This is an automated email from the ASF dual-hosted git repository.
abhi pushed a change to branch
dependabot/maven/knox-agent/org.eclipse.jetty-jetty-server-9.4.55.v20240627
in repository https://gitbox.apache.org/repos/asf/ranger.git
from 5d095678cb Bump org.eclipse.jetty:jetty-server in /knox-agent
add 16c94a9640 RANGER-4956: fixed dedup tags to address potential infinite
loop
add 41de6c6ebb RANGER-4961: fix REST API to retrieve policies for a
resource to include tag-based policies as well
add d767c7899f RANGER-4777: Improve API /public/v2/api/service-headers to
filter services depending on user role
add 50f75d7d37 RANGER-4952: Add support for Hive 4.0.1 (#400)
add d54eae3d51 RANGER-4963: Unescaped spaces with disjunctive matching in
solr ranger_auth
add dfd57ff520 RANGER-4922: Reduce time to find tags associated with
multi-level resource - Handle requests with resourceMatchingScope set to
SELF_OR_DESCENDANTS
add d44d5b3df2 RANGER-4966: Remove self node from the resourceTrie only if
it has no children, no evaluators and no wildcard-evaluators
add 8d17b4b9da RANGER-4967: Refactor RangerTagEnricher class for
reusability
add 25f428cdef RANGER-4607: Ranger REST API improvements
add 9268778371 RANGER-4964: Issue with x_trx_log_IDX_trx_id Index in
x_trx_log Table, causing patch failure
add 8038af6b22 RANGER-4933: Ranger API to Summary View of DataShares in GDS
add ad1fdce468 RANGER-4970: add custom condition to support validity
schedule
add 63acaead1a RANGER-4976: update GDS service-def to support validity
schedule condition in grants
add c97592b717 RANGER-4975: DB patch fix to support for new columns in
Ranger Dataset for MySql and Postrgres
add 06e02200fe RANGER-4976: update GDS service-def to support validity
schedule condition in grants - #2
add 2b2da8d79f RANGER-4972 : Ranger User Type federated user should not
log into Ranger for doing any operation
add 03bca8e904 RANGER-4833 : Upgrade from Bootbox.js to Bootprompt.js
add c2765370d5 RANGER-4973 : Enhance Ranger UI to support a new user type
for external users from Data Sharing
add 3493738056 RANGER-4984: Ranger Federated User enum order should be
correct to avoid potential failure in Ranger Admin
add 50cf9e7ccc RANGER-4960: API to do Grant / Revoke permissions on the
Dataset for users / groups/ roles
add 592e6d273e Added 'Mahesh Bandal' as a committer
add bec8af3dae RANGER-4980: Delete permissions on directory is denied
which has hierarchy of files/directory rooted at the argument passed to the
HDFS command
add e4b7f149f3 RANGER-4985: update GdsAccessResult to include fields
allowedByDatasets and allowedByProjects
add 9d95ec5c9e RANGER-4523: Suggestion on improving logs from
AtlasNotificationMapper
add fd9e03fd3d RANGER-4982: Reducing few ranger plugin logs to debug level
add 4e96dededa RANGER-4988: Adding syncSource and userRole queryParams to
ranger searchUsers rest api for swagger
add 9c492199f2 RANGER-4981: Log LDAP auth failures at error level in
ranger admin
add 2a340fa661 RANGER-4990: Rationalize processing of match-types for
policy and tag evaluation
add d6f4ebc7bd RANGER-4992: Adding new field zonedEventTime in
getAccessLogs API
add 08059b54ff RANGER-4986: Implement best practices for Ranger GDS REST
API module
add 5970eda4f0 RANGER-4997: Ranger DataShare created shows status as
ACTIVE instead of the default REQUESTED.
add 3efbbc7821 RANGER-4998: Add validations to Ensure Non-Empty Resource
Values in GDS Resource Creation and Edit APIs
add 89963fbefa RANGER-4989: DB patch fix for
add_validity_schedule_labels_keywords_in_x_gds_dataset in mysql
add dad4833d05 RANGER-4991: GDS policy evaluation support for masking and
row-filtering
add 316049090a RANGER-5001: RANGER-4977: Support ignoreDescendantDeny &
fix hbase scan authorization (#411)
add 925ed23118 RANGER-5001: Resolve merge conflicts to fix compilation
failure (#415)
add 806fd9d323 RANGER-5007: Expose service configs in RangerBasePlugin
(#414)
add dd5b5aa8f1 RANGER-5004: GDS masking to support use of a single mask
for multiple columns
add a553fa060d RANGER-5005: Use sortpom maven plugin to improve
readability of pom files
add 6c729a2564 RANGER-3641: KMS API to generate EDEK and DEK together
add 21b8ca9d96 RANGER-4942: Fix docker build with Dockerfile.ranger-build
and update env variables with ENV key=value format
add 651dcf2b0e RANGER-5010: fix validity schedule evaluator handling of
default timezone
add 6988b31579 RANGER-5000: Add validations to ensure that the policy
items are properly formed during dataset policy creation / edit
add 91cc8a9fbb RANGER-5016: Deprecate use of version field in
docker-compose.yaml (#421)
add cf736a5493 RANGER-4670: (hbase plugin) Config to support disabling
column authorization for fully authorized column families (#417)
add e01b345023 RANGER-4996: Made meta attributes fields in policy rest api
response configurable for retrieval
add 5c8d4d0451 RANGER-5017: update checkstyle to improve code readability
add 34e4b31ab5 RANGER-5065. Disable releases for apache.snapshots repo
(#435)
add c4ea5fdb32 RANGER-5033: checkstyle compliance updates - intg (#434)
add 6f57f2f696 RANGER-5066. Improve CI workflow (#438)
add 599eb5d782 RANGER-5041: checkstyle compliance updates - plugin-kudu
(#433)
add b35fec5b20 RANGER-5054: checkstyle compliance updates - ranger-authn
(#432)
add 0273c79f37 RANGER-5044: checkstyle compliance updates -
plugin-nifi-registry (#430)
add ceb3ff9630 RANGER-5057: checkstyle compliance updates - ranger-metrics
(#431)
add 1d53fc84dc RANGER-5018: checkstyle complince updates - agents-audit
add f5521c9fab RANGER-5017: skip checkstyle by default to reduce
unnecessary ERROR logs in CI build, can be enabled at module level - #2
add 7e4a629b3e RANGER-5067. ranger-nestedstructure-plugin is not built on
linux (#443)
add f056eae1fd RANGER-5008:Handle creation of federated user in Ranger
add 9930255638 RANGER-5019: Fix spotbug checks for sub-modules (#441)
add d8157a69e4 RANGER-5068: Bump rat-plugin to 0.16.1 (#445)
add 90a5ea0197 RANGER-5028: checkstyle compliance updates -
credentialbuilder (#444)
add 9d462dde38 RANGER-5021: Add timeouts to jobs in CI (#427)
add d482170dcf RANGER-5070: update profiles to include dependent modules
for kms and security-admin (#446)
add 0e4fed70ad RANGER-5025: checkstyle compliance updates - agents-common
add 234d28f4a1 RANGER-5071: CI - Revert to ubuntu-22.04 runner (#451)
add 47670e679f RANGER-5046: checkstyle compliance updates - plugin-ozone
(#429)
add 199a8157ee RANGER-5043: checkstyle compliance updates -
plugin-nestedstructure module (#449)
add 92f3466879 RANGER-5006: User name column in Ranger audit not rendering
properly when it is of larger length
add 6e62ae7563 RANGER-5062: checkstyle compliance updates - storm module
(#448)
add 0e3c357eff RANGER-5063: checkstyle compliance updates - tagsync (#447)
add c70be71786 RANGER-5052: checkstyle compliance updates - plugin-yarn
module (#452)
add 2f34ae59fd RANGER-5032: checkstyle compliance updates - hive-agent
(#450)
add e138b300b5 RANGER-5048: checkstyle compliance updates -
plugin-schema-registry module (#454)
add c34e780017 RANGER-5050: checkstyle compliance updates - plugin-sqoop
module (#456)
add db3cb2e2f5 RANGER-5073: docker setup updated to support Oracle database
add 990496a050 RANGER-5002: fix schema creation/migration failures with
Oracle database
add ae6ea0f749 RANGER-5027: agents-installer module: update for code
readability improvement (#458)
add a7f1a73256 RANGER-5059: checkstyle compliance updates - ranger-tools
add 20e0e69858 RANGER-5058: checkstyle compliance updates -
ranger-plugin-classloader (#460)
add decba1b44a RANGER-5049: checkstyle compliance updates - plugin-solr
module (#455)
add 728090e60b RANGER-5031: checkstyle compliance updates - hdfs-agent
(#461)
add d86e8201b4 [RANGER-5060]: checkstyle compliance updates - ranger-util
module (#462)
add d7e69e7663 RANGER-5037: checkstyle compliance updates - plugin-atlas
(#466)
add de2fa77e6b RANGER-4791 : Fixing build issue for Phantomjs Auto
configuration failed due to OPEN_SSL
add 7645b977e6 RANGER-5077: Autolink GitHub with Jira (#470)
add 15cc59f403 RANGER-5045: checkstyle compliance updates - plugin-nifi
module (#467)
add ece6a16fc8 RANGER-5042: checkstyle compliance updates - plugin-kylin
module (#468)
add a1f6239ca9 RANGER-5079: remove unnecessary warn log -
NashornScriptEngineCreator on JDK15 or higher (#472)
add c1e64ff3c2 RANGER-5055: checkstyle compliance updates -
ranger-common-ha
add caf6a1a9f9 RANGER-5039: checkstyle compliance updates - plugin-kafka
module (#463)
add 95d96348c4 RANGER-5030: checkstyle compliance updates - hbase-agent
module (#471)
add 05d4ff8ee3 RANGER-5035 : kms module: update for code readability
improvement (#474)
add b3e3b18aad RANGER-5053: checkstyle compliance updates - plugin-shim
modules (#473)
add 71eb184db1 RANGER-5075: fix for plugin installation failures due to
missing libraries
add 66f2e14f43 RANGER-5040 : plugin-kms module: update for code
readability improvement (#476)
add 425d22bb43 RANGER-5026: agents-cred module: update for code
readability improvement
add 426f2a0c50 RANGER-5064: checkstyle compliance updates - usersync
modules
add e080c0c790 RANGER-5029: checkstyle compliance updates -
embeddedwebserver module (#477)
add 932e3c6802 RANGER-5034: checkstyle compliance updates - jisql module
(#478)
add b6f14743f0 RANGER-4791 : Updating cookie and express dependencies in
Ranger Admin React package-lock.json
add df94b7f071 Revert "RANGER-4791 : Updating cookie and express
dependencies in Ranger Admin React package-lock.json"
add 0646b607aa RANGER-5083 : Updating cookie and express dependencies in
Ranger Admin React package-lock.json
add 218288b204 RANGER-4969 : Ranger - Upgrade commons-io to 2.17.0
add 26e951f623 RANGER-5038: checkstyle compliance updates - elasticsearch
module (#479)
add 36dc764093 RANGER-5051: checkstyle compliance updates - plugin-trino
(#480)
add 789604fcb8 RANGER-5056 : checkstyle compliance updates -
ranger-examples (#481)
add 87b4e05dc6 RANGER-5047: checkstyle compliance updates - presto module
(#482)
add 64fc4aaa85 RANGER-4453: Exception while calling solr api when ranger
authorisation is disabled for solr
add 236e69c8a4 RANGER-4520: Both usersync/tagsync instances becoming
active and syncing users/tags
add ca73b3c8c8 RANGER-5069: Add ability to Kafka authorizer to define
super users through Kafka config
add 6dd1af9ab3 RANGER-4388: KMS metrics - Implementing best practices
(#494)
add 8a605be505 RANGER-5089: Getting 204 instead of 404 status code when
invalid service name is passed
add 6b00c50fd4 RANGER-5036: checkstyle compliance updates - knox-agent
(#502)
add 080431f398 RANGER-5072: Bump org.apache.avro:avro from 1.11.3 to
1.11.4 (#453)
add 615e245b54 RANGER-5095: Bump atlas to 2.4.0 & spring-ldap-core to
2.4.4 (#500)
add 696a641d80 Bump jinja2 from 3.1.4 to 3.1.5 in
/ranger-tools/src/main/python (#475)
add bf080cfd5e RANGER-5085 : security-admin > react-webapp : update for
code readability improvement
add 6d0030aaf9 RANGER-4795: Add validation in API to check emptiness on
policyitem while creating policy.
add 46dfebeed3 RANGER-5061: checkstyle compliance updates - security-admin
module (#508)
add 852a26b70a RANGER-5017: enable checkstyle in root pom.xml (#509)
add e31eeb3fd5 RANGER-5103: RangerPluginConfig to support initialization
with additional config files (#510)
add 2050b4801e RANGER-4875: Improve API
/api/zones/{zoneId}/service-headers to filter services based on zone module
access.
