicyValidator.java | 24 +
.../model/validation/RangerServiceDefHelper.java | 72 +
.../model/validation/RangerServiceValidator.java | 11 +-
.../plugin/model/validation/RangerValidator.java | 8 +
.../model/validation/ValidationFailureDetails.java | 5 +
.../plugin/policyengine/RangerAccessResult.java | 36 +-
.../policyengine/RangerPolicyEngineImpl.java | 43 +-
.../policyengine/RangerPolicyEngineOptions.java | 16 +
.../policyengine/RangerPolicyRepository.java | 12 +
.../plugin/policyengine/RangerResourceACLs.java | 43 +
.../plugin/policyengine/gds/GdsAccessResult.java | 136 ++
.../policyengine/gds/GdsDataShareEvaluator.java | 236 ++
.../policyengine/gds/GdsDatasetEvaluator.java | 218 ++
.../plugin/policyengine/gds/GdsDipEvaluator.java | 90 +
.../plugin/policyengine/gds/GdsDshidEvaluator.java | 92 +
.../plugin/policyengine/gds/GdsPolicyEngine.java | 581 +++++
.../policyengine/gds/GdsProjectEvaluator.java | 190 ++
.../gds/GdsSharedResourceEvaluator.java | 200 ++
.../RangerAbstractPolicyEvaluator.java | 46 +-
.../RangerCustomConditionEvaluator.java | 28 +
.../policyevaluator/RangerPolicyEvaluator.java | 45 +-
.../ranger/plugin/service/RangerBasePlugin.java | 75 +-
.../ranger/plugin/store/AbstractGdsStore.java | 137 ++
.../ranger/plugin/store/AbstractServiceStore.java | 4 +-
.../plugin/store/EmbeddedServiceDefsUtil.java | 52 +-
.../org/apache/ranger/plugin/store/GdsStore.java | 134 ++
.../java/org/apache/ranger/plugin/store/PList.java | 22 +-
.../plugin/store/SecurityZonePredicateUtil.java | 34 +
.../ranger/plugin/util/AutoClosableLock.java | 29 +
.../org/apache/ranger/plugin/util/JsonUtilsV2.java | 10 +
.../plugin/util/RangerAccessRequestUtil.java | 29 +
.../org/apache/ranger/plugin/util/RangerCache.java | 387 ++++
.../ranger/plugin/util/RangerPerfTracer.java | 31 +-
.../ranger/plugin/util/RangerPluginCapability.java | 3 +-
.../apache/ranger/plugin/util/RangerRESTUtils.java | 4 +
.../apache/ranger/plugin/util/SearchFilter.java | 43 +
.../apache/ranger/plugin/util/ServiceDefUtil.java | 235 +-
.../apache/ranger/plugin/util/ServiceGdsInfo.java | 878 ++++++++
.../ranger/services/gds/RangerServiceGds.java | 75 +
.../service-defs/ranger-servicedef-abfs.json | 6 +-
.../service-defs/ranger-servicedef-atlas.json | 57 +-
.../ranger-servicedef-elasticsearch.json | 19 +-
.../service-defs/ranger-servicedef-gds.json | 80 +
.../service-defs/ranger-servicedef-hbase.json | 15 +-
.../service-defs/ranger-servicedef-hdfs.json | 9 +-
.../service-defs/ranger-servicedef-hive.json | 39 +-
.../service-defs/ranger-servicedef-kafka.json | 24 +-
.../service-defs/ranger-servicedef-kms.json | 31 +-
.../service-defs/ranger-servicedef-knox.json | 3 +-
.../service-defs/ranger-servicedef-kudu.json | 10 +-
.../service-defs/ranger-servicedef-kylin.json | 12 +-
.../ranger-servicedef-nestedstructure.json | 4 +-
.../ranger-servicedef-nifi-registry.json | 9 +-
.../service-defs/ranger-servicedef-nifi.json | 6 +-
.../service-defs/ranger-servicedef-ozone.json | 21 +-
.../service-defs/ranger-servicedef-presto.json | 36 +-
.../ranger-servicedef-schema-registry.json | 12 +-
.../service-defs/ranger-servicedef-solr.json | 6 +-
.../service-defs/ranger-servicedef-sqoop.json | 6 +-
.../service-defs/ranger-servicedef-storm.json | 34 +-
.../service-defs/ranger-servicedef-trino.json | 36 +-
.../service-defs/ranger-servicedef-wasb.json | 6 +-
.../service-defs/ranger-servicedef-yarn.json | 4 +-
.../model/validation/TestRangerValidator.java | 2 +
.../plugin/policyengine/TestPolicyEngine.java | 7 +
.../plugin/policyengine/TestRangerAuthContext.java | 9 +-
.../policyengine/gds/TestGdsPolicyEngine.java | 206 ++
.../plugin/service/TestRangerBasePlugin.java | 199 ++
.../apache/ranger/plugin/util/RangerCacheTest.java | 487 ++++
.../ranger/plugin/util/ServiceDefUtilTest.java | 146 ++