add c7cacc8d5b RANGER-4879: Config Update for HA Implementation needed for
ranger-common-ha module
add 8d89fec991 RANGER-5015: Implementing Best Practices While Exporting
CSV and Excel Files
add 0d107800cf RANGER-5064: checkstyle compliance updates - usersync -
LdapUserGroupBuilder (#506)
add e221d19219 RANGER-5087: Bump nimbus-jose-jwt to 10.0.1 (#486)
add 6dbee2cab9 RANGER-5091: Bumpup dnsjava to 3.6.2 (#492)
add c292a0ae67 RANGER-5086: Bump protobuf to 3.25.5 (#485)
add 736562975e Update README.md in plugin-nestedstructure (#169)
add 9f9bf0f8fe RANGER-5106: Remove redundant mvn calls in README (#512)
add 0a09509d44 RANGER-4943: Error in ElasticSearchAuditDestination
shutting down RestHighLevelClient client (#397)
add 8f9bedfad6 RANGER-5017: updated sources to address 'may produce
NullPointerException' warning, and use <> operator while instantiating generic
types (#515)
add 2b65968a93 Merge branch 'master' into
dependabot/maven/knox-agent/org.eclipse.jetty-jetty-server-9.4.55.v20240627
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 2 +
.github/workflows/maven.yml | 42 +-
README.md | 2 +-
agents-audit/pom.xml | 396 +-
.../AmazonCloudWatchAuditDestination.java | 113 +-
.../ranger/audit/destination/AuditDestination.java | 80 +-
.../destination/ElasticSearchAuditDestination.java | 369 +-
.../audit/destination/FileAuditDestination.java | 435 +-
.../audit/destination/HDFSAuditDestination.java | 355 +-
.../audit/destination/Log4JAuditDestination.java | 202 +-
.../audit/destination/SolrAuditDestination.java | 899 +-
.../apache/ranger/audit/model/AuditEventBase.java | 14 +-
.../ranger/audit/model/AuditIndexRecord.java | 226 +-
.../apache/ranger/audit/model/AuthzAuditEvent.java | 1089 +-
.../ranger/audit/model/EnumRepositoryType.java | 31 +-
.../ranger/audit/model/SPOOL_FILE_STATUS.java | 2 +-
.../ranger/audit/provider/AsyncAuditProvider.java | 526 +-
.../audit/provider/AuditFileCacheProvider.java | 62 +-
.../apache/ranger/audit/provider/AuditHandler.java | 26 +-
.../audit/provider/AuditMessageException.java | 65 +-
.../audit/provider/AuditProviderFactory.java | 1034 +-
.../ranger/audit/provider/AuditWriterFactory.java | 90 +-
.../ranger/audit/provider/BaseAuditHandler.java | 935 +-
.../audit/provider/BufferedAuditProvider.java | 198 +-
.../apache/ranger/audit/provider/DebugTracer.java | 23 +-
.../ranger/audit/provider/DummyAuditProvider.java | 186 +-
.../ranger/audit/provider/LocalFileLogBuffer.java | 1277 +-
.../ranger/audit/provider/Log4jAuditProvider.java | 144 +-
.../apache/ranger/audit/provider/Log4jTracer.java | 56 +-
.../apache/ranger/audit/provider/LogBuffer.java | 11 +-
.../ranger/audit/provider/LogDestination.java | 28 +-
.../org/apache/ranger/audit/provider/MiscUtil.java | 1895 +--
.../audit/provider/MultiDestAuditProvider.java | 413 +-
.../provider/StandAloneAuditProviderFactory.java | 53 +-
.../audit/provider/hdfs/HdfsAuditProvider.java | 124 +-
.../audit/provider/hdfs/HdfsLogDestination.java | 922 +-
.../audit/provider/kafka/KafkaAuditProvider.java | 319 +-
.../audit/provider/solr/SolrAuditProvider.java | 537 +-
.../apache/ranger/audit/queue/AuditAsyncQueue.java | 358 +-
.../apache/ranger/audit/queue/AuditBatchQueue.java | 679 +-
.../audit/queue/AuditFileCacheProviderSpool.java | 1011 +-
.../apache/ranger/audit/queue/AuditFileQueue.java | 46 +-
.../ranger/audit/queue/AuditFileQueueSpool.java | 1000 +-
.../apache/ranger/audit/queue/AuditFileSpool.java | 1576 +--
.../org/apache/ranger/audit/queue/AuditQueue.java | 385 +-
.../ranger/audit/queue/AuditSummaryQueue.java | 469 +-
.../org/apache/ranger/audit/test/TestEvents.java | 53 +-
.../ranger/audit/utils/AbstractKerberosUser.java | 79 +-
.../audit/utils/AbstractRangerAuditWriter.java | 331 +-
.../audit/utils/InMemoryJAASConfiguration.java | 144 +-
.../apache/ranger/audit/utils/KerberosAction.java | 20 +-
.../ranger/audit/utils/KerberosJAASConfigUser.java | 25 +-
.../apache/ranger/audit/utils/KerberosUser.java | 7 +-
.../org/apache/ranger/audit/utils/ORCFileUtil.java | 373 +-
.../ranger/audit/utils/RangerAuditWriter.java | 2 +-
.../ranger/audit/utils/RangerJSONAuditWriter.java | 183 +-
.../ranger/audit/utils/RangerORCAuditWriter.java | 155 +-
.../apache/ranger/audit/utils/RollingTimeUtil.java | 494 +-
.../org/apache/ranger/audit/utils/SolrAppUtil.java | 11 +-
.../audit/utils/RangerJSONAuditWriterTest.java | 52 +-
agents-common/dev-support/spotbugsIncludeFile.xml | 64 -
agents-common/pom.xml | 195 +-
.../security/KrbPasswordSaverLoginModule.java | 79 +-
.../apache/hadoop/security/SecureClientLogin.java | 352 +-
.../admin/client/AbstractRangerAdminClient.java | 20 +-
.../ranger/admin/client/RangerAdminClient.java | 39 +-
.../ranger/admin/client/RangerAdminRESTClient.java | 2069 ++--
.../admin/client/datatype/GrantRevokeData.java | 420 +-
.../ranger/admin/client/datatype/RESTResponse.java | 364 +-
.../hadoop/config/RangerAdminConfig.java | 46 +-
.../hadoop/config/RangerAuditConfig.java | 15 +-
.../hadoop/config/RangerChainedPluginConfig.java | 46 +-
.../hadoop/config/RangerConfigConstants.java | 43 +-
.../hadoop/config/RangerConfiguration.java | 138 +-
.../hadoop/config/RangerLegacyConfigBuilder.java | 425 +-
.../hadoop/config/RangerPluginConfig.java | 117 +-
.../hadoop/constants/RangerHadoopConstants.java | 157 +-
.../ranger/authorization/utils/JsonUtils.java | 165 +-
.../ranger/authorization/utils/StringUtil.java | 976 +-
.../plugin/audit/RangerDefaultAuditHandler.java | 518 +-
.../audit/RangerMultiResourceAuditHandler.java | 77 +-
.../apache/ranger/plugin/client/BaseClient.java | 336 +-
.../ranger/plugin/client/HadoopConfigHolder.java | 870 +-
.../ranger/plugin/client/HadoopException.java | 86 +-
.../RangerAbstractConditionEvaluator.java | 51 +-
.../RangerAccessedFromClusterCondition.java | 51 +-
.../RangerAccessedFromClusterTypeCondition.java | 52 +-
.../RangerAccessedNotFromClusterCondition.java | 51 +-
.../RangerAccessedNotFromClusterTypeCondition.java | 52 +-
...AnyOfExpectedTagsPresentConditionEvaluator.java | 71 +-
.../RangerConditionEvaluator.java | 10 +-
.../RangerContextAttributeValueInCondition.java | 58 +-
.../RangerContextAttributeValueNotInCondition.java | 58 +-
...ngerHiveResourcesAccessedTogetherCondition.java | 243 +-
...rHiveResourcesNotAccessedTogetherCondition.java | 243 +-
.../plugin/conditionevaluator/RangerIpMatcher.java | 354 +-
...oneOfExpectedTagsPresentConditionEvaluator.java | 70 +-
.../RangerScriptConditionEvaluator.java | 145 +-
.../RangerScriptTemplateConditionEvaluator.java | 78 +-
.../RangerTagsAllPresentConditionEvaluator.java | 77 +-
.../conditionevaluator/RangerTimeOfDayMatcher.java | 345 +-
.../RangerValidityScheduleConditionEvaluator.java | 81 +
.../RangerAbstractContextEnricher.java | 505 +-
.../RangerAbstractGeolocationProvider.java | 207 +-
.../RangerAdminGdsInfoRetriever.java | 110 +-
.../contextenricher/RangerAdminTagRetriever.java | 84 +-
.../RangerAdminUserStoreRetriever.java | 9 +-
.../contextenricher/RangerContextEnricher.java | 22 +-
.../RangerFileBasedGeolocationProvider.java | 11 +-
.../RangerFileBasedTagRetriever.java | 365 +-
.../plugin/contextenricher/RangerGdsEnricher.java | 198 +-
.../contextenricher/RangerGdsInfoRetriever.java | 36 +-
.../RangerServiceResourceMatcher.java | 116 +-
.../plugin/contextenricher/RangerTagEnricher.java | 2140 ++--
.../plugin/contextenricher/RangerTagForEval.java | 151 +-
.../plugin/contextenricher/RangerTagRetriever.java | 68 +-
.../contextenricher/RangerUserStoreEnricher.java | 152 +-
.../contextenricher/RangerUserStoreRefresher.java | 284 +-
.../contextenricher/RangerUserStoreRetriever.java | 15 +-
.../externalretrievers/GetFromDataFile.java | 12 +-
.../externalretrievers/GetFromURL.java | 56 +-
.../RangerMultiSourceUserStoreRetriever.java | 197 +-
.../ranger/plugin/errors/ValidationErrorCode.java | 34 +-
.../apache/ranger/plugin/geo/BinarySearchTree.java | 414 +-
.../ranger/plugin/geo/GeolocationMetadata.java | 96 +-
.../org/apache/ranger/plugin/geo/RangeChecker.java | 2 +-
.../ranger/plugin/geo/RangerGeolocationData.java | 396 +-
.../plugin/geo/RangerGeolocationDatabase.java | 109 +-
.../org/apache/ranger/plugin/geo/ValuePrinter.java | 109 +-
.../apache/ranger/plugin/geo/ValueProcessor.java | 2 +-
.../apache/ranger/plugin/model/AuditFilter.java | 19 +-
.../org/apache/ranger/plugin/model/GroupInfo.java | 15 +-
.../ranger/plugin/model/RangerBaseModelObject.java | 552 +-
.../ranger/plugin/model/RangerDatasetHeader.java | 13 +-
.../org/apache/ranger/plugin/model/RangerGds.java | 882 +-
.../apache/ranger/plugin/model/RangerGrant.java | 103 +
.../apache/ranger/plugin/model/RangerMetrics.java | 10 +-
.../ranger/plugin/model/RangerPluginInfo.java | 961 +-
.../apache/ranger/plugin/model/RangerPolicy.java | 3526 +++---
.../ranger/plugin/model/RangerPolicyDelta.java | 91 +-
.../ranger/plugin/model/RangerPolicyHeader.java | 130 +
.../model/RangerPolicyResourceSignature.java | 596 +-
.../ranger/plugin/model/RangerPrincipal.java | 9 +-
.../org/apache/ranger/plugin/model/RangerRole.java | 223 +-
.../ranger/plugin/model/RangerSecurityZone.java | 115 +-
.../plugin/model/RangerSecurityZoneHeaderInfo.java | 5 +-
.../ranger/plugin/model/RangerSecurityZoneV2.java | 172 +-
.../ranger/plugin/model/RangerServerHealth.java | 55 +-
.../apache/ranger/plugin/model/RangerService.java | 507 +-
.../ranger/plugin/model/RangerServiceDef.java | 6670 +++++-----
.../plugin/model/RangerServiceHeaderInfo.java | 10 +
.../ranger/plugin/model/RangerServiceResource.java | 252 +-
.../model/RangerServiceResourceWithTags.java | 58 +-
.../ranger/plugin/model/RangerServiceTags.java | 84 +-
.../org/apache/ranger/plugin/model/RangerTag.java | 369 +-
.../apache/ranger/plugin/model/RangerTagDef.java | 30 +-
.../ranger/plugin/model/RangerTagResourceMap.java | 69 +-
.../plugin/model/RangerValidityRecurrence.java | 213 +-
.../plugin/model/RangerValiditySchedule.java | 56 +-
.../ranger/plugin/model/ServiceDeleteResponse.java | 80 +-
.../org/apache/ranger/plugin/model/UserInfo.java | 24 +-
.../model/validation/RangerPolicyValidator.java | 2407 ++--
.../model/validation/RangerRoleValidator.java | 394 +-
.../validation/RangerSecurityZoneValidator.java | 150 +-
.../model/validation/RangerServiceDefHelper.java | 1880 +--
.../validation/RangerServiceDefValidator.java | 1669 +--
.../model/validation/RangerServiceValidator.java | 631 +-
.../plugin/model/validation/RangerValidator.java | 1613 +--
.../RangerValidityScheduleValidator.java | 270 +-
.../validation/RangerZoneResourceMatcher.java | 40 +-
.../model/validation/ValidationFailureDetails.java | 156 +-
.../ValidationFailureDetailsBuilder.java | 84 +-
.../ranger/plugin/policyengine/CacheMap.java | 6 +-
.../ranger/plugin/policyengine/PolicyEngine.java | 609 +-
.../plugin/policyengine/PolicyEvaluatorForTag.java | 75 +-
.../plugin/policyengine/RangerAccessRequest.java | 58 +-
.../policyengine/RangerAccessRequestImpl.java | 744 +-
.../policyengine/RangerAccessRequestReadOnly.java | 208 +-
.../policyengine/RangerAccessRequestWrapper.java | 91 +-
.../plugin/policyengine/RangerAccessResource.java | 29 +-
.../policyengine/RangerAccessResourceImpl.java | 461 +-
.../policyengine/RangerAccessResourceReadOnly.java | 81 +-
.../plugin/policyengine/RangerAccessResult.java | 767 +-
.../policyengine/RangerAccessResultProcessor.java | 5 +-
.../plugin/policyengine/RangerMutableResource.java | 8 +-
.../plugin/policyengine/RangerPluginContext.java | 288 +-
.../plugin/policyengine/RangerPolicyEngine.java | 85 +-
.../policyengine/RangerPolicyEngineImpl.java | 2204 ++--
.../policyengine/RangerPolicyEngineOptions.java | 453 +-
.../policyengine/RangerPolicyRepository.java | 801 +-
.../policyengine/RangerRequestScriptEvaluator.java | 2328 ++--
.../plugin/policyengine/RangerResourceACLs.java | 1122 +-
.../policyengine/RangerResourceAccessInfo.java | 32 +-
.../plugin/policyengine/RangerResourceTrie.java | 786 +-
.../policyengine/RangerSecurityZoneMatcher.java | 77 +-
.../policyengine/RangerTagAccessRequest.java | 64 +-
.../plugin/policyengine/RangerTagResource.java | 22 +-
.../plugin/policyengine/gds/GdsAccessResult.java | 164 +-
.../policyengine/gds/GdsDataShareEvaluator.java | 22 +-
.../policyengine/gds/GdsDatasetEvaluator.java | 43 +-
.../plugin/policyengine/gds/GdsDipEvaluator.java | 4 +-
.../plugin/policyengine/gds/GdsDshidEvaluator.java | 2 +-
.../plugin/policyengine/gds/GdsPolicyEngine.java | 345 +-
.../policyengine/gds/GdsProjectEvaluator.java | 31 +-
.../gds/GdsSharedResourceEvaluator.java | 123 +-
.../RangerAbstractPolicyEvaluator.java | 966 +-
.../RangerAbstractPolicyItemEvaluator.java | 326 +-
.../RangerAuditPolicyEvaluator.java | 177 +-
.../RangerCustomConditionEvaluator.java | 30 +-
.../RangerDataMaskPolicyItemEvaluator.java | 5 +-
.../RangerDefaultDataMaskPolicyItemEvaluator.java | 88 +-
.../RangerDefaultPolicyEvaluator.java | 2472 ++--
.../RangerDefaultPolicyItemEvaluator.java | 471 +-
.../RangerDefaultRowFilterPolicyItemEvaluator.java | 75 +-
.../RangerOptimizedPolicyEvaluator.java | 204 +-
.../policyevaluator/RangerPolicyEvaluator.java | 1308 +-
.../policyevaluator/RangerPolicyItemEvaluator.java | 62 +-
.../RangerRowFilterPolicyItemEvaluator.java | 5 +-
.../RangerValidityScheduleEvaluator.java | 257 +-
.../RangerDefaultPolicyResourceMatcher.java | 822 +-
.../RangerPolicyResourceMatcher.java | 127 +-
.../RangerResourceEvaluator.java | 1 -
.../RangerAbstractResourceMatcher.java | 1326 +-
.../RangerDefaultResourceMatcher.java | 199 +-
.../resourcematcher/RangerPathResourceMatcher.java | 1314 +-
.../resourcematcher/RangerResourceMatcher.java | 19 +-
.../resourcematcher/RangerURLResourceMatcher.java | 373 +-
.../plugin/resourcematcher/ResourceMatcher.java | 183 +-
.../resourcematcher/ScheduledTimeExactMatcher.java | 3 +-
.../resourcematcher/ScheduledTimeRangeMatcher.java | 5 +-
.../ranger/plugin/service/RangerAuthContext.java | 6 +-
.../plugin/service/RangerAuthContextListener.java | 1 -
.../ranger/plugin/service/RangerBasePlugin.java | 2612 ++--
.../ranger/plugin/service/RangerBaseService.java | 901 +-
.../ranger/plugin/service/RangerChainedPlugin.java | 20 +-
.../service/RangerDefaultRequestProcessor.java | 32 +-
.../plugin/service/RangerDefaultService.java | 44 +-
.../plugin/service/ResourceLookupContext.java | 107 +-
.../ranger/plugin/store/AbstractGdsStore.java | 140 +-
.../ranger/plugin/store/AbstractPredicateUtil.java | 1908 ++-
.../ranger/plugin/store/AbstractServiceStore.java | 1215 +-
.../ranger/plugin/store/AbstractTagStore.java | 36 +-
.../plugin/store/EmbeddedServiceDefsUtil.java | 739 +-
.../org/apache/ranger/plugin/store/GdsStore.java | 5 -
.../ranger/plugin/store/GeolocationStore.java | 7 +-
.../java/org/apache/ranger/plugin/store/PList.java | 371 +-
.../store/RangerServiceResourceSignature.java | 158 +-
.../ranger/plugin/store/RolePredicateUtil.java | 236 +-
.../org/apache/ranger/plugin/store/RoleStore.java | 24 +-
.../plugin/store/SecurityZonePredicateUtil.java | 207 +-
.../ranger/plugin/store/SecurityZoneStore.java | 9 +-
.../ranger/plugin/store/ServicePredicateUtil.java | 391 +-
.../apache/ranger/plugin/store/ServiceStore.java | 95 +-
.../ranger/plugin/store/StoredServiceResource.java | 12 +-
.../ranger/plugin/store/TagPredicateUtil.java | 493 +-
.../org/apache/ranger/plugin/store/TagStore.java | 23 +-
.../apache/ranger/plugin/store/TagValidator.java | 459 +-
.../plugin/store/file/GeolocationFileStore.java | 344 +-
.../ranger/plugin/util/AutoClosableLock.java | 8 +-
.../plugin/util/CachedResourceEvaluators.java | 170 +
.../apache/ranger/plugin/util/DownloadTrigger.java | 4 +-
.../apache/ranger/plugin/util/DownloaderTask.java | 6 +-
.../plugin/util/GraalScriptEngineCreator.java | 22 +-
.../ranger/plugin/util/GrantRevokeRequest.java | 820 +-
.../ranger/plugin/util/GrantRevokeRoleRequest.java | 531 +-
.../apache/ranger/plugin/util/JavaScriptEdits.java | 13 +-
.../plugin/util/JavaScriptEngineCreator.java | 6 +-
.../org/apache/ranger/plugin/util/JsonUtilsV2.java | 35 +-
.../apache/ranger/plugin/util/KeySearchFilter.java | 216 +-
.../apache/ranger/plugin/util/MacroProcessor.java | 8 +-
.../plugin/util/NashornScriptEngineCreator.java | 6 +-
.../apache/ranger/plugin/util/PasswordUtils.java | 467 +-
.../ranger/plugin/util/PerfDataRecorder.java | 437 +-
.../apache/ranger/plugin/util/PolicyRefresher.java | 1032 +-
.../plugin/util/RangerAccessRequestUtil.java | 846 +-
.../org/apache/ranger/plugin/util/RangerCache.java | 206 +-
.../ranger/plugin/util/RangerCommonConstants.java | 315 +-
.../ranger/plugin/util/RangerMetricsUtil.java | 174 +-
.../ranger/plugin/util/RangerObjectFactory.java | 20 +-
.../plugin/util/RangerPerfCollectorTracer.java | 48 +-
.../ranger/plugin/util/RangerPerfTracer.java | 189 +-
.../plugin/util/RangerPerfTracerFactory.java | 94 +-
.../ranger/plugin/util/RangerPluginCapability.java | 171 +-
.../ranger/plugin/util/RangerPolicyDeltaUtil.java | 82 +-
.../ranger/plugin/util/RangerPurgeResult.java | 10 +-
.../ranger/plugin/util/RangerRESTClient.java | 1476 +--
.../apache/ranger/plugin/util/RangerRESTUtils.java | 213 +-
.../ranger/plugin/util/RangerReadWriteLock.java | 7 +-
.../plugin/util/RangerRequestExprResolver.java | 159 +-
.../plugin/util/RangerRequestedResources.java | 165 +-
.../util/RangerResourceEvaluatorsRetriever.java | 21 +-
.../org/apache/ranger/plugin/util/RangerRoles.java | 18 +-
.../ranger/plugin/util/RangerRolesProvider.java | 602 +-
.../apache/ranger/plugin/util/RangerRolesUtil.java | 24 +-
.../plugin/util/RangerSecurityZoneHelper.java | 31 +-
.../util/RangerServiceNotFoundException.java | 10 +-
.../plugin/util/RangerServiceTagsDeltaUtil.java | 73 +-
.../apache/ranger/plugin/util/RangerSslHelper.java | 489 +-
.../ranger/plugin/util/RangerTimeRangeChecker.java | 19 +-
.../apache/ranger/plugin/util/RangerUserStore.java | 40 +-
.../ranger/plugin/util/RangerUserStoreUtil.java | 84 +-
.../ranger/plugin/util/ScriptEngineUtil.java | 79 +-
.../apache/ranger/plugin/util/SearchFilter.java | 635 +-
.../apache/ranger/plugin/util/ServiceDefUtil.java | 664 +-
.../apache/ranger/plugin/util/ServiceGdsInfo.java | 196 +-
.../apache/ranger/plugin/util/ServicePolicies.java | 1042 +-
.../org/apache/ranger/plugin/util/ServiceTags.java | 604 +-
.../ranger/plugin/util/StringTokenReplacer.java | 34 +-
.../apache/ranger/plugin/util/TimedEventUtil.java | 75 +-
.../apache/ranger/plugin/util/URLEncoderUtil.java | 22 +-
.../org/apache/ranger/plugin/util/XMLUtils.java | 216 +-
.../ranger/services/gds/RangerServiceGds.java | 52 +-
.../ranger/services/tag/RangerServiceTag.java | 224 +-
.../src/main/resources/resourcenamemap.properties | 2 +-
.../service-defs/ranger-servicedef-gds.json | 7 +
.../ranger/authorization/utils/TestStringUtil.java | 61 +-
.../RangerCustomConditionMatcherTest.java | 541 +-
.../conditionevaluator/RangerIpMatcherTest.java | 444 +-
.../RangerRequestScriptEvaluatorTest.java | 331 +-
.../conditionevaluator/RangerSimpleMatcher.java | 179 +-
.../RangerTimeOfDayMatcherTest.java | 494 +-
...stRangerValidityScheduleConditionEvaluator.java | 163 +
.../plugin/contextenricher/TestTagEnricher.java | 29 +-
.../plugin/errors/TestValidationErrorCode.java | 21 +-
.../ranger/plugin/model/TestRangerHealth.java | 65 +-
.../ranger/plugin/model/TestRangerPolicy.java | 11 +-
.../model/TestRangerPolicyResourceSignature.java | 439 +-
.../ranger/plugin/model/TestRangerService.java | 8 +-
.../RangerSecurityZoneValidatorTest.java | 1120 +-
.../plugin/model/validation/TestDirectedGraph.java | 96 +-
.../validation/TestRangerPolicyValidator.java | 1775 +--
.../validation/TestRangerServiceDefHelper.java | 620 +-
.../validation/TestRangerServiceDefValidator.java | 1117 +-
.../validation/TestRangerServiceValidator.java | 1066 +-
.../model/validation/TestRangerValidator.java | 938 +-
.../model/validation/ValidationTestUtils.java | 820 +-
.../ranger/plugin/policyengine/TestCacheMap.java | 160 +-
.../plugin/policyengine/TestPathResourceTrie.java | 320 +-
.../ranger/plugin/policyengine/TestPolicyACLs.java | 561 +-
.../plugin/policyengine/TestPolicyEngine.java | 1824 +--
.../policyengine/TestPolicyEngineComparison.java | 67 +-
.../policyengine/TestPolicyEngineForDeltas.java | 810 +-
.../plugin/policyengine/TestProjectProvider.java | 114 +-
.../plugin/policyengine/TestRangerAuthContext.java | 177 +-
.../policyengine/TestRangerPluginCapability.java | 20 +-
.../TestRangerSecurityZoneMatcher.java | 41 +-
.../policyengine/gds/TestGdsPolicyEngine.java | 89 +-
.../RangerDefaultPolicyEvaluatorTest.java | 215 +-
.../RangerAbstractResourceMatcherTest.java | 24 +-
.../RangerDefaultResourceMatcherTest.java | 159 +-
.../RangerPathResourceMatcherTest.java | 256 +-
.../RangerURLResourceMatcherTest.java | 164 +-
.../TestDefaultPolicyResourceMatcher.java | 296 +-
.../TestDefaultPolicyResourceMatcherForPolicy.java | 306 +-
.../resourcematcher/TestResourceMatcher.java | 210 +-
.../plugin/service/TestRangerBasePlugin.java | 73 +-
.../ranger/plugin/util/JavaScriptEditsTest.java | 33 +-
.../ranger/plugin/util/MacroProcessorTest.java | 44 +-
.../ranger/plugin/util/PasswordUtilsTest.java | 350 +-
.../apache/ranger/plugin/util/RangerCacheTest.java | 114 +-
.../plugin/util/RangerRequestExprResolverTest.java | 22 +-
.../plugin/util/RangerTimeRangeCheckerTest.java | 94 +-
.../ranger/plugin/util/ServiceDefUtilTest.java | 947 +-
.../apache/ranger/plugin/util/TestServiceTags.java | 143 +
.../resources/plugin/test_base_plugin_hive.json | 2 +-
.../gds/gds_info_hive_access.json} | 54 +-
.../gds/gds_info_hive_data_mask.json} | 54 +-
.../gds/gds_info_hive_row_filter.json} | 32 +-
..._hive.json => test_gds_policy_hive_access.json} | 123 +-
...ve.json => test_gds_policy_hive_data_mask.json} | 147 +-
...e.json => test_gds_policy_hive_row_filter.json} | 115 +-
.../src/test/resources/policyengine/hbaseTags.json | 74 +
...incremental_update_for_wildcard_evaluators.json | 125 +
.../policyengine/test_policyengine_hive.json | 2 +-
.../test_policyengine_marker_access_types.json | 2 +-
.../policyengine/test_policyengine_tag_hbase.json | 179 +
.../test_policyengine_tag_hive_filebased.json | 26 +-
agents-cred/pom.xml | 78 +-
.../credutils/CredentialsProviderUtil.java | 127 +-
.../credutils/kerberos/AbstractJaasConf.java | 11 +-
.../kerberos/KerberosCredentialsProvider.java | 19 +-
.../credutils/kerberos/KeytabJaasConf.java | 2 +-
.../hadoop/utils/RangerCredentialProvider.java | 85 +-
.../hadoop/utils/RangerCredentialProviderTest.java | 315 +-
agents-installer/pom.xml | 11 +-
.../ranger/utils/install/XmlConfigChanger.java | 964 +-
credentialbuilder/pom.xml | 121 +-
.../ranger/credentialapi/CredentialReader.java | 124 +-
.../org/apache/ranger/credentialapi/buildks.java | 1054 +-
.../ranger/credentialapi/TestCredentialReader.java | 20 +-
.../apache/ranger/credentialapi/Testbuildks.java | 47 +-
dev-support/RangerCodeScheme-IntelliJ.xml | 501 +
dev-support/checkstyle-suppressions.xml | 68 +
dev-support/checkstyle.xml | 381 +-
dev-support/ranger-docker/.env | 1 +
dev-support/ranger-docker/Dockerfile.ranger | 11 +-
dev-support/ranger-docker/Dockerfile.ranger-base | 12 +-
.../ranger-docker/Dockerfile.ranger-base-ubi | 11 +-
dev-support/ranger-docker/Dockerfile.ranger-build | 15 +-
dev-support/ranger-docker/Dockerfile.ranger-hadoop | 14 +-
dev-support/ranger-docker/Dockerfile.ranger-hbase | 4 +-
dev-support/ranger-docker/Dockerfile.ranger-hive | 11 +-
dev-support/ranger-docker/Dockerfile.ranger-kafka | 4 +-
dev-support/ranger-docker/Dockerfile.ranger-kms | 4 +
dev-support/ranger-docker/Dockerfile.ranger-knox | 4 +-
dev-support/ranger-docker/Dockerfile.ranger-mysql | 2 +-
...le.ranger-postgres => Dockerfile.ranger-oracle} | 11 +-
.../ranger-docker/Dockerfile.ranger-postgres | 2 +-
dev-support/ranger-docker/README.md | 2 +-
dev-support/ranger-docker/config/init_oracle.sh | 45 +
.../docker-compose.ranger-base-ubi.yml | 1 -
.../ranger-docker/docker-compose.ranger-base.yml | 1 -
.../ranger-docker/docker-compose.ranger-build.yml | 1 -
.../ranger-docker/docker-compose.ranger-hadoop.yml | 1 -
.../ranger-docker/docker-compose.ranger-hbase.yml | 1 -
.../ranger-docker/docker-compose.ranger-hive.yml | 1 -
.../ranger-docker/docker-compose.ranger-kafka.yml | 1 -
.../ranger-docker/docker-compose.ranger-kms.yml | 1 -
.../ranger-docker/docker-compose.ranger-knox.yml | 1 -
.../ranger-docker/docker-compose.ranger-mysql.yml | 1 -
...stgres.yml => docker-compose.ranger-oracle.yml} | 11 +-
.../ranger-docker/docker-compose.ranger-ozone.yml | 17 -
.../docker-compose.ranger-postgres-mounted.yml | 1 -
.../docker-compose.ranger-postgres.yml | 1 -
.../docker-compose.ranger-tagsync.yml | 1 -
.../ranger-docker/docker-compose.ranger-trino.yml | 1 -
.../docker-compose.ranger-usersync.yml | 1 -
.../ranger-docker/docker-compose.ranger.yml | 1 -
dev-support/ranger-docker/download-archives.sh | 1 +
.../{hive-site-mysql.xml => hive-site-oracle.xml} | 4 +-
...ties => ranger-admin-install-oracle.properties} | 11 +-
...erties => ranger-kms-install-oracle.properties} | 10 +-
distro/pom.xml | 1436 +--
distro/src/main/assembly/hbase-agent.xml | 12 +-
distro/src/main/assembly/hdfs-agent.xml | 14 +-
distro/src/main/assembly/hive-agent.xml | 14 +-
distro/src/main/assembly/kms.xml | 14 +-
distro/src/main/assembly/knox-agent.xml | 14 +-
distro/src/main/assembly/plugin-atlas.xml | 28 +-
distro/src/main/assembly/plugin-elasticsearch.xml | 28 +-
distro/src/main/assembly/plugin-kafka.xml | 31 +-
distro/src/main/assembly/plugin-kms.xml | 32 +-
distro/src/main/assembly/plugin-kylin.xml | 14 +-
distro/src/main/assembly/plugin-ozone.xml | 24 +-
distro/src/main/assembly/plugin-presto.xml | 12 +-
distro/src/main/assembly/plugin-solr.xml | 18 +-
distro/src/main/assembly/plugin-sqoop.xml | 30 +-
distro/src/main/assembly/plugin-trino.xml | 14 +-
distro/src/main/assembly/plugin-yarn.xml | 38 +-
distro/src/main/assembly/storm-agent.xml | 12 +-
docs/pom.xml | 12 +
embeddedwebserver/pom.xml | 113 +-
.../tomcat/ElasticSearchIndexBootStrapper.java | 526 +-
.../ranger/server/tomcat/EmbeddedServer.java | 1140 +-
.../tomcat/EmbeddedServerMetricsCollector.java | 56 +-
.../ranger/server/tomcat/EmbeddedServerUtil.java | 221 +-
.../server/tomcat/SolrCollectionBootstrapper.java | 848 +-
.../ranger/server/tomcat/StopEmbeddedServer.java | 19 +-
hbase-agent/pom.xml | 392 +-
.../authorization/hbase/AuthorizationSession.java | 732 +-
.../ranger/authorization/hbase/ColumnIterator.java | 124 +-
.../authorization/hbase/HbaseAuditHandler.java | 50 +-
.../authorization/hbase/HbaseAuditHandlerImpl.java | 255 +-
.../ranger/authorization/hbase/HbaseAuthUtils.java | 24 +-
.../authorization/hbase/HbaseAuthUtilsImpl.java | 115 +-
.../ranger/authorization/hbase/HbaseConstants.java | 2 +
.../ranger/authorization/hbase/HbaseFactory.java | 62 +-
.../ranger/authorization/hbase/HbaseUserUtils.java | 55 +-
.../authorization/hbase/HbaseUserUtilsImpl.java | 218 +-
.../hbase/RangerAuthorizationCoprocessor.java | 3802 +++---
.../hbase/RangerAuthorizationFilter.java | 239 +-
.../authorization/hbase/RangerHBasePlugin.java | 79 +
.../authorization/hbase/RangerHBaseResource.java | 14 +-
.../ranger/services/hbase/RangerServiceHBase.java | 189 +-
.../ranger/services/hbase/client/HBaseClient.java | 817 +-
.../services/hbase/client/HBaseConnectionMgr.java | 198 +-
.../services/hbase/client/HBaseResourceMgr.java | 251 +-