.../src/test/resources/plugin/hive_gds_info.json | 141 ++
.../src/test/resources/plugin/hive_policies.json | 161 ++
.../src/test/resources/plugin/hive_roles.json | 15 +
.../src/test/resources/plugin/hive_tags.json | 37 +
.../src/test/resources/plugin/hive_user_store.json | 8 +
.../resources/plugin/test_base_plugin_hive.json | 375 +++
.../gds/test_gds_policy_engine_hive.json | 517 +++++
.../plugin/test_plugin_capability.json | 4 +-
.../test_policyengine_marker_access_types.json | 435 ++++
.../test/resources/test_servicedef-normalize.json | 478 ++++
.../config/solr-ranger_audits/managed-schema | 4 +-
.../apache_ranger/client/ranger_gds_client.py | 325 +++
.../main/python/apache_ranger/model/ranger_base.py | 2 +
.../main/python/apache_ranger/model/ranger_gds.py | 277 +++
.../python/apache_ranger/model/ranger_policy.py | 16 +-
.../python/apache_ranger/model/ranger_service.py | 4 +
.../apache_ranger/model/ranger_service_def.py | 50 +-
intg/src/main/python/apache_ranger/utils.py | 29 +-
.../src/main/python/sample_gds_client.py | 232 ++
.../org/apache/ranger/sizing/RangerMemSizing.java | 85 +-
.../conf/ranger_es_schema.json | 8 +-
.../solr_for_audit_setup/conf/managed-schema | 4 +-
.../optimized/current/ranger_core_db_mysql.sql | 218 ++
.../db/mysql/patches/067-create-gds-tables.sql | 219 ++
.../db/mysql/patches/068-create-view-principal.sql | 18 +
.../patches/069-add-gz_json_x_security_zone.sql | 31 +
.../db/mysql/patches/070-add-gds-perm.sql | 57 +
.../patches/071-alter-x_service_version_info.sql | 50 +
.../mysql/patches/072-alter-x_access_type_def.sql | 31 +
.../optimized/current/ranger_core_db_oracle.sql | 6 +-
.../optimized/current/ranger_core_db_postgres.sql | 239 ++
.../db/postgres/patches/067-create-gds-tables.sql | 243 ++
.../postgres/patches/068-create-view-principal.sql | 17 +
.../patches/069-add-gz_json_x_security_zone.sql | 39 +
.../db/postgres/patches/070-add-gds-perm.sql | 52 +
.../patches/071-alter-x_service_version_info.sql | 60 +
.../patches/072-alter-x_access_type_def.sql | 39 +
.../current/ranger_core_db_sqlanywhere.sql | 5 +
.../optimized/current/ranger_core_db_sqlserver.sql | 5 +
.../cloudwatch/CloudWatchAccessAuditsService.java | 10 +
.../main/java/org/apache/ranger/biz/AssetMgr.java | 53 +-
.../java/org/apache/ranger/biz/GdsDBStore.java | 2090 +++++++++++++++++
.../org/apache/ranger/biz/GdsPolicyAdminCache.java | 209 ++
.../org/apache/ranger/biz/PolicyRefUpdater.java | 4 +
.../java/org/apache/ranger/biz/RangerBizUtil.java | 8 +
.../java/org/apache/ranger/biz/RoleDBStore.java | 10 +-
.../java/org/apache/ranger/biz/ServiceDBStore.java | 150 +-
.../main/java/org/apache/ranger/biz/XUserMgr.java | 20 +-
.../org/apache/ranger/common/AppConstants.java | 14 +-
.../org/apache/ranger/common/MessageEnums.java | 1 +
.../org/apache/ranger/common/RESTErrorUtil.java | 21 +-
.../org/apache/ranger/common/RangerSearchUtil.java | 37 +-
.../apache/ranger/common/ServiceGdsInfoCache.java | 262 +++
.../org/apache/ranger/db/RangerDaoManagerBase.java | 9 +-
.../org/apache/ranger/db/XXAccessTypeDefDao.java | 16 +
.../org/apache/ranger/db/XXDataMaskTypeDefDao.java | 16 +
.../org/apache/ranger/db/XXGdsDataShareDao.java | 132 ++
.../ranger/db/XXGdsDataShareInDatasetDao.java | 146 ++
.../java/org/apache/ranger/db/XXGdsDatasetDao.java | 116 +
.../apache/ranger/db/XXGdsDatasetInProjectDao.java | 103 +
.../apache/ranger/db/XXGdsDatasetPolicyMapDao.java | 85 +
.../java/org/apache/ranger/db/XXGdsProjectDao.java | 101 +
.../apache/ranger/db/XXGdsProjectPolicyMapDao.java | 85 +
.../apache/ranger/db/XXGdsSharedResourceDao.java | 150 ++
.../org/apache/ranger/db/XXGlobalStateDao.java | 6 +-
.../java/org/apache/ranger/db/XXPolicyDao.java | 52 +-
.../java/org/apache/ranger/db/XXServiceDao.java | 13 +