.../hbase/AuthorizationSessionTest.java | 380 +-
.../authorization/hbase/ColumnIteratorTest.java | 219 +-
.../hbase/HBaseRangerAuthorizationTest.java | 971 +-
.../hbase/HbaseAuthUtilsImplTest.java | 19 +-
.../authorization/hbase/RangerAdminClientImpl.java | 25 +-
.../hbase/RangerAuthorizationCoprocessorTest.java | 43 +-
.../hbase/RangerAuthorizationFilterTest.java | 179 +-
.../authorization/hbase/TestPolicyEngine.java | 243 +-
.../services/hbase/TestRangerServiceHBase.java | 205 +-
hbase-agent/src/test/resources/hbase-policies.json | 97 +-
...st_policyengine_hbase_ignoreDenyDescendant.json | 55 +
hdfs-agent/pom.xml | 172 +-
.../authorization/hadoop/OperationOptimizer.java | 276 +
.../hadoop/RangerAccessControlEnforcer.java | 870 ++
.../hadoop/RangerHdfsAccessRequest.java | 79 +
.../hadoop/RangerHdfsAuditHandler.java | 222 +
.../authorization/hadoop/RangerHdfsAuthorizer.java | 1649 +--
.../authorization/hadoop/RangerHdfsPlugin.java | 138 +
...AccessVerifier.java => RangerHdfsResource.java} | 37 +-
.../exceptions/RangerAccessControlException.java | 11 +-
.../ranger/services/hdfs/RangerServiceHdfs.java | 350 +-
.../ranger/services/hdfs/client/HdfsClient.java | 604 +-
.../services/hdfs/client/HdfsConnectionMgr.java | 153 +-
.../services/hdfs/client/HdfsResourceMgr.java | 186 +-
.../ranger/services/hdfs/HDFSRangerTest.java | 418 +-
.../services/hdfs/RangerAdminClientImpl.java | 34 +-
.../services/hdfs/RangerHdfsAuthorizerTest.java | 315 +-
.../services/hdfs/client/HdfsClientTest.java | 299 +-
hive-agent/pom.xml | 206 +-
.../authorizer/XaSecureHiveAuthorizerFactory.java | 8 +-
.../hive/authorizer/RangerHiveAccessRequest.java | 191 +-
.../hive/authorizer/RangerHiveAuditHandler.java | 672 +-
.../hive/authorizer/RangerHiveAuthorizer.java | 6563 +++++-----
.../hive/authorizer/RangerHiveAuthorizerBase.java | 211 +-
.../authorizer/RangerHiveAuthorizerFactory.java | 20 +-
.../hive/authorizer/RangerHivePolicyProvider.java | 186 +-
.../hive/authorizer/RangerHiveResource.java | 239 +-
.../hive/authorizer/RangerHiveResourceACLs.java | 39 +-
.../hive/constants/RangerHiveConstants.java | 13 +-
.../ranger/services/hive/RangerServiceHive.java | 404 +-
.../ranger/services/hive/client/HiveClient.java | 1545 ++-
.../services/hive/client/HiveConnectionMgr.java | 145 +-
.../services/hive/client/HiveResourceMgr.java | 286 +-
.../services/hive/HIVERangerAuthorizerTest.java | 663 +-
.../services/hive/RangerAdminClientImpl.java | 27 +-
.../services/hive/RangerHiveOperationType.java | 27 +-
.../hive/TestAllHiveOperationInRanger.java | 21 +-
intg/pom.xml | 123 +-
.../main/java/org/apache/ranger/RangerClient.java | 123 +-
.../org/apache/ranger/RangerServiceException.java | 4 +-
.../main/python/apache_ranger/model/ranger_gds.py | 13 +-
.../java/org/apache/ranger/TestRangerClient.java | 49 +-
jisql/pom.xml | 11 +-
.../apache/util/outputformatter/CSVFormatter.java | 62 +-
.../util/outputformatter/DefaultFormatter.java | 359 +-
.../util/outputformatter/JisqlFormatter.java | 40 +-
.../apache/util/outputformatter/XMLFormatter.java | 71 +-
jisql/src/main/java/org/apache/util/sql/Jisql.java | 673 +-
.../java/org/apache/util/sql/MaskingThread.java | 44 +-
.../java/org/apache/util/sql/MySQLPLRunner.java | 251 +-
kms/dev-support/findbugsExcludeFile.xml | 48 -
kms/pom.xml | 688 +-
kms/scripts/db_setup.py | 2 +-
.../java/javax/ws/rs/core/NoContentException.java | 7 +-
.../key/AzureKeyVaultClientAuthenticator.java | 151 +-
.../org/apache/hadoop/crypto/key/ConsoleUtil.java | 20 +-
.../org/apache/hadoop/crypto/key/DB2HSMMKUtil.java | 142 +-
.../hadoop/crypto/key/DBToAzureKeyVault.java | 382 +-
.../apache/hadoop/crypto/key/DBToKeySecure.java | 190 +-
.../org/apache/hadoop/crypto/key/HSM2DBMKUtil.java | 143 +-
.../apache/hadoop/crypto/key/JKS2RangerUtil.java | 391 +-
.../crypto/key/KeySecureToRangerDBMKUtil.java | 120 +-
.../hadoop/crypto/key/MigrateDBMKeyToGCP.java | 152 +-
.../apache/hadoop/crypto/key/Ranger2JKSUtil.java | 354 +-
.../hadoop/crypto/key/RangerAWSKMSProvider.java | 78 +-
.../key/RangerAzureKeyVaultKeyGenerator.java | 425 +-
.../crypto/key/RangerGoogleCloudHSMProvider.java | 370 +-
.../org/apache/hadoop/crypto/key/RangerHSM.java | 86 +-
.../org/apache/hadoop/crypto/key/RangerKMSDB.java | 149 +-
.../org/apache/hadoop/crypto/key/RangerKMSMKI.java | 15 +-
.../apache/hadoop/crypto/key/RangerKeyStore.java | 653 +-
.../hadoop/crypto/key/RangerKeyStoreProvider.java | 403 +-
.../apache/hadoop/crypto/key/RangerMasterKey.java | 532 +-
.../hadoop/crypto/key/RangerSafenetKeySecure.java | 304 +-
.../crypto/key/RangerTencentKMSProvider.java | 199 +-
.../crypto/key/VerifyIsDBMasterkeyCorrect.java | 86 +-
.../crypto/key/VerifyIsHSMMasterkeyCorrect.java | 120 +-
...agerKeyGeneratorKeyProviderCryptoExtension.java | 280 +-
.../apache/hadoop/crypto/key/kms/server/KMS.java | 1116 +-
.../hadoop/crypto/key/kms/server/KMSACLs.java | 487 +-
.../hadoop/crypto/key/kms/server/KMSACLsType.java | 21 +-
.../hadoop/crypto/key/kms/server/KMSAudit.java | 426 +-
.../crypto/key/kms/server/KMSAuditLogger.java | 231 +-
.../key/kms/server/KMSAuthenticationFilter.java | 231 +-
.../crypto/key/kms/server/KMSConfiguration.java | 177 +-
.../key/kms/server/KMSExceptionsProvider.java | 157 +-
.../crypto/key/kms/server/KMSJMXServlet.java | 16 +-
.../crypto/key/kms/server/KMSJSONReader.java | 31 +-
.../crypto/key/kms/server/KMSJSONWriter.java | 42 +-
.../hadoop/crypto/key/kms/server/KMSMDCFilter.java | 134 +-
.../crypto/key/kms/server/KMSMetricUtil.java | 300 +-
.../crypto/key/kms/server/KMSServerJSONUtils.java | 76 +-
.../hadoop/crypto/key/kms/server/KMSWebApp.java | 551 +-
.../kms/server/KeyAuthorizationKeyProvider.java | 566 +-
.../hadoop/crypto/key/kms/server/MetricREST.java | 27 +-
.../crypto/key/kms/server/RangerKMSRestApi.java | 30 +-
.../key/kms/server/SimpleKMSAuditLogger.java | 112 +-
.../apache/ranger/common/RangerJsonProvider.java | 7 +-
.../java/org/apache/ranger/entity/XXDBBase.java | 416 +-
.../org/apache/ranger/entity/XXRangerKeyStore.java | 202 +-
.../apache/ranger/entity/XXRangerMasterKey.java | 84 +-
.../apache/ranger/kms/biz/RangerKMSStartUp.java | 53 +-
.../java/org/apache/ranger/kms/dao/BaseDao.java | 44 +-
.../org/apache/ranger/kms/dao/DaoManagerBase.java | 46 +-
.../org/apache/ranger/kms/dao/RangerKMSDao.java | 14 +-
.../apache/ranger/kms/dao/RangerMasterKeyDao.java | 7 +-
.../ranger/kms/metrics/KMSMetricWrapper.java | 59 +-
.../org/apache/ranger/kms/metrics/KMSMetrics.java | 82 +-
.../kms/metrics/collector/KMSMetricsCollector.java | 96 +-
.../ranger/kms/metrics/source/KMSMetricSource.java | 66 +-
kms/src/main/resources/hadoop-metrics2.properties | 1 -
.../hadoop/crypto/key/kms/TestRangerKeyStore.java | 269 +-
.../crypto/key/kms/server/DerbyTestUtils.java | 17 +-
.../key/kms/server/RangerKeyStoreProviderTest.java | 93 +-
.../crypto/key/kms/server/RangerMasterKeyTest.java | 83 +-
.../hadoop/crypto/key/kms/server/TestKMSACLs.java | 336 +-
.../hadoop/crypto/key/kms/server/TestKMSAudit.java | 321 +-
.../kms/server/TestKMSAuthenticationFilter.java | 27 +-
.../server/TestKeyAuthorizationKeyProvider.java | 444 +-
.../ranger/kms/metrics/TestKMSMetricsWrapper.java | 33 +-
kms/src/test/resources/hadoop-metrics2.properties | 1 -
knox-agent/pom.xml | 309 +-
.../admin/client/RangerAdminJersey2RESTClient.java | 2263 ++--
.../authorization/knox/KnoxRangerPlugin.java | 214 +-
.../authorization/knox/RangerPDPKnoxFilter.java | 356 +-
.../ranger/services/knox/RangerServiceKnox.java | 175 +-
.../ranger/services/knox/client/KnoxClient.java | 791 +-
.../services/knox/client/KnoxConnectionMgr.java | 130 +-
.../services/knox/client/KnoxResourceMgr.java | 168 +-
.../ranger/services/knox/KnoxRangerTest.java | 337 +-
.../services/knox/RangerAdminClientImpl.java | 25 +-
plugin-atlas/pom.xml | 82 +-
.../atlas/authorizer/RangerAtlasAuthorizer.java | 187 +-
.../ranger/services/atlas/RangerServiceAtlas.java | 955 +-
.../atlas/json/model/ResourceEntityResponse.java | 74 +-
.../json/model/ResourceOperationResponse.java | 116 +-
.../atlas/json/model/ResourceTaxonomyResponse.java | 43 +-
.../atlas/json/model/ResourceTermResponse.java | 44 +-
.../atlas/json/model/ResourceTypeResponse.java | 44 +-
plugin-elasticsearch/pom.xml | 122 +-
.../RangerElasticsearchAuditHandler.java | 70 +-
.../authorizer/RangerElasticsearchAuthorizer.java | 202 +-
.../elasticsearch/RangerServiceElasticsearch.java | 177 +-
.../elasticsearch/client/ElasticsearchClient.java | 488 +-
.../client/ElasticsearchResourceMgr.java | 132 +-
.../elasticsearch/privilege/IndexPrivilege.java | 51 +-
.../privilege/IndexPrivilegeUtils.java | 132 +-
plugin-kafka/pom.xml | 147 +-
.../kafka/authorizer/RangerKafkaAuditHandler.java | 85 +-
.../kafka/authorizer/RangerKafkaAuthorizer.java | 623 +-
.../ranger/services/kafka/RangerServiceKafka.java | 192 +-
.../services/kafka/client/ServiceKafkaClient.java | 415 +-
.../kafka/client/ServiceKafkaConnectionMgr.java | 127 +-
.../authorizer/KafkaRangerAuthorizerGSSTest.java | 189 +-
.../KafkaRangerAuthorizerSASLSSLTest.java | 126 +-
.../authorizer/KafkaRangerAuthorizerTest.java | 444 +-
.../authorizer/KafkaRangerTopicCreationTest.java | 116 +-
.../kafka/authorizer/KafkaTestUtils.java | 108 +-
.../kafka/authorizer/RangerAdminClientImpl.java | 28 +-
plugin-kms/pom.xml | 40 +-
.../kms/authorizer/RangerKMSAccessRequest.java | 29 +-
.../kms/authorizer/RangerKMSPlugin.java | 20 +-
.../kms/authorizer/RangerKMSResource.java | 15 +-
.../kms/authorizer/RangerKmsAuthorizer.java | 614 +-
.../ranger/services/kms/RangerServiceKMS.java | 397 +-
.../ranger/services/kms/client/KMSClient.java | 738 +-
.../services/kms/client/KMSConnectionMgr.java | 31 +-
.../ranger/services/kms/client/KMSResourceMgr.java | 121 +-
.../client/json/model/KMSSchedulerResponse.java | 93 +-
.../kms/authorizer/DerbyTestUtils.java | 16 +-
.../kms/authorizer/RangerAdminClientImpl.java | 19 +-
.../kms/authorizer/RangerKmsAuthorizerTest.java | 172 +-
plugin-kudu/pom.xml | 21 +-
.../ranger/services/kudu/RangerServiceKudu.java | 10 +-
plugin-kylin/pom.xml | 124 +-
.../kylin/authorizer/RangerKylinAuthorizer.java | 256 +-
.../ranger/services/kylin/RangerServiceKylin.java | 116 +-
.../ranger/services/kylin/client/KylinClient.java | 508 +-
.../services/kylin/client/KylinResourceMgr.java | 132 +-
.../client/json/model/KylinProjectResponse.java | 124 +-
.../kylin/authorizer/RangerAdminClientImpl.java | 31 +-
.../authorizer/RangerKylinAuthorizerTest.java | 1012 +-
plugin-kylin/src/test/resources/kylin.properties | 2 +-
plugin-nestedstructure/README.md | 2 +-
plugin-nestedstructure/pom.xml | 148 +-
.../nestedstructure/authorizer/AccessResult.java | 42 +-
.../nestedstructure/authorizer/DataMasker.java | 98 +-
.../authorizer/FieldLevelAccess.java | 35 +-
.../authorizer/JsonManipulator.java | 78 +-
.../nestedstructure/authorizer/MaskTypes.java | 64 +-
.../authorizer/MaskingException.java | 34 +-
.../authorizer/NestedStructureAccessType.java | 45 +-
.../authorizer/NestedStructureAuditHandler.java | 7 +-
.../authorizer/NestedStructureAuthorizer.java | 68 +-
.../authorizer/NestedStructureResource.java | 40 +-
.../authorizer/NestedStructureService.java | 38 +-
.../authorizer/RecordFilterJavaScript.java | 96 +-
.../nestedstructure/authorizer/ExampleClient.java | 48 +-
.../nestedstructure/authorizer/TestDataMasker.java | 127 +-
.../authorizer/TestJsonManipulator.java | 119 +-
.../authorizer/TestNestedStructureAuthorizer.java | 28 +-
.../authorizer/TestRecordFilterJavaScript.java | 29 +-
plugin-nifi-registry/pom.xml | 32 +-
.../nifi/registry/RangerServiceNiFiRegistry.java | 15 +-
.../nifi/registry/client/NiFiRegistryAuthType.java | 2 -
.../nifi/registry/client/NiFiRegistryClient.java | 92 +-
.../nifi/registry/client/NiFiRegistryConfigs.java | 21 +-
.../registry/client/NiFiRegistryConnectionMgr.java | 45 +-
.../registry/client/TestNiFiRegistryClient.java | 14 +-
.../client/TestNiFiRegistryConnectionMgr.java | 20 +-
plugin-nifi/pom.xml | 28 +-
.../ranger/services/nifi/RangerServiceNiFi.java | 19 +-
.../ranger/services/nifi/client/NiFiAuthType.java | 2 -
.../ranger/services/nifi/client/NiFiClient.java | 97 +-
.../ranger/services/nifi/client/NiFiConfigs.java | 18 +-
.../services/nifi/client/NiFiConnectionMgr.java | 43 +-
.../services/nifi/client/TestNiFiClient.java | 16 +-
.../nifi/client/TestNiFiConnectionMgr.java | 20 +-
plugin-ozone/pom.xml | 121 +-
.../ozone/authorizer/RangerOzoneAuthorizer.java | 356 +-
.../ranger/services/ozone/RangerServiceOzone.java | 132 +-
.../ranger/services/ozone/client/OzoneClient.java | 145 +-
.../services/ozone/client/OzoneConnectionMgr.java | 40 +-
.../services/ozone/client/OzoneResourceMgr.java | 125 +-
plugin-presto/pom.xml | 81 +-
.../presto/authorizer/PrestoAccessType.java | 7 +-
.../authorizer/RangerPrestoAccessRequest.java | 20 +-
.../presto/authorizer/RangerPrestoResource.java | 83 +
.../authorizer/RangerSystemAccessControl.java | 1353 +-
.../services/presto/RangerServicePresto.java | 143 +-
.../services/presto/client/PrestoClient.java | 923 +-
.../presto/client/PrestoConnectionManager.java | 117 +-
.../presto/client/PrestoResourceManager.java | 236 +-
.../presto/authorizer/RangerAdminClientImpl.java | 24 +-
.../authorizer/RangerSystemAccessControlTest.java | 267 +-
plugin-schema-registry/pom.xml | 186 +-
.../registry/RangerServiceSchemaRegistry.java | 29 +-
.../registry/client/AutocompletionAgent.java | 72 +-
.../registry/client/SchemaRegistryResourceMgr.java | 87 +-
.../connection/DefaultSchemaRegistryClient.java | 294 +-
.../client/connection/ISchemaRegistryClient.java | 4 +-
.../client/connection/util/SecurityUtils.java | 182 +-
.../registry/client/AutocompletionAgentTest.java | 83 +-
.../client/SchemaRegistryResourceMgrTest.java | 56 +-
.../DefaultSchemaRegistryClientTest.java | 81 +-
.../client/connection/util/SecurityUtilsTest.java | 53 +-
.../client/util/AcceptAllHostnameVerifier.java | 2 +-
.../DefaultSchemaRegistryClientForTesting.java | 2 -
.../client/util/TestAutocompletionAgent.java | 9 +-
plugin-solr/pom.xml | 98 +-
.../solr/authorizer/FieldToAttributeMapping.java | 55 +-
.../solr/authorizer/RangerSolrAuditHandler.java | 31 +-
.../solr/authorizer/RangerSolrAuthorizer.java | 1770 +--
.../solr/authorizer/SolrAuthzUtil.java | 424 +-
.../solr/authorizer/SubsetQueryPlugin.java | 38 +-
.../ranger/services/solr/RangerServiceSolr.java | 144 +-
.../ranger/services/solr/RangerSolrConstants.java | 77 +-
.../services/solr/client/ServiceSolrClient.java | 1124 +-
.../solr/client/ServiceSolrConnectionMgr.java | 61 +-
plugin-sqoop/pom.xml | 105 +-
.../sqoop/authorizer/RangerSqoopAuthorizer.java | 274 +-
.../ranger/services/sqoop/RangerServiceSqoop.java | 104 +-
.../ranger/services/sqoop/client/SqoopClient.java | 584 +-
.../services/sqoop/client/SqoopResourceMgr.java | 165 +-
.../client/json/model/SqoopConnectorResponse.java | 51 +-
.../client/json/model/SqoopConnectorsResponse.java | 22 +-
.../sqoop/client/json/model/SqoopJobResponse.java | 121 +-
.../sqoop/client/json/model/SqoopJobsResponse.java | 22 +-
.../sqoop/client/json/model/SqoopLinkResponse.java | 70 +-
.../client/json/model/SqoopLinksResponse.java | 22 +-
.../sqoop/authorizer/RangerAdminClientImpl.java | 36 +-
.../authorizer/RangerSqoopAuthorizerTest.java | 1761 +--
.../src/test/resources/sqoop_bootstrap.properties | 2 +-
plugin-trino/pom.xml | 8 +-
.../ranger/services/trino/RangerServiceTrino.java | 120 +-
.../ranger/services/trino/client/TrinoClient.java | 528 +-
.../trino/client/TrinoConnectionManager.java | 46 +-
.../trino/client/TrinoResourceManager.java | 147 +-
.../trino/authorizer/RangerAdminClientImpl.java | 8 +-
plugin-yarn/pom.xml | 56 +-
.../yarn/authorizer/RangerYarnAuthorizer.java | 528 +-
.../ranger/services/yarn/RangerServiceYarn.java | 216 +-
.../ranger/services/yarn/client/YarnClient.java | 580 +-
.../services/yarn/client/YarnConnectionMgr.java | 7 +-
.../services/yarn/client/YarnResourceMgr.java | 97 +-
.../client/json/model/YarnSchedulerResponse.java | 90 +-
pom.xml | 1557 +--
ranger-atlas-plugin-shim/pom.xml | 58 +-
.../atlas/authorizer/RangerAtlasAuthorizer.java | 276 +-
ranger-authn/pom.xml | 67 +-
.../apache/ranger/authz/handler/RangerAuth.java | 28 +-
.../ranger/authz/handler/RangerAuthHandler.java | 9 +-
.../handler/jwt/RangerDefaultJwtAuthHandler.java | 71 +-
.../authz/handler/jwt/RangerJwtAuthHandler.java | 67 +-
ranger-common-ha/pom.xml | 106 +-
.../org/apache/ranger/RangerHAInitializer.java | 58 +-
.../ranger/ha/ActiveInstanceElectorService.java | 340 +-
.../org/apache/ranger/ha/ActiveInstanceState.java | 182 +-
.../apache/ranger/ha/ActiveStateChangeHandler.java | 46 +-
.../java/org/apache/ranger/ha/CuratorFactory.java | 351 +-
.../java/org/apache/ranger/ha/HAConfiguration.java | 471 +-
.../ranger/ha/RangerServiceServerIdSelector.java | 131 +-
.../java/org/apache/ranger/ha/ServiceState.java | 165 +-
.../ranger/ha/ZookeeperSecurityProperties.java | 103 +-
.../org/apache/ranger/ha/annotation/HAService.java | 2 -
.../apache/ranger/ha/service/HARangerService.java | 2 -
.../apache/ranger/ha/service/ServiceManager.java | 72 +-
.../service/TestRangerServiceServerIdSelector.java | 14 +-
.../src/test/resources/ranger-tagsync-site.xml | 4 +-
ranger-elasticsearch-plugin-shim/pom.xml | 110 +-
.../RangerElasticsearchAccessControl.java | 23 +-
.../authorizer/RangerElasticsearchAuthorizer.java | 164 +-
.../plugin/RangerElasticsearchPlugin.java | 165 +-
.../action/filter/RangerSecurityActionFilter.java | 86 +-
.../plugin/authc/user/UsernamePasswordToken.java | 113 +-
.../rest/filter/RangerSecurityRestFilter.java | 60 +-
.../elasticsearch/plugin/utils/RequestUtils.java | 521 +-
ranger-examples/conditions-enrichers/pom.xml | 8 +-
.../RangerPolicyConditionSampleSimpleMatcher.java | 230 +-
.../RangerSampleSimpleMatcher.java | 230 +-
.../RangerSampleCountryProvider.java | 120 +-
.../RangerSampleProjectProvider.java | 112 +-
.../RangerSampleSimpleMatcherTest.java | 230 +-
.../dev-support/findbugsIncludeFile.xml | 25 -
ranger-examples/distro/pom.xml | 45 +-
ranger-examples/plugin-sampleapp/pom.xml | 148 +-
.../ranger/examples/sampleapp/IAuthorizer.java | 4 +-
.../examples/sampleapp/RangerAuthorizer.java | 15 +-
ranger-examples/pom.xml | 8 +-
ranger-examples/sample-client/pom.xml | 34 +-
.../ranger/examples/sampleclient/SampleClient.java | 104 +-
.../src/main/python/sample_gds_client.py | 20 +-
ranger-examples/sampleapp/pom.xml | 20 +-
.../examples/sampleapp/DefaultAuthorizer.java | 4 +-
.../ranger/examples/sampleapp/IAuthorizer.java | 4 +-
.../ranger/examples/sampleapp/SampleApp.java | 171 +-
ranger-hbase-plugin-shim/pom.xml | 54 +-
.../hbase/XaSecureAuthorizationCoprocessor.java | 8 +-
.../hbase/RangerAuthorizationCoprocessor.java | 4055 ++----
.../access/RangerAccessControlListsTest.java | 55 +-
ranger-hdfs-plugin-shim/pom.xml | 32 +-
.../authorization/hadoop/RangerHdfsAuthorizer.java | 182 +-
ranger-hive-plugin-shim/pom.xml | 38 +-
.../authorizer/XaSecureHiveAuthorizerFactory.java | 7 +-
.../authorizer/RangerHiveAuthorizerFactory.java | 154 +-
ranger-kafka-plugin-shim/pom.xml | 31 +-
.../kafka/authorizer/RangerKafkaAuthorizer.java | 229 +-
ranger-kms-plugin-shim/pom.xml | 38 +-
.../kms/authorizer/RangerKmsAuthorizer.java | 298 +-
ranger-knox-plugin-shim/pom.xml | 28 +-
.../authorization/knox/RangerPDPKnoxFilter.java | 185 +-
.../deploy/RangerPDPKnoxDeploymentContributor.java | 72 +-
ranger-kylin-plugin-shim/pom.xml | 69 +-
.../kylin/authorizer/RangerKylinAuthorizer.java | 143 +-
ranger-metrics/pom.xml | 44 +-
.../ranger/metrics/RangerMetricsSystemWrapper.java | 35 +-
.../ranger/metrics/sink/RangerMetricsJsonSink.java | 28 +-
.../metrics/sink/RangerMetricsPrometheusSink.java | 21 +-
.../source/RangerMetricsContainerSource.java | 43 +-
.../metrics/source/RangerMetricsJvmSource.java | 96 +-
.../ranger/metrics/source/RangerMetricsSource.java | 6 +-
.../metrics/wrapper/RangerMetricsSinkWrapper.java | 8 +-
.../source/TestRangerMetricsContainerSource.java | 67 +-
ranger-ozone-plugin-shim/pom.xml | 55 +-
.../ozone/authorizer/RangerOzoneAuthorizer.java | 69 +-
ranger-plugin-classloader/pom.xml | 13 +-
.../classloader/PluginClassLoaderActivator.java | 35 +-
.../classloader/RangerPluginClassLoader.java | 297 +-
.../classloader/RangerPluginClassLoaderUtil.java | 206 +-
.../ranger/plugin/classloader/test/TestPlugin.java | 2 +-
.../plugin/classloader/test/TestPrintParent.java | 9 +-
.../{Impl => impl}/TestChildFistClassLoader.java | 58 +-
.../test/{Impl => impl}/TestPluginImpl.java | 13 +-
.../classloader/test/{Impl => impl}/TestPrint.java | 12 +-
ranger-presto-plugin-shim/pom.xml | 130 +-
.../presto/authorizer/PrestoRangerPlugin.java | 13 +-
.../presto/authorizer/RangerConfig.java | 84 +-
.../authorizer/RangerSystemAccessControl.java | 848 +-
.../RangerSystemAccessControlFactory.java | 59 +-
ranger-solr-plugin-shim/pom.xml | 98 +-
.../solr/authorizer/RangerSolrAuthorizer.java | 316 +-
ranger-sqoop-plugin-shim/pom.xml | 69 +-
.../sqoop/authorizer/RangerSqoopAuthorizer.java | 146 +-
ranger-storm-plugin-shim/pom.xml | 52 +-
.../storm/authorizer/XaSecureStormAuthorizer.java | 4 +-
.../storm/authorizer/RangerStormAuthorizer.java | 193 +-
ranger-tools/pom.xml | 64 +-
.../ranger/policyengine/CommandLineParser.java | 249 +-
.../apache/ranger/policyengine/PerfTestClient.java | 241 +-
.../apache/ranger/policyengine/PerfTestEngine.java | 134 +-
.../ranger/policyengine/PerfTestOptions.java | 125 +-
.../RangerAccessRequestDeserializer.java | 32 +-
.../policyengine/RangerPluginPerfTester.java | 349 +-
.../policyengine/RangerPolicyenginePerfTester.java | 106 +-
.../policyengine/RangerResourceDeserializer.java | 28 +-
.../perftest/v2/RangerPolicyFactory.java | 419 +-
.../apache/ranger/sizing/PerfMemTimeTracker.java | 16 +-
.../apache/ranger/sizing/PerfRequestGenerator.java | 4 +-
.../org/apache/ranger/sizing/RangerMemSizing.java | 1197 +-
ranger-tools/src/main/python/requirements.txt | 2 +-
.../apache/ranger/policyengine/PerfTesterTest.java | 27 +-
.../RangerPolicyEnginePerformanceTest.java | 328 +-
ranger-util/pom.xml | 20 +-
.../ranger/common/RangerVersionAnnotation.java | 90 +-
.../apache/ranger/common/RangerVersionInfo.java | 210 +-
ranger-util/src/scripts/saveVersion.py | 44 +-
ranger-yarn-plugin-shim/pom.xml | 46 +-
.../yarn/authorizer/RangerYarnAuthorizer.java | 241 +-
.../optimized/current/ranger_core_db_mysql.sql | 32 +-
.../patches/074-create-index-for-x_trx_log.sql | 8 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 19 +-
.../optimized/current/ranger_core_db_oracle.sql | 13 +-
.../oracle/patches/068-create-view-principal.sql | 23 +
.../patches/069-add-gz_json_x_security_zone.sql} | 14 +-
...on_info.sql => 072-alter-x_access_type_def.sql} | 4 +-
..._trx_log_v2.sql => 073-create-x_trx_log_v2.sql} | 1 +
..._log.sql => 074-create-index-for-x_trx_log.sql} | 12 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 16 +-
.../optimized/current/ranger_core_db_postgres.sql | 32 +-
.../patches/074-create-index-for-x_trx_log.sql | 12 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 20 +-
.../current/ranger_core_db_sqlanywhere.sql | 6 +-
.../patches/068-create-index-for-x_trx_log.sql | 19 -
..._trx_log_v2.sql => 073-create-x_trx_log_v2.sql} | 0
...size.sql => 074-create-index-for-x_trx_log.sql} | 11 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 12 +-
.../optimized/current/ranger_core_db_sqlserver.sql | 5 +-
..._trx_log_v2.sql => 073-create-x_trx_log_v2.sql} | 0
..._log.sql => 074-create-index-for-x_trx_log.sql} | 15 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 15 +-
security-admin/pom.xml | 1031 +-
.../java/javax/ws/rs/core/NoContentException.java | 7 +-
.../org/apache/ranger/AccessAuditsService.java | 136 +-
.../cloudwatch/CloudWatchAccessAuditsService.java | 503 +-
.../ranger/amazon/cloudwatch/CloudWatchMgr.java | 83 +-
.../ranger/amazon/cloudwatch/CloudWatchUtil.java | 474 +-
.../unix/jaas/RoleUserAuthorityGranter.java | 25 +-
.../main/java/org/apache/ranger/biz/AssetMgr.java | 2603 ++--
.../java/org/apache/ranger/biz/AssetMgrBase.java | 152 +-
.../main/java/org/apache/ranger/biz/BaseMgr.java | 44 +-
.../java/org/apache/ranger/biz/GdsDBStore.java | 1201 +-
.../org/apache/ranger/biz/GdsPolicyAdminCache.java | 10 +-
.../main/java/org/apache/ranger/biz/KmsKeyMgr.java | 1408 ++-
.../org/apache/ranger/biz/PolicyRefUpdater.java | 952 +-
.../java/org/apache/ranger/biz/RangerBizUtil.java | 3088 ++---
.../org/apache/ranger/biz/RangerPolicyAdmin.java | 12 +-
.../apache/ranger/biz/RangerPolicyAdminCache.java | 364 +-
.../RangerPolicyAdminCacheForEngineOptions.java | 6 +-
.../apache/ranger/biz/RangerPolicyAdminImpl.java | 588 +-
.../apache/ranger/biz/RangerPolicyRetriever.java | 1186 +-
.../apache/ranger/biz/RangerTagDBRetriever.java | 682 +-
.../java/org/apache/ranger/biz/RoleDBStore.java | 455 +-
.../java/org/apache/ranger/biz/RoleRefUpdater.java | 649 +-
.../org/apache/ranger/biz/SecurityZoneDBStore.java | 135 +-
.../apache/ranger/biz/SecurityZoneRefUpdater.java | 353 +-
.../java/org/apache/ranger/biz/ServiceDBStore.java | 12339 ++++++++++---------
.../java/org/apache/ranger/biz/ServiceMgr.java | 1318 +-
.../java/org/apache/ranger/biz/SessionMgr.java | 976 +-
.../java/org/apache/ranger/biz/TagDBStore.java | 2010 ++-
.../main/java/org/apache/ranger/biz/UserMgr.java | 2799 +++--
.../java/org/apache/ranger/biz/UserMgrBase.java | 63 +-
.../main/java/org/apache/ranger/biz/XAuditMgr.java | 232 +-
.../java/org/apache/ranger/biz/XAuditMgrBase.java | 144 +-
.../main/java/org/apache/ranger/biz/XUserMgr.java | 7130 ++++++-----
.../java/org/apache/ranger/biz/XUserMgrBase.java | 477 +-
.../org/apache/ranger/common/AppConstants.java | 2549 ++--
.../java/org/apache/ranger/common/ContextUtil.java | 145 +-
.../java/org/apache/ranger/common/DateUtil.java | 200 +-
.../org/apache/ranger/common/ErrorMessageUtil.java | 41 +-
.../java/org/apache/ranger/common/GUIDUtil.java | 21 +-
.../java/org/apache/ranger/common/HTTPUtil.java | 51 +-
.../java/org/apache/ranger/common/JSONUtil.java | 146 +-
.../java/org/apache/ranger/common/MapUtil.java | 50 +-
.../org/apache/ranger/common/MessageEnums.java | 44 +-
.../java/org/apache/ranger/common/MyCallBack.java | 3 +-
.../org/apache/ranger/common/PropertiesUtil.java | 854 +-
.../org/apache/ranger/common/RESTErrorUtil.java | 843 +-
.../ranger/common/RangerAdminTagEnricher.java | 93 +-
.../common/RangerAdminUserStoreEnricher.java | 28 +-
.../apache/ranger/common/RangerCommonEnums.java | 2863 +++--
.../org/apache/ranger/common/RangerConfigUtil.java | 87 +-
.../org/apache/ranger/common/RangerConstants.java | 310 +-
.../org/apache/ranger/common/RangerFactory.java | 6 +-
.../ranger/common/RangerJAXBContextResolver.java | 65 +-
.../common/RangerJsonMappingExceptionMapper.java | 16 +-
.../common/RangerJsonParserExceptionMapper.java | 21 +-
.../apache/ranger/common/RangerJsonProvider.java | 7 +-
.../org/apache/ranger/common/RangerProperties.java | 40 +-
.../org/apache/ranger/common/RangerRoleCache.java | 226 +-
.../org/apache/ranger/common/RangerSearchUtil.java | 1363 +-
.../ranger/common/RangerServicePoliciesCache.java | 933 +-
.../ranger/common/RangerServiceTagsCache.java | 686 +-
.../apache/ranger/common/RangerUserStoreCache.java | 194 +-
.../ranger/common/RangerValidatorFactory.java | 30 +-