.../main/java/org/apache/ranger/db/XXUserDao.java | 35 +
.../ElasticSearchAccessAuditsService.java | 8 +
.../org/apache/ranger/entity/XXAccessTypeDef.java | 102 +-
.../org/apache/ranger/entity/XXGdsDataShare.java | 212 ++
.../ranger/entity/XXGdsDataShareInDataset.java | 192 ++
.../org/apache/ranger/entity/XXGdsDataset.java | 168 ++
.../ranger/entity/XXGdsDatasetInProject.java | 193 ++
.../ranger/entity/XXGdsDatasetPolicyMap.java | 106 +
.../org/apache/ranger/entity/XXGdsProject.java | 166 ++
.../ranger/entity/XXGdsProjectPolicyMap.java | 106 +
.../apache/ranger/entity/XXGdsSharedResource.java | 239 ++
.../apache/ranger/entity/XXSecurityZoneBase.java | 12 +-
.../org/apache/ranger/entity/XXServiceBase.java | 109 +-
.../apache/ranger/entity/XXServiceVersionInfo.java | 85 +-
.../apache/ranger/entity/view/VXXPrincipal.java | 202 ++
.../patch/PatchSetAccessTypeCategory_J10061.java | 195 ++
.../main/java/org/apache/ranger/rest/GdsREST.java | 1641 ++++++++++++++
.../java/org/apache/ranger/rest/ServiceREST.java | 267 +--
.../java/org/apache/ranger/rest/XUserREST.java | 17 +-
.../ranger/security/context/RangerAPIList.java | 47 +
.../ranger/service/RangerBaseModelService.java | 102 +-
.../ranger/service/RangerDataHistService.java | 42 +
.../ranger/service/RangerGdsBaseModelService.java | 223 ++
.../RangerGdsDataShareInDatasetService.java | 295 +++
.../ranger/service/RangerGdsDataShareService.java | 303 +++
.../service/RangerGdsDatasetInProjectService.java | 300 +++
.../ranger/service/RangerGdsDatasetService.java | 218 ++
.../ranger/service/RangerGdsProjectService.java | 217 ++
.../service/RangerGdsSharedResourceService.java | 287 +++
.../ranger/service/RangerPluginInfoService.java | 5 +
.../service/RangerSecurityZoneServiceService.java | 30 +-
.../service/RangerServiceDefServiceBase.java | 30 +-
.../ranger/service/RangerServiceService.java | 5 +-
.../ranger/service/RangerServiceServiceBase.java | 5 +-
.../ranger/solr/SolrAccessAuditsService.java | 8 +
.../org/apache/ranger/util/RangerAdminCache.java | 116 +
.../validation/RangerGdsValidationDBProvider.java | 269 +++
.../RangerGdsValidationDataProvider.java | 73 +
.../ranger/validation/RangerGdsValidator.java | 1103 +++++++++
.../org/apache/ranger/view/RangerGdsVList.java | 194 ++
.../java/org/apache/ranger/view/VXAccessAudit.java | 27 +-
.../main/resources/META-INF/jpa_named_queries.xml | 217 ++
.../conf.dist/security-applicationContext.xml | 1 +
.../src/main/webapp/react-webapp/package.json | 2 +
.../src/main/webapp/react-webapp/src/App.jsx | 92 +
.../react-webapp/src/components/Editable.jsx | 39 +-
.../react-webapp/src/images/group-colour.svg | 4 +
.../webapp/react-webapp/src/images/group-grey.svg | 3 +
.../react-webapp/src/images/history-details.svg | 1 +
.../webapp/react-webapp/src/images/role-colour.svg | 4 +
.../webapp/react-webapp/src/images/role-grey.svg | 3 +
.../src/images/sidebar/governed-data.svg | 3 +
.../webapp/react-webapp/src/images/user-colour.svg | 4 +
.../webapp/react-webapp/src/images/user-grey.svg | 3 +
.../react-webapp/src/images/view-request.svg | 3 +
.../main/webapp/react-webapp/src/styles/style.css | 460 ++++
.../main/webapp/react-webapp/src/utils/XAEnums.js | 64 +
.../main/webapp/react-webapp/src/utils/XAUtils.js | 4 +
.../src/views/AuditEvent/AdminLogs.jsx | 42 +
.../AdminLogs/DataShareInDatasetLogs.jsx | 205 ++
.../views/AuditEvent/AdminLogs/DataShareLogs.jsx | 205 ++
.../AuditEvent/AdminLogs/DatasetInProjectLogs.jsx | 205 ++
.../src/views/AuditEvent/AdminLogs/DatasetLogs.jsx | 205 ++
.../src/views/AuditEvent/AdminLogs/ProjectLogs.jsx | 205 ++
.../AuditEvent/AdminLogs/SharedResourceLogs.jsx | 205 ++
.../src/views/AuditEvent/OperationAdminModal.jsx | 42 +
.../views/GovernedData/Dataset/AccessGrantForm.jsx | 810 +++++++