.../org/apache/ranger/common/RequestContext.java | 267 +-
.../org/apache/ranger/common/SearchCriteria.java | 339 +-
.../java/org/apache/ranger/common/SearchField.java | 363 +-
.../java/org/apache/ranger/common/SearchGroup.java | 234 +-
.../java/org/apache/ranger/common/SearchUtil.java | 1423 +--
.../java/org/apache/ranger/common/SearchValue.java | 44 +-
.../apache/ranger/common/ServiceGdsInfoCache.java | 11 +-
.../java/org/apache/ranger/common/ServiceUtil.java | 3145 ++---
.../java/org/apache/ranger/common/SortField.java | 52 +-
.../java/org/apache/ranger/common/StringUtil.java | 452 +-
.../org/apache/ranger/common/TimedEventUtil.java | 83 +-
.../org/apache/ranger/common/TimedExecutor.java | 276 +-
.../ranger/common/TimedExecutorConfigurator.java | 131 +-
.../org/apache/ranger/common/UserSessionBase.java | 291 +-
.../apache/ranger/common/XMLPropertiesUtil.java | 20 +-
.../annotation/RangerAnnotationClassName.java | 5 +-
.../annotation/RangerAnnotationJSMgrName.java | 5 +-
.../common/annotation/RangerAnnotationRestAPI.java | 11 +-
.../java/org/apache/ranger/common/db/BaseDao.java | 711 +-
.../apache/ranger/common/db/JPABeanCallbacks.java | 156 +-
.../RangerTransactionSynchronizationAdapter.java | 134 +-
.../java/org/apache/ranger/common/view/VEnum.java | 139 +-
.../apache/ranger/common/view/VEnumElement.java | 279 +-
.../java/org/apache/ranger/common/view/VList.java | 127 +-
.../org/apache/ranger/common/view/VTrxLogAttr.java | 318 +-
.../apache/ranger/common/view/ViewBaseBean.java | 15 +-
.../ranger/credentialapi/CredentialReader.java | 133 +-
.../org/apache/ranger/db/RangerDaoManager.java | 62 +-
.../org/apache/ranger/db/RangerDaoManagerBase.java | 614 +-
.../org/apache/ranger/db/XXAccessAuditDao.java | 198 +-
.../org/apache/ranger/db/XXAccessTypeDefDao.java | 96 +-
.../apache/ranger/db/XXAccessTypeDefGrantsDao.java | 153 +-
.../main/java/org/apache/ranger/db/XXAssetDao.java | 47 +-
.../java/org/apache/ranger/db/XXAuditMapDao.java | 54 +-
.../org/apache/ranger/db/XXAuthSessionDao.java | 150 +-
.../apache/ranger/db/XXContextEnricherDefDao.java | 69 +-
.../org/apache/ranger/db/XXCredentialStoreDao.java | 8 +-
.../java/org/apache/ranger/db/XXDBBaseDao.java | 8 +-
.../java/org/apache/ranger/db/XXDataHistDao.java | 139 +-
.../org/apache/ranger/db/XXDataMaskTypeDefDao.java | 94 +-
.../java/org/apache/ranger/db/XXEnumDefDao.java | 42 +-
.../org/apache/ranger/db/XXEnumElementDefDao.java | 46 +-
.../org/apache/ranger/db/XXGdsDataShareDao.java | 270 +-
.../ranger/db/XXGdsDataShareInDatasetDao.java | 215 +-
.../java/org/apache/ranger/db/XXGdsDatasetDao.java | 210 +-
.../apache/ranger/db/XXGdsDatasetInProjectDao.java | 136 +-
.../apache/ranger/db/XXGdsDatasetPolicyMapDao.java | 88 +-
.../java/org/apache/ranger/db/XXGdsProjectDao.java | 178 +-
.../apache/ranger/db/XXGdsProjectPolicyMapDao.java | 88 +-
.../apache/ranger/db/XXGdsSharedResourceDao.java | 230 +-
.../org/apache/ranger/db/XXGlobalStateDao.java | 112 +-
.../main/java/org/apache/ranger/db/XXGroupDao.java | 207 +-
.../java/org/apache/ranger/db/XXGroupGroupDao.java | 84 +-
.../org/apache/ranger/db/XXGroupPermissionDao.java | 220 +-
.../java/org/apache/ranger/db/XXGroupUserDao.java | 301 +-
.../java/org/apache/ranger/db/XXModuleDefDao.java | 234 +-
.../java/org/apache/ranger/db/XXPermMapDao.java | 53 +-
.../java/org/apache/ranger/db/XXPluginInfoDao.java | 164 +-
.../org/apache/ranger/db/XXPolicyChangeLogDao.java | 60 +-
.../apache/ranger/db/XXPolicyConditionDefDao.java | 76 +-
.../java/org/apache/ranger/db/XXPolicyDao.java | 923 +-
.../apache/ranger/db/XXPolicyExportAuditDao.java | 7 +-
.../apache/ranger/db/XXPolicyItemAccessDao.java | 81 +-
.../apache/ranger/db/XXPolicyItemConditionDao.java | 81 +-
.../java/org/apache/ranger/db/XXPolicyItemDao.java | 118 +-
.../ranger/db/XXPolicyItemDataMaskInfoDao.java | 82 +-
.../apache/ranger/db/XXPolicyItemGroupPermDao.java | 82 +-
.../ranger/db/XXPolicyItemRowFilterInfoDao.java | 73 +-
.../apache/ranger/db/XXPolicyItemUserPermDao.java | 82 +-
.../org/apache/ranger/db/XXPolicyLabelDao.java | 134 +-
.../org/apache/ranger/db/XXPolicyLabelMapDao.java | 75 +-
.../apache/ranger/db/XXPolicyRefAccessTypeDao.java | 125 +-
.../apache/ranger/db/XXPolicyRefConditionDao.java | 153 +-
.../ranger/db/XXPolicyRefDataMaskTypeDao.java | 102 +-
.../org/apache/ranger/db/XXPolicyRefGroupDao.java | 127 +-
.../apache/ranger/db/XXPolicyRefResourceDao.java | 183 +-
.../org/apache/ranger/db/XXPolicyRefRoleDao.java | 79 +-
.../org/apache/ranger/db/XXPolicyRefUserDao.java | 152 +-
.../org/apache/ranger/db/XXPolicyResourceDao.java | 104 +-
.../apache/ranger/db/XXPolicyResourceMapDao.java | 82 +-
.../ranger/db/XXPolicyWithAssignedIdDao.java | 8 +-
.../java/org/apache/ranger/db/XXPortalUserDao.java | 279 +-
.../org/apache/ranger/db/XXPortalUserRoleDao.java | 92 +-
.../apache/ranger/db/XXRMSMappingProviderDao.java | 24 +-
.../org/apache/ranger/db/XXRMSNotificationDao.java | 194 +-
.../apache/ranger/db/XXRMSResourceMappingDao.java | 209 +-
.../apache/ranger/db/XXRMSServiceResourceDao.java | 441 +-
.../java/org/apache/ranger/db/XXResourceDao.java | 478 +-
.../org/apache/ranger/db/XXResourceDefDao.java | 146 +-
.../main/java/org/apache/ranger/db/XXRoleDao.java | 78 +-
.../org/apache/ranger/db/XXRoleRefGroupDao.java | 41 +-
.../org/apache/ranger/db/XXRoleRefRoleDao.java | 69 +-
.../org/apache/ranger/db/XXRoleRefUserDao.java | 40 +-
.../org/apache/ranger/db/XXSecurityZoneDao.java | 97 +-
.../ranger/db/XXSecurityZoneRefGroupDao.java | 58 +-
.../ranger/db/XXSecurityZoneRefResourceDao.java | 46 +-
.../apache/ranger/db/XXSecurityZoneRefRoleDao.java | 52 +-
.../ranger/db/XXSecurityZoneRefServiceDao.java | 102 +-
.../ranger/db/XXSecurityZoneRefTagServiceDao.java | 53 +-
.../apache/ranger/db/XXSecurityZoneRefUserDao.java | 56 +-
.../apache/ranger/db/XXServiceConfigDefDao.java | 72 +-
.../apache/ranger/db/XXServiceConfigMapDao.java | 209 +-
.../java/org/apache/ranger/db/XXServiceDao.java | 312 +-
.../java/org/apache/ranger/db/XXServiceDefDao.java | 314 +-
.../ranger/db/XXServiceDefWithAssignedIdDao.java | 8 +-
.../org/apache/ranger/db/XXServiceResourceDao.java | 182 +-
.../ranger/db/XXServiceResourceElementDao.java | 89 +-
.../db/XXServiceResourceElementValueDao.java | 136 +-
.../apache/ranger/db/XXServiceVersionInfoDao.java | 273 +-
.../ranger/db/XXServiceWithAssignedIdDao.java | 8 +-
.../org/apache/ranger/db/XXTagAttributeDao.java | 112 +-
.../org/apache/ranger/db/XXTagAttributeDefDao.java | 84 +-
.../org/apache/ranger/db/XXTagChangeLogDao.java | 47 +-
.../main/java/org/apache/ranger/db/XXTagDao.java | 227 +-
.../java/org/apache/ranger/db/XXTagDefDao.java | 112 +-
.../org/apache/ranger/db/XXTagResourceMapDao.java | 331 +-
.../java/org/apache/ranger/db/XXTrxLogV2Dao.java | 11 +-
.../org/apache/ranger/db/XXUgsyncAuditInfoDao.java | 79 +-
.../main/java/org/apache/ranger/db/XXUserDao.java | 359 +-
.../org/apache/ranger/db/XXUserPermissionDao.java | 251 +-
.../ElasticSearchAccessAuditsService.java | 541 +-
.../ranger/elasticsearch/ElasticSearchMgr.java | 220 +-
.../ranger/elasticsearch/ElasticSearchUtil.java | 153 +-
.../org/apache/ranger/entity/XXAccessAudit.java | 171 +-
.../apache/ranger/entity/XXAccessAuditBase.java | 1240 +-
.../org/apache/ranger/entity/XXAccessAuditV4.java | 15 +-
.../org/apache/ranger/entity/XXAccessAuditV5.java | 111 +-
.../org/apache/ranger/entity/XXAccessTypeDef.java | 587 +-
.../ranger/entity/XXAccessTypeDefGrants.java | 278 +-
.../java/org/apache/ranger/entity/XXAsset.java | 522 +-
.../java/org/apache/ranger/entity/XXAuditMap.java | 389 +-
.../org/apache/ranger/entity/XXAuthSession.java | 924 +-
.../apache/ranger/entity/XXContextEnricherDef.java | 500 +-
.../apache/ranger/entity/XXCredentialStore.java | 268 +-
.../java/org/apache/ranger/entity/XXDBBase.java | 418 +-
.../java/org/apache/ranger/entity/XXDataHist.java | 817 +-
.../apache/ranger/entity/XXDataMaskTypeDef.java | 785 +-
.../java/org/apache/ranger/entity/XXEnumDef.java | 408 +-
.../org/apache/ranger/entity/XXEnumElementDef.java | 483 +-
.../org/apache/ranger/entity/XXGdsDataShare.java | 206 +-
.../ranger/entity/XXGdsDataShareInDataset.java | 178 +-
.../org/apache/ranger/entity/XXGdsDataset.java | 188 +-
.../ranger/entity/XXGdsDatasetInProject.java | 181 +-
.../ranger/entity/XXGdsDatasetPolicyMap.java | 58 +-
.../org/apache/ranger/entity/XXGdsProject.java | 145 +-
.../ranger/entity/XXGdsProjectPolicyMap.java | 59 +-
.../apache/ranger/entity/XXGdsSharedResource.java | 242 +-
.../org/apache/ranger/entity/XXGlobalState.java | 25 +-
.../apache/ranger/entity/XXGlobalStateBase.java | 36 +-
.../java/org/apache/ranger/entity/XXGroup.java | 646 +-
.../org/apache/ranger/entity/XXGroupGroup.java | 328 +-
.../apache/ranger/entity/XXGroupPermission.java | 247 +-
.../java/org/apache/ranger/entity/XXGroupUser.java | 331 +-
.../java/org/apache/ranger/entity/XXModuleDef.java | 189 +-
.../java/org/apache/ranger/entity/XXPermMap.java | 732 +-
.../org/apache/ranger/entity/XXPluginInfo.java | 359 +-
.../java/org/apache/ranger/entity/XXPolicy.java | 91 +-
.../org/apache/ranger/entity/XXPolicyBase.java | 712 +-
.../apache/ranger/entity/XXPolicyChangeLog.java | 159 +-
.../apache/ranger/entity/XXPolicyConditionDef.java | 1008 +-
.../apache/ranger/entity/XXPolicyExportAudit.java | 739 +-
.../org/apache/ranger/entity/XXPolicyItem.java | 586 +-
.../apache/ranger/entity/XXPolicyItemAccess.java | 469 +-
.../ranger/entity/XXPolicyItemCondition.java | 469 +-
.../ranger/entity/XXPolicyItemDataMaskInfo.java | 411 +-
.../ranger/entity/XXPolicyItemGroupPerm.java | 347 +-
.../ranger/entity/XXPolicyItemRowFilterInfo.java | 278 +-
.../apache/ranger/entity/XXPolicyItemUserPerm.java | 353 +-
.../org/apache/ranger/entity/XXPolicyLabel.java | 206 +-
.../org/apache/ranger/entity/XXPolicyLabelMap.java | 260 +-
.../ranger/entity/XXPolicyRefAccessType.java | 320 +-
.../apache/ranger/entity/XXPolicyRefCondition.java | 320 +-
.../ranger/entity/XXPolicyRefDataMaskType.java | 321 +-
.../org/apache/ranger/entity/XXPolicyRefGroup.java | 318 +-
.../apache/ranger/entity/XXPolicyRefResource.java | 320 +-
.../org/apache/ranger/entity/XXPolicyRefRole.java | 130 +-
.../org/apache/ranger/entity/XXPolicyRefUser.java | 320 +-
.../org/apache/ranger/entity/XXPolicyResource.java | 402 +-
.../apache/ranger/entity/XXPolicyResourceMap.java | 347 +-
.../ranger/entity/XXPolicyWithAssignedId.java | 73 +-
.../org/apache/ranger/entity/XXPortalUser.java | 855 +-
.../org/apache/ranger/entity/XXPortalUserRole.java | 315 +-
.../apache/ranger/entity/XXRMSMappingProvider.java | 80 +-
.../apache/ranger/entity/XXRMSNotification.java | 233 +-
.../apache/ranger/entity/XXRMSResourceMapping.java | 122 +-
.../apache/ranger/entity/XXRMSServiceResource.java | 397 +-
.../java/org/apache/ranger/entity/XXResource.java | 1367 +-
.../org/apache/ranger/entity/XXResourceDef.java | 1520 ++-
.../main/java/org/apache/ranger/entity/XXRole.java | 31 +-
.../java/org/apache/ranger/entity/XXRoleBase.java | 44 +-
.../org/apache/ranger/entity/XXRoleRefGroup.java | 150 +-
.../org/apache/ranger/entity/XXRoleRefRole.java | 151 +-
.../org/apache/ranger/entity/XXRoleRefUser.java | 148 +-
.../org/apache/ranger/entity/XXSecurityZone.java | 23 +-
.../apache/ranger/entity/XXSecurityZoneBase.java | 48 +-
.../ranger/entity/XXSecurityZoneRefGroup.java | 320 +-
.../ranger/entity/XXSecurityZoneRefResource.java | 263 +-
.../ranger/entity/XXSecurityZoneRefRole.java | 259 +-
.../ranger/entity/XXSecurityZoneRefService.java | 264 +-
.../ranger/entity/XXSecurityZoneRefTagService.java | 117 +-
.../ranger/entity/XXSecurityZoneRefUser.java | 316 +-
.../java/org/apache/ranger/entity/XXService.java | 90 +-
.../org/apache/ranger/entity/XXServiceBase.java | 748 +-
.../apache/ranger/entity/XXServiceConfigDef.java | 1130 +-
.../apache/ranger/entity/XXServiceConfigMap.java | 347 +-
.../org/apache/ranger/entity/XXServiceDef.java | 111 +-
.../org/apache/ranger/entity/XXServiceDefBase.java | 736 +-
.../ranger/entity/XXServiceDefWithAssignedId.java | 77 +-
.../apache/ranger/entity/XXServiceResource.java | 435 +-
.../ranger/entity/XXServiceResourceElement.java | 333 +-
.../entity/XXServiceResourceElementValue.java | 289 +-
.../apache/ranger/entity/XXServiceVersionInfo.java | 436 +-
.../ranger/entity/XXServiceWithAssignedId.java | 81 +-
.../main/java/org/apache/ranger/entity/XXTag.java | 367 +-
.../org/apache/ranger/entity/XXTagAttribute.java | 289 +-
.../apache/ranger/entity/XXTagAttributeDef.java | 287 +-
.../org/apache/ranger/entity/XXTagChangeLog.java | 109 +-
.../java/org/apache/ranger/entity/XXTagDef.java | 404 +-
.../org/apache/ranger/entity/XXTagResourceMap.java | 289 +-
.../java/org/apache/ranger/entity/XXTrxLog.java | 1001 +-
.../java/org/apache/ranger/entity/XXTrxLogV2.java | 149 +-
.../apache/ranger/entity/XXUgsyncAuditInfo.java | 420 +-
.../main/java/org/apache/ranger/entity/XXUser.java | 556 +-
.../org/apache/ranger/entity/XXUserPermission.java | 254 +-
.../apache/ranger/entity/view/VXXPrincipal.java | 355 +-
.../main/java/org/apache/ranger/json/Folder.java | 36 +-
.../org/apache/ranger/json/JsonDateSerializer.java | 27 +-
.../ranger/metrics/RangerAdminMetricsWrapper.java | 16 +-
.../ranger/metrics/RangerMetricsFetcher.java | 80 +-
.../source/RangerAdminMetricsSourceBase.java | 15 +-
.../RangerAdminMetricsSourceContextEnricher.java | 6 +-
.../RangerAdminMetricsSourceDenyConditions.java | 6 +-
.../RangerAdminMetricsSourcePolicyMasking.java | 6 +-
...ngerAdminMetricsSourcePolicyResourceAccess.java | 7 +-
...RangerAdminMetricsSourcePolicyRowFiltering.java | 6 +-
.../source/RangerAdminMetricsSourceService.java | 6 +-
.../source/RangerAdminMetricsSourceUserGroup.java | 6 +-
.../java/org/apache/ranger/patch/BaseLoader.java | 273 +-
...ssignSecurityZonePersmissionToAdmin_J10026.java | 362 +-
...PatchAtlasForClassificationResource_J10047.java | 137 +-
...lServiceDefForPolicyConditionUpdate_J10060.java | 145 +-
...viceDefUpdateForDefaultAuditFilters_J10049.java | 284 +-
...efUpdateForResourceSpecificAccesses_J10012.java | 104 +-
.../patch/PatchForAtlasAdminAudits_J10043.java | 78 +-
...ForAtlasResourceAndAccessTypeUpdate_J10016.java | 645 +-
.../PatchForAtlasServiceDefUpdate_J10013.java | 480 +-
...ToAddEntityLabelAndBusinessMetadata_J10034.java | 231 +-
.../patch/PatchForAtlasToAddTypeRead_J10040.java | 155 +-
.../patch/PatchForDefaultAuidtFilters_J10050.java | 248 +-
.../PatchForExternalUserStatusUpdate_J10056.java | 142 +-
.../PatchForHBaseDefaultPolicyUpdate_J10045.java | 228 +-
.../PatchForHBaseServiceDefUpdate_J10035.java | 125 +-
.../patch/PatchForHiveServiceDefUpdate_J10006.java | 363 +-
.../patch/PatchForHiveServiceDefUpdate_J10007.java | 407 +-
.../patch/PatchForHiveServiceDefUpdate_J10009.java | 386 +-
.../patch/PatchForHiveServiceDefUpdate_J10010.java | 351 +-
.../patch/PatchForHiveServiceDefUpdate_J10017.java | 349 +-
.../patch/PatchForHiveServiceDefUpdate_J10027.java | 418 +-
.../patch/PatchForHiveServiceDefUpdate_J10030.java | 337 +-
.../PatchForKafkaServiceDefUpdate_J10015.java | 403 +-
.../PatchForKafkaServiceDefUpdate_J10025.java | 875 +-
.../PatchForKafkaServiceDefUpdate_J10033.java | 970 +-
...atchForMigratingOldRegimePolicyJson_J10046.java | 851 +-
...chForMigratingRangerServiceResource_J10037.java | 280 +-
.../PatchForNifiResourceUpdateExclude_J10011.java | 184 +-
.../PatchForOzoneDefaultPoliciesUpdate_J10044.java | 187 +-
...PatchForOzoneServiceDefConfigUpdate_J10051.java | 381 +-
.../PatchForOzoneServiceDefUpdate_J10041.java | 592 +-
.../PatchForPrestoToSupportPresto333_J10038.java | 237 +-
.../patch/PatchForServiceVersionInfo_J10004.java | 188 +-
...PatchForSolrSvcDefAndPoliciesUpdate_J10055.java | 841 +-
.../patch/PatchForSyncSourceUpdate_J10054.java | 155 +-
.../patch/PatchForTagServiceDefUpdate_J10008.java | 341 +-
.../patch/PatchForTagServiceDefUpdate_J10028.java | 559 +-
.../patch/PatchForTrinoSvcDefUpdate_J10062.java | 217 +-
...orUpdatingAtlasSvcDefAndTagPolicies_J10063.java | 416 +-
.../patch/PatchForUpdatingPolicyJson_J10019.java | 2012 ++-
.../patch/PatchForUpdatingTagsJson_J10020.java | 214 +-
.../ranger/patch/PatchForXGlobalState_J10036.java | 131 +-
...chGrantAuditPermissionToKeyRoleUser_J10014.java | 195 +-
.../apache/ranger/patch/PatchMigration_J10002.java | 1009 +-
.../patch/PatchPasswordEncryption_J10001.java | 144 +-
.../ranger/patch/PatchPermissionModel_J10003.java | 348 +-
...tchPreSql_057_ForUpdateToUniqueGUID_J10052.java | 302 +-
...ForUpdateToUniqueResoureceSignature_J10053.java | 368 +-
.../patch/PatchSetAccessTypeCategory_J10061.java | 39 +-
.../patch/PatchTagModulePermission_J10005.java | 204 +-
.../ranger/patch/cliutil/ChangePasswordUtil.java | 575 +-
.../ranger/patch/cliutil/ChangeUserNameUtil.java | 69 +-
.../patch/cliutil/DbToSolrMigrationUtil.java | 937 +-
.../apache/ranger/patch/cliutil/MetricUtil.java | 954 +-
.../patch/cliutil/RoleBasedUserSearchUtil.java | 492 +-
.../patch/cliutil/TrxLogV2MigrationUtil.java | 127 +-
.../cliutil/UpdateUserAndGroupNamesInJson.java | 841 +-
.../java/org/apache/ranger/rest/AssetREST.java | 1390 +--
.../main/java/org/apache/ranger/rest/GdsREST.java | 887 +-
.../java/org/apache/ranger/rest/MetricsREST.java | 68 +-
.../java/org/apache/ranger/rest/PublicAPIs.java | 641 +-
.../java/org/apache/ranger/rest/PublicAPIsv2.java | 1670 ++-
.../org/apache/ranger/rest/RangerHealthREST.java | 13 +-
.../main/java/org/apache/ranger/rest/RoleREST.java | 1361 +-
.../org/apache/ranger/rest/SecurityZoneREST.java | 683 +-
.../java/org/apache/ranger/rest/ServiceREST.java | 8941 +++++++-------
.../org/apache/ranger/rest/ServiceRESTUtil.java | 2142 ++--
.../apache/ranger/rest/ServiceTagsProcessor.java | 1163 +-
.../main/java/org/apache/ranger/rest/TagREST.java | 917 +-
.../org/apache/ranger/rest/TagRESTConstants.java | 48 +-
.../main/java/org/apache/ranger/rest/UserREST.java | 607 +-
.../java/org/apache/ranger/rest/XAuditREST.java | 267 +-
.../main/java/org/apache/ranger/rest/XKeyREST.java | 382 +-
.../java/org/apache/ranger/rest/XUserREST.java | 2965 +++--
.../ranger/security/context/RangerAPIList.java | 458 +-
.../ranger/security/context/RangerAPIMapping.java | 1067 +-
.../security/context/RangerAdminOpContext.java | 31 +-
.../security/context/RangerContextHolder.java | 54 +-
.../context/RangerPreAuthSecurityHandler.java | 199 +-
.../security/context/RangerSecurityContext.java | 13 +-
.../apache/ranger/security/handler/Permission.java | 52 +-
.../handler/RangerAuthenticationProvider.java | 1300 +-
.../handler/RangerCustomPasswordEncoder.java | 76 +-
.../handler/RangerDomainObjectSecurityHandler.java | 133 +-
.../listener/RangerHttpSessionListener.java | 40 +-
.../security/listener/SpringEventListener.java | 136 +-
.../standalone/StandaloneSecurityHandler.java | 63 +-
.../authentication/CustomLogoutSuccessHandler.java | 69 +-
.../authentication/RangerAuthFailureHandler.java | 122 +-
.../authentication/RangerAuthSuccessHandler.java | 208 +-
.../RangerAuthenticationEntryPoint.java | 187 +-
.../RangerSessionFixationProtectionStrategy.java | 10 +-
.../security/web/filter/MyRememberMeFilter.java | 61 +-
.../web/filter/RangerCSRFPreventionFilter.java | 403 +-
.../security/web/filter/RangerJwtAuthFilter.java | 64 +-
.../security/web/filter/RangerJwtAuthWrapper.java | 49 +-
.../web/filter/RangerKRBAuthenticationFilter.java | 1324 +-
.../security/web/filter/RangerKrbFilter.java | 1183 +-
.../security/web/filter/RangerMDCFilter.java | 42 +-
.../web/filter/RangerSSOAuthenticationFilter.java | 1100 +-
.../RangerSecurityContextFormationFilter.java | 273 +-
...RangerUsernamePasswordAuthenticationFilter.java | 20 +-
.../security/web/filter/SSOAuthentication.java | 67 +-
.../web/filter/SSOAuthenticationProperties.java | 14 +-
.../service/AbstractAuditedResourceService.java | 396 +-
.../service/AbstractBaseResourceService.java | 1490 ++-
.../apache/ranger/service/AuthSessionService.java | 266 +-
.../ranger/service/PublicAPIServiceBase.java | 35 +-
.../apache/ranger/service/RangerAuditFields.java | 28 +-
.../ranger/service/RangerAuditedModelService.java | 404 +-
.../ranger/service/RangerBaseModelService.java | 847 +-
.../ranger/service/RangerDataHistService.java | 239 +-
.../ranger/service/RangerGdsBaseModelService.java | 18 +-
.../RangerGdsDataShareInDatasetService.java | 162 +-
.../ranger/service/RangerGdsDataShareService.java | 189 +-
.../service/RangerGdsDatasetInProjectService.java | 146 +-
.../ranger/service/RangerGdsDatasetService.java | 116 +-
.../ranger/service/RangerGdsProjectService.java | 101 +-
.../service/RangerGdsSharedResourceService.java | 175 +-
.../ranger/service/RangerPluginInfoService.java | 521 +-
.../ranger/service/RangerPolicyLabelsService.java | 57 +-
.../apache/ranger/service/RangerPolicyService.java | 70 +-
.../ranger/service/RangerPolicyServiceBase.java | 455 +-
.../service/RangerPolicyWithAssignedIdService.java | 74 +-
.../apache/ranger/service/RangerRoleService.java | 125 +-
.../ranger/service/RangerRoleServiceBase.java | 42 +-
.../service/RangerSecurityZoneServiceBase.java | 63 +-
.../service/RangerSecurityZoneServiceService.java | 243 +-
.../ranger/service/RangerServiceDefService.java | 141 +-
.../service/RangerServiceDefServiceBase.java | 1490 +--
.../RangerServiceDefWithAssignedIdService.java | 47 +-
.../service/RangerServiceResourceService.java | 80 +-
.../service/RangerServiceResourceServiceBase.java | 121 +-
.../RangerServiceResourceWithTagsService.java | 123 +-
.../RangerServiceResourceWithTagsServiceBase.java | 59 +-
.../ranger/service/RangerServiceService.java | 311 +-
.../ranger/service/RangerServiceServiceBase.java | 293 +-
.../RangerServiceWithAssignedIdService.java | 80 +-
.../apache/ranger/service/RangerTagDefService.java | 145 +-
.../ranger/service/RangerTagDefServiceBase.java | 212 +-
.../service/RangerTagResourceMapService.java | 248 +-
.../service/RangerTagResourceMapServiceBase.java | 64 +-
.../apache/ranger/service/RangerTagService.java | 253 +-
.../ranger/service/RangerTagServiceBase.java | 224 +-
.../ranger/service/RangerTransactionService.java | 73 +-
.../ranger/service/RangerTrxLogV2Service.java | 452 +-
.../org/apache/ranger/service/UserService.java | 554 +-
.../org/apache/ranger/service/UserServiceBase.java | 65 +-
.../apache/ranger/service/XAccessAuditService.java | 379 +-
.../ranger/service/XAccessAuditServiceBase.java | 155 +-
.../org/apache/ranger/service/XAssetService.java | 385 +-
.../apache/ranger/service/XAssetServiceBase.java | 123 +-
.../apache/ranger/service/XAuditMapService.java | 142 +-
.../ranger/service/XAuditMapServiceBase.java | 122 +-
.../ranger/service/XCredentialStoreService.java | 24 +-
.../service/XCredentialStoreServiceBase.java | 79 +-
.../apache/ranger/service/XGroupGroupService.java | 24 +-
.../ranger/service/XGroupGroupServiceBase.java | 83 +-
.../ranger/service/XGroupPermissionService.java | 160 +-
.../service/XGroupPermissionServiceBase.java | 77 +-
.../org/apache/ranger/service/XGroupService.java | 264 +-
.../apache/ranger/service/XGroupServiceBase.java | 169 +-
.../apache/ranger/service/XGroupUserService.java | 401 +-
.../ranger/service/XGroupUserServiceBase.java | 147 +-
.../apache/ranger/service/XModuleDefService.java | 327 +-
.../ranger/service/XModuleDefServiceBase.java | 111 +-
.../org/apache/ranger/service/XPermMapService.java | 235 +-
.../apache/ranger/service/XPermMapServiceBase.java | 197 +-
.../ranger/service/XPolicyExportAuditService.java | 55 +-
.../service/XPolicyExportAuditServiceBase.java | 121 +-
.../org/apache/ranger/service/XPolicyService.java | 1393 ++-
.../apache/ranger/service/XPortalUserService.java | 318 +-
.../ranger/service/XPortalUserServiceBase.java | 130 +-
.../apache/ranger/service/XRepositoryService.java | 183 +-
.../apache/ranger/service/XResourceService.java | 719 +-
.../ranger/service/XResourceServiceBase.java | 231 +-
.../ranger/service/XUgsyncAuditInfoService.java | 221 +-
.../service/XUgsyncAuditInfoServiceBase.java | 66 +-
.../ranger/service/XUserPermissionService.java | 157 +-
.../ranger/service/XUserPermissionServiceBase.java | 183 +-
.../org/apache/ranger/service/XUserService.java | 483 +-
.../apache/ranger/service/XUserServiceBase.java | 179 +-
.../ranger/service/filter/RangerRESTAPIFilter.java | 459 +-
.../ranger/solr/SolrAccessAuditsService.java | 489 +-
.../main/java/org/apache/ranger/solr/SolrMgr.java | 211 +-
.../main/java/org/apache/ranger/solr/SolrUtil.java | 481 +-
.../ranger/solr/krb/AbstractKerberosUser.java | 88 +-
.../ranger/solr/krb/InMemoryJAASConfiguration.java | 164 +-
.../org/apache/ranger/solr/krb/KerberosAction.java | 23 +-
.../ranger/solr/krb/KerberosJAASConfigUser.java | 26 +-
.../org/apache/ranger/solr/krb/KerberosUser.java | 4 +-
.../main/java/org/apache/ranger/util/CLIUtil.java | 107 +-
.../ranger/util/Pbkdf2PasswordEncoderCust.java | 50 +-
.../org/apache/ranger/util/RangerAdminCache.java | 24 +-
.../org/apache/ranger/util/RangerEnumUtil.java | 3993 +++---
.../org/apache/ranger/util/RangerMetricsUtil.java | 64 +-
.../org/apache/ranger/util/RangerRestUtil.java | 179 +-
.../apache/ranger/util/RangerServerHealthUtil.java | 15 +-
.../main/java/org/apache/ranger/util/RestUtil.java | 283 +-
.../validation/RangerGdsValidationDBProvider.java | 27 +-
.../RangerGdsValidationDataProvider.java | 3 +-
.../ranger/validation/RangerGdsValidator.java | 220 +-
.../apache/ranger/view/RangerExportPolicyList.java | 23 +-
.../apache/ranger/view/RangerExportRoleList.java | 23 +-
.../org/apache/ranger/view/RangerGdsVList.java | 342 +-
.../apache/ranger/view/RangerPluginInfoList.java | 63 +-
.../org/apache/ranger/view/RangerPolicyList.java | 69 +-
.../org/apache/ranger/view/RangerRoleList.java | 17 +-
.../apache/ranger/view/RangerSecurityZoneList.java | 66 +-
.../apache/ranger/view/RangerServiceDefList.java | 63 +-
.../org/apache/ranger/view/RangerServiceList.java | 63 +-
.../view/RangerServiceResourceWithTagsList.java | 54 +-
.../java/org/apache/ranger/view/VXAccessAudit.java | 1315 +-
.../org/apache/ranger/view/VXAccessAuditList.java | 41 +-
.../main/java/org/apache/ranger/view/VXAsset.java | 330 +-
.../java/org/apache/ranger/view/VXAssetList.java | 41 +-
.../java/org/apache/ranger/view/VXAuditMap.java | 238 +-
.../org/apache/ranger/view/VXAuditMapList.java | 41 +-
.../java/org/apache/ranger/view/VXAuditRecord.java | 429 +-
.../org/apache/ranger/view/VXAuditRecordList.java | 75 +-
.../java/org/apache/ranger/view/VXAuthSession.java | 876 +-
.../org/apache/ranger/view/VXAuthSessionList.java | 41 +-
.../org/apache/ranger/view/VXCredentialStore.java | 130 +-
.../apache/ranger/view/VXCredentialStoreList.java | 41 +-
.../java/org/apache/ranger/view/VXDataObject.java | 292 +-
.../apache/ranger/view/VXFileSyncSourceInfo.java | 184 +-
.../main/java/org/apache/ranger/view/VXGroup.java | 391 +-
.../java/org/apache/ranger/view/VXGroupGroup.java | 170 +-
.../org/apache/ranger/view/VXGroupGroupList.java | 41 +-
.../java/org/apache/ranger/view/VXGroupList.java | 41 +-
.../org/apache/ranger/view/VXGroupPermission.java | 229 +-
.../apache/ranger/view/VXGroupPermissionList.java | 79 +-
.../java/org/apache/ranger/view/VXGroupUser.java | 170 +-
.../org/apache/ranger/view/VXGroupUserInfo.java | 59 +-
.../org/apache/ranger/view/VXGroupUserList.java | 41 +-
.../main/java/org/apache/ranger/view/VXKmsKey.java | 407 +-