.../views/GovernedData/Dataset/AddDatasetView.jsx | 288 +++
.../GovernedData/Dataset/DatasetDetailFullView.jsx | 1003 +++++++++
.../GovernedData/Dataset/DatasetDetailLayout.jsx | 2381 ++++++++++++++++++++
.../Dataset/DatashareInDatasetListComp.jsx | 692 ++++++
.../GovernedData/Dataset/MyDatasetListing.jsx | 561 +++++
.../Dataset/PrinciplePermissionComp.jsx | 826 +++++++
.../GovernedData/Datashare/AddDatashareView.jsx | 921 ++++++++
.../Datashare/AddSharedResourceComp.jsx | 632 ++++++
.../Datashare/DatashareDetailFullView.jsx | 726 ++++++
.../Datashare/DatashareDetailLayout.jsx | 1905 ++++++++++++++++
.../GovernedData/Datashare/MyDatashareListing.jsx | 568 +++++
.../GovernedData/Request/RequestDetailView.jsx | 449 ++++
.../views/GovernedData/Request/RequestListing.jsx | 338 +++
.../PolicyListing/PolicyValidityPeriodComp.jsx | 66 +-
.../src/views/Resources/ResourceComp.jsx | 16 +-
.../react-webapp/src/views/SideBar/SideBar.jsx | 24 +
.../react-webapp/src/views/SideBar/SideBarBody.jsx | 80 +
.../react-webapp/src/views/SideBar/TopNavBar.jsx | 15 +-
.../org/apache/ranger/biz/TestServiceDBStore.java | 2 +
.../java/org/apache/ranger/biz/TestTagDBStore.java | 1 +
.../org/apache/ranger/rest/TestServiceREST.java | 7 +-
247 files changed, 37848 insertions(+), 834 deletions(-)
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/contextenricher/RangerAdminGdsInfoRetriever.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/contextenricher/RangerGdsEnricher.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/contextenricher/RangerGdsInfoRetriever.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerDatasetHeader.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerGds.java
mode change 100644 => 100755
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPolicyResourceSignature.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsAccessResult.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsDataShareEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsDatasetEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsDipEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsDshidEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsPolicyEngine.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsProjectEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/policyengine/gds/GdsSharedResourceEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/store/AbstractGdsStore.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/store/GdsStore.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/util/RangerCache.java
mode change 100644 => 100755
agents-common/src/main/java/org/apache/ranger/plugin/util/SearchFilter.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/util/ServiceGdsInfo.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/services/gds/RangerServiceGds.java
create mode 100644
agents-common/src/main/resources/service-defs/ranger-servicedef-gds.json
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/policyengine/gds/TestGdsPolicyEngine.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/service/TestRangerBasePlugin.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/util/RangerCacheTest.java
create mode 100644 agents-common/src/test/resources/plugin/hive_gds_info.json
create mode 100644 agents-common/src/test/resources/plugin/hive_policies.json
create mode 100644 agents-common/src/test/resources/plugin/hive_roles.json
create mode 100644 agents-common/src/test/resources/plugin/hive_tags.json
create mode 100644 agents-common/src/test/resources/plugin/hive_user_store.json
create mode 100644
agents-common/src/test/resources/plugin/test_base_plugin_hive.json
create mode 100644
agents-common/src/test/resources/policyengine/gds/test_gds_policy_engine_hive.json
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_marker_access_types.json
create mode 100644
agents-common/src/test/resources/test_servicedef-normalize.json
create mode 100644
intg/src/main/python/apache_ranger/client/ranger_gds_client.py
create mode 100644 intg/src/main/python/apache_ranger/model/ranger_gds.py
create mode 100644
ranger-examples/sample-client/src/main/python/sample_gds_client.py
create mode 100644 security-admin/db/mysql/patches/067-create-gds-tables.sql
create mode 100644
security-admin/db/mysql/patches/068-create-view-principal.sql
create mode 100644
security-admin/db/mysql/patches/069-add-gz_json_x_security_zone.sql
create mode 100644 security-admin/db/mysql/patches/070-add-gds-perm.sql
create mode 100644
security-admin/db/mysql/patches/071-alter-x_service_version_info.sql
create mode 100644
security-admin/db/mysql/patches/072-alter-x_access_type_def.sql
create mode 100644 security-admin/db/postgres/patches/067-create-gds-tables.sql
create mode 100644
security-admin/db/postgres/patches/068-create-view-principal.sql
create mode 100644
security-admin/db/postgres/patches/069-add-gz_json_x_security_zone.sql
create mode 100644 security-admin/db/postgres/patches/070-add-gds-perm.sql
create mode 100644
security-admin/db/postgres/patches/071-alter-x_service_version_info.sql
create mode 100644
security-admin/db/postgres/patches/072-alter-x_access_type_def.sql
create mode 100755
security-admin/src/main/java/org/apache/ranger/biz/GdsDBStore.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/biz/GdsPolicyAdminCache.java
mode change 100644 => 100755
security-admin/src/main/java/org/apache/ranger/common/RangerSearchUtil.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/common/ServiceGdsInfoCache.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsDataShareDao.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/db/XXGdsDataShareInDatasetDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsDatasetDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsDatasetInProjectDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsDatasetPolicyMapDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsProjectDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsProjectPolicyMapDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/db/XXGdsSharedResourceDao.java
mode change 100644 => 100755
security-admin/src/main/java/org/apache/ranger/db/XXPolicyDao.java
mode change 100644 => 100755
security-admin/src/main/java/org/apache/ranger/db/XXUserDao.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsDataShare.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsDataShareInDataset.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsDataset.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsDatasetInProject.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsDatasetPolicyMap.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsProject.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsProjectPolicyMap.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/XXGdsSharedResource.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/entity/view/VXXPrincipal.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/patch/PatchSetAccessTypeCategory_J10061.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/rest/GdsREST.java
mode change 100644 => 100755
security-admin/src/main/java/org/apache/ranger/rest/XUserREST.java
mode change 100644 => 100755
security-admin/src/main/java/org/apache/ranger/security/context/RangerAPIList.java
mode change 100644 => 100755
security-admin/src/main/java/org/apache/ranger/service/RangerBaseModelService.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/service/RangerGdsBaseModelService.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/service/RangerGdsDataShareInDatasetService.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/service/RangerGdsDataShareService.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/service/RangerGdsDatasetInProjectService.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/service/RangerGdsDatasetService.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/service/RangerGdsProjectService.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/service/RangerGdsSharedResourceService.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/util/RangerAdminCache.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/validation/RangerGdsValidationDBProvider.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/validation/RangerGdsValidationDataProvider.java
create mode 100755
security-admin/src/main/java/org/apache/ranger/validation/RangerGdsValidator.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/view/RangerGdsVList.java
mode change 100644 => 100755
security-admin/src/main/webapp/react-webapp/src/App.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/images/group-colour.svg
create mode 100755
security-admin/src/main/webapp/react-webapp/src/images/group-grey.svg
create mode 100644
security-admin/src/main/webapp/react-webapp/src/images/history-details.svg
create mode 100755
security-admin/src/main/webapp/react-webapp/src/images/role-colour.svg
create mode 100755
security-admin/src/main/webapp/react-webapp/src/images/role-grey.svg
create mode 100644
security-admin/src/main/webapp/react-webapp/src/images/sidebar/governed-data.svg
create mode 100755
security-admin/src/main/webapp/react-webapp/src/images/user-colour.svg
create mode 100755
security-admin/src/main/webapp/react-webapp/src/images/user-grey.svg
create mode 100644
security-admin/src/main/webapp/react-webapp/src/images/view-request.svg
mode change 100644 => 100755
security-admin/src/main/webapp/react-webapp/src/styles/style.css
mode change 100644 => 100755
security-admin/src/main/webapp/react-webapp/src/utils/XAEnums.js
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/DataShareInDatasetLogs.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/DataShareLogs.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/DatasetInProjectLogs.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/DatasetLogs.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/ProjectLogs.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/SharedResourceLogs.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/AccessGrantForm.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/AddDatasetView.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/DatasetDetailFullView.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/DatasetDetailLayout.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/DatashareInDatasetListComp.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/MyDatasetListing.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Dataset/PrinciplePermissionComp.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Datashare/AddDatashareView.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Datashare/AddSharedResourceComp.jsx
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Datashare/DatashareDetailFullView.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Datashare/DatashareDetailLayout.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Datashare/MyDatashareListing.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Request/RequestDetailView.jsx
create mode 100755
security-admin/src/main/webapp/react-webapp/src/views/GovernedData/Request/RequestListing.jsx
mode change 100644 => 100755
security-admin/src/main/webapp/react-webapp/src/views/Resources/ResourceComp.jsx
mode change 100644 => 100755
security-admin/src/main/webapp/react-webapp/src/views/SideBar/SideBarBody.jsx