.../java/org/apache/ranger/view/VXKmsKeyList.java | 41 +-
.../apache/ranger/view/VXLdapSyncSourceInfo.java | 285 +-
.../main/java/org/apache/ranger/view/VXLong.java | 92 +-
.../java/org/apache/ranger/view/VXMessage.java | 280 +-
.../ranger/view/VXMetricAuditDetailsCount.java | 214 +-
.../ranger/view/VXMetricContextEnricher.java | 89 +-
.../apache/ranger/view/VXMetricPolicyCount.java | 86 +-
.../view/VXMetricPolicyWithServiceNameCount.java | 82 +-
.../apache/ranger/view/VXMetricServiceCount.java | 84 +-
.../ranger/view/VXMetricServiceNameCount.java | 82 +-
.../apache/ranger/view/VXMetricUserGroupCount.java | 177 +-
.../java/org/apache/ranger/view/VXModuleDef.java | 298 +-
.../org/apache/ranger/view/VXModuleDefList.java | 80 +-
.../org/apache/ranger/view/VXModulePermission.java | 82 +-
.../apache/ranger/view/VXModulePermissionList.java | 67 +-
.../org/apache/ranger/view/VXPasswordChange.java | 324 +-
.../java/org/apache/ranger/view/VXPermMap.java | 580 +-
.../java/org/apache/ranger/view/VXPermMapList.java | 41 +-
.../java/org/apache/ranger/view/VXPermObj.java | 204 +-
.../java/org/apache/ranger/view/VXPermObjList.java | 82 +-
.../main/java/org/apache/ranger/view/VXPolicy.java | 1128 +-
.../apache/ranger/view/VXPolicyExportAudit.java | 509 +-
.../ranger/view/VXPolicyExportAuditList.java | 41 +-
.../java/org/apache/ranger/view/VXPolicyLabel.java | 52 +-
.../org/apache/ranger/view/VXPolicyLabelList.java | 73 +-
.../java/org/apache/ranger/view/VXPolicyList.java | 82 +-
.../java/org/apache/ranger/view/VXPortalUser.java | 704 +-
.../org/apache/ranger/view/VXPortalUserList.java | 41 +-
.../java/org/apache/ranger/view/VXRepository.java | 354 +-
.../org/apache/ranger/view/VXRepositoryList.java | 82 +-
.../java/org/apache/ranger/view/VXResource.java | 1269 +-
.../org/apache/ranger/view/VXResourceList.java | 41 +-
.../java/org/apache/ranger/view/VXResponse.java | 264 +-
.../main/java/org/apache/ranger/view/VXString.java | 92 +-
.../java/org/apache/ranger/view/VXStringList.java | 41 +-
.../main/java/org/apache/ranger/view/VXTrxLog.java | 668 +-
.../java/org/apache/ranger/view/VXTrxLogList.java | 44 +-
.../java/org/apache/ranger/view/VXTrxLogV2.java | 702 +-
.../org/apache/ranger/view/VXTrxLogV2List.java | 18 +-
.../org/apache/ranger/view/VXUgsyncAuditInfo.java | 244 +-
.../apache/ranger/view/VXUgsyncAuditInfoList.java | 36 +-
.../apache/ranger/view/VXUnixSyncSourceInfo.java | 244 +-
.../main/java/org/apache/ranger/view/VXUser.java | 620 +-
.../org/apache/ranger/view/VXUserGroupInfo.java | 59 +-
.../java/org/apache/ranger/view/VXUserList.java | 41 +-
.../org/apache/ranger/view/VXUserPermission.java | 255 +-
.../apache/ranger/view/VXUserPermissionList.java | 79 +-
.../main/resources/META-INF/jpa_named_queries.xml | 10 +-
.../src/main/resources/hadoop-metrics2.properties | 1 -
.../internationalization/messages.properties | 2 +-
.../internationalization/messages_cs_CZ.properties | 2 +-
.../internationalization/messages_de.properties | 2 +-
.../internationalization/messages_es_ES.properties | 2 +-
.../internationalization/messages_fr.properties | 2 +-
.../internationalization/messages_it.properties | 2 +-
.../internationalization/messages_ko_KR.properties | 2 +-
.../internationalization/messages_lt.properties | 2 +-
.../internationalization/messages_pl.properties | 2 +-
.../internationalization/messages_pt_BR.properties | 2 +-
.../internationalization/messages_pt_PT.properties | 2 +-
.../internationalization/messages_uk_UA.properties | 2 +-
.../internationalization/messages_zh_CN.properties | 2 +-
.../src/main/resources/resourcenamemap.properties | 2 +-
.../main/webapp/libs/bower/bootbox/js/bootbox.js | 1246 --
.../webapp/libs/bower/bootprompt/bootprompt.js | 1138 ++
security-admin/src/main/webapp/login.jsp | 2 +-
.../src/main/webapp/react-webapp/.prettierignore | 6 +
.../src/main/webapp/react-webapp/.prettierrc | 24 +
.../src/main/webapp/react-webapp/README.md | 48 +-
.../src/main/webapp/react-webapp/package-lock.json | 84 +-
.../src/main/webapp/react-webapp/src/App.jsx | 116 +-
.../react-webapp/src/components/CreatableField.jsx | 15 +-
.../main/webapp/react-webapp/src/utils/XAEnums.js | 11 +-
.../main/webapp/react-webapp/src/utils/XAUtils.js | 5 +-
.../main/webapp/react-webapp/src/utils/appState.js | 7 +-
.../src/views/AuditEvent/AccessLogs.jsx | 67 +-
.../src/views/AuditEvent/AccessLogsTable.jsx | 16 +-
.../src/views/AuditEvent/AdminLogs/PolicyLogs.jsx | 24 +-
.../src/views/AuditEvent/AdminLogs/UserLogs.jsx | 16 +-
.../src/views/AuditEvent/OperationAdminModal.jsx | 12 +-
.../views/GovernedData/Dataset/AccessGrantForm.jsx | 4 +-
.../views/GovernedData/Dataset/AddDatasetView.jsx | 4 +-
.../Dataset/PrinciplePermissionComp.jsx | 8 +-
.../GovernedData/Datashare/AddDatashareView.jsx | 3 +-
.../src/views/PolicyListing/PolicyListing.jsx | 4 +-
.../src/views/Reports/UserAccessLayout.jsx | 76 +-
.../src/views/Resources/ResourceSelectComp.jsx | 8 +-
.../src/views/ServiceManager/ServiceForm.jsx | 14 +-
.../react-webapp/src/views/SideBar/SideBar.jsx | 5 +-
.../users_details/EditUserView.jsx | 3 +-
.../users_details/UserFormComp.jsx | 33 +-
.../users_details/UserListing.jsx | 27 +-
security-admin/src/main/webapp/scripts/Init.js | 8 +-
.../src/main/webapp/scripts/routers/Router.js | 41 +-
.../src/main/webapp/scripts/utils/XAEnums.js | 3 +-
.../src/main/webapp/scripts/utils/XALangSupport.js | 57 -
.../src/main/webapp/scripts/utils/XAUtils.js | 26 +-
.../views/permissions/ModulePermsTableLayout.js | 1 -
.../webapp/scripts/views/service/ServiceCreate.js | 22 +-
.../templates/reports/UserAccessLayout_tmpl.html | 26 +-
.../org/apache/ranger/audit/TestAuditQueue.java | 1665 ++-
.../java/org/apache/ranger/audit/TestConsumer.java | 358 +-
.../AmazonCloudWatchAuditDestinationTest.java | 10 +-
.../org/apache/ranger/biz/TestPolicyAdmin.java | 223 +-
.../java/org/apache/ranger/biz/TestPolicyDb.java | 202 +-
.../org/apache/ranger/biz/TestRangerBizUtil.java | 1083 +-
.../org/apache/ranger/biz/TestRoleDBStore.java | 132 +-
.../apache/ranger/biz/TestSecurityZoneDBStore.java | 575 +-
.../org/apache/ranger/biz/TestServiceDBStore.java | 4932 ++++----
.../java/org/apache/ranger/biz/TestTagDBStore.java | 392 +-
.../java/org/apache/ranger/biz/TestUserMgr.java | 4243 +++----
.../java/org/apache/ranger/biz/TestXUserMgr.java | 9128 +++++++-------
.../org/apache/ranger/common/TestContextUtil.java | 137 +-
.../org/apache/ranger/common/TestDateUtil.java | 245 +-
.../org/apache/ranger/common/TestJSONUtil.java | 164 +-
.../apache/ranger/common/TestPropertiesUtil.java | 208 +-
.../apache/ranger/common/TestRangerConfigUtil.java | 49 +-
.../apache/ranger/common/TestRangerSearchUtil.java | 214 +-
.../org/apache/ranger/common/TestServiceUtil.java | 3607 +++---
.../org/apache/ranger/common/TestStringUtil.java | 326 +-
.../apache/ranger/common/TestTimedExecutor.java | 297 +-
...estRangerTransactionSynchronizationAdapter.java | 2 -
.../ElasticSearchAccessAuditsServiceTest.java | 54 +-
.../patch/cliutil/TestRoleBasedUserSearchUtil.java | 91 +-
.../java/org/apache/ranger/rest/TestAssetREST.java | 1804 ++-
.../java/org/apache/ranger/rest/TestGdsREST.java | 246 +
.../org/apache/ranger/rest/TestMetricsREST.java | 17 +-
.../org/apache/ranger/rest/TestPublicAPIs.java | 822 +-
.../org/apache/ranger/rest/TestPublicAPIsv2.java | 1174 +-
.../apache/ranger/rest/TestRangerHealthREST.java | 35 +-
.../java/org/apache/ranger/rest/TestRoleREST.java | 1435 ++-
.../apache/ranger/rest/TestSecurityZoneREST.java | 465 +-
.../org/apache/ranger/rest/TestServiceREST.java | 5150 ++++----
.../ranger/rest/TestServiceTagProcessor.java | 487 +-
.../java/org/apache/ranger/rest/TestTagREST.java | 3890 +++---
.../java/org/apache/ranger/rest/TestUserREST.java | 816 +-
.../org/apache/ranger/rest/TestXAuditREST.java | 327 +-
.../java/org/apache/ranger/rest/TestXKeyREST.java | 274 +-
.../java/org/apache/ranger/rest/TestXUserREST.java | 4392 ++++---
.../web/filter/TestRangerCSRFPreventionFilter.java | 306 +-
.../security/web/filter/TestRangerMDCFilter.java | 9 +-
.../service/PasswordComparisonAuthenticator.java | 193 +-
.../ranger/service/TestAuthSessionService.java | 116 +-
.../ranger/service/TestRangerAuditFields.java | 53 +-
.../ranger/service/TestRangerDataHistService.java | 64 +-
.../ranger/service/TestRangerPolicyService.java | 231 +-
.../service/TestRangerPolicyServiceBase.java | 361 +-
.../service/TestRangerServiceDefService.java | 1461 ++-
.../service/TestRangerServiceDefServiceBase.java | 1279 +-
.../ranger/service/TestRangerServiceService.java | 711 +-
.../service/TestRangerServiceServiceBase.java | 312 +-
.../TestRangerServiceWithAssignedIdService.java | 132 +-
.../ranger/service/TestRangerTagDefService.java | 384 +-
.../service/TestRangerTagDefServiceBase.java | 69 +-
.../service/TestRangerTagResourceMapService.java | 179 +-
.../ranger/service/TestRangerTagService.java | 194 +-
.../service/TestRangerTransactionService.java | 44 +-
.../org/apache/ranger/service/TestUserService.java | 39 +-
.../ranger/service/TestXAccessAuditService.java | 105 +-
.../apache/ranger/service/TestXAssetService.java | 133 +-
.../ranger/service/TestXAuditMapService.java | 30 +-
.../service/TestXGroupPermissionService.java | 44 +-
.../apache/ranger/service/TestXGroupService.java | 249 +-
.../ranger/service/TestXGroupUserService.java | 294 +-
.../apache/ranger/service/TestXPermMapService.java | 319 +-
.../service/filter/TestRangerRESTAPIFilter.java | 22 +-
.../test/java/org/apache/ranger/util/BaseTest.java | 117 +-
.../org/apache/ranger/util/TestRangerEnumUtil.java | 191 +-
.../apache/ranger/util/TestRangerMetricsUtil.java | 9 +-
.../ranger/util/TestRangerServerHealthUtil.java | 9 +-
storm-agent/pom.xml | 184 +-
.../authorization/storm/StormRangerPlugin.java | 187 +-
.../storm/authorizer/RangerStormAuthorizer.java | 247 +-
.../ranger/services/storm/RangerServiceStorm.java | 182 +-
.../ranger/services/storm/client/StormClient.java | 780 +-
.../services/storm/client/StormConnectionMgr.java | 26 +-
.../services/storm/client/StormResourceMgr.java | 124 +-
.../services/storm/client/json/model/Topology.java | 51 +-
.../client/json/model/TopologyListResponse.java | 21 +-
.../authorization/storm/RangerAdminClientImpl.java | 39 +-
.../storm/StormRangerAuthorizerTest.java | 185 +-
.../authorization/storm/WordCounterBolt.java | 23 +-
.../ranger/authorization/storm/WordSpout.java | 38 +-
tagsync/pom.xml | 268 +-
.../tagsync/ha/TagSyncHAInitializerImpl.java | 156 +-
.../ranger/tagsync/model/AbstractTagSource.java | 99 +-
.../org/apache/ranger/tagsync/model/TagSink.java | 12 +-
.../org/apache/ranger/tagsync/model/TagSource.java | 15 +-
.../AtlasNestedStructureResourceMapper.java | 46 +-
.../ranger/tagsync/process/TagSyncConfig.java | 1072 +-
.../tagsync/process/TagSyncMetricsProducer.java | 124 +-
.../ranger/tagsync/process/TagSynchronizer.java | 851 +-
.../tagsync/sink/tagadmin/TagAdminRESTSink.java | 765 +-
.../source/atlas/AtlasAdlsResourceMapper.java | 259 +-
.../source/atlas/AtlasHbaseResourceMapper.java | 229 +-
.../source/atlas/AtlasHdfsResourceMapper.java | 194 +-
.../source/atlas/AtlasHiveResourceMapper.java | 140 +-
.../source/atlas/AtlasKafkaResourceMapper.java | 64 +-
.../source/atlas/AtlasNotificationMapper.java | 86 +-
.../source/atlas/AtlasOzoneResourceMapper.java | 490 +-
.../tagsync/source/atlas/AtlasResourceMapper.java | 184 +-
.../source/atlas/AtlasResourceMapperUtil.java | 144 +-
.../source/atlas/AtlasStormResourceMapper.java | 60 +-
.../tagsync/source/atlas/AtlasTagSource.java | 533 +-
.../source/atlas/EntityNotificationWrapper.java | 174 +-
.../source/atlasrest/AtlasRESTTagSource.java | 329 +-
.../source/atlasrest/RangerAtlasEntity.java | 15 +-
.../atlasrest/RangerAtlasEntityWithTags.java | 5 +-
.../ranger/tagsync/source/file/FileTagSource.java | 531 +-
tagsync/src/main/resources/ranger-tagsync-site.xml | 4 +-
.../nestedstructureplugin/ResourceTests.java | 5 +-
.../tagsync/process/TestAdlsResourceMapper.java | 18 +-
.../tagsync/process/TestHbaseResourceMapper.java | 60 +-
.../tagsync/process/TestHdfsResourceMapper.java | 284 +-
.../tagsync/process/TestHiveResourceMapper.java | 219 +-
.../tagsync/process/TestKafkaResourceMapper.java | 35 +-
.../tagsync/process/TestOzoneResourceMapper.java | 107 +-
.../tagsync/process/TestTagSynchronizer.java | 61 +-
ugsync-util/pom.xml | 27 +-
.../ugsyncutil/model/FileSyncSourceInfo.java | 166 +-
.../ranger/ugsyncutil/model/GroupUserInfo.java | 2 +-
.../ugsyncutil/model/LdapSyncSourceInfo.java | 268 +-
.../ranger/ugsyncutil/model/UgsyncAuditInfo.java | 223 +-
.../ugsyncutil/model/UnixSyncSourceInfo.java | 226 +-
.../model/UsersGroupRoleAssignments.java | 132 +-
.../apache/ranger/ugsyncutil/model/XGroupInfo.java | 202 +-
.../apache/ranger/ugsyncutil/model/XUserInfo.java | 264 +-
.../ugsyncutil/util/UgsyncCommonConstants.java | 10 +-
ugsync/ldapconfigchecktool/ldapconfigcheck/pom.xml | 42 +-
.../ldapconfigcheck/AuthenticationCheck.java | 123 +-
.../ranger/ldapconfigcheck/CommandLineOptions.java | 171 +-
.../apache/ranger/ldapconfigcheck/LdapConfig.java | 343 +-
.../ldapconfigcheck/LdapConfigCheckMain.java | 137 +-
.../apache/ranger/ldapconfigcheck/UserSync.java | 932 +-
ugsync/pom.xml | 184 +-
.../process/CustomSSLSocketFactory.java | 209 +-
.../ldapusersync/process/LdapUserGroupBuilder.java | 2530 ++--
.../unixusersync/config/UserGroupSyncConfig.java | 2541 ++--
.../unixusersync/ha/UserSyncHAInitializerImpl.java | 84 +-
.../unixusersync/model/GetXGroupListResponse.java | 38 +-
.../unixusersync/model/GetXUserListResponse.java | 41 +-
.../process/FileSourceUserGroupBuilder.java | 557 +-
.../process/PolicyMgrUserGroupBuilder.java | 3826 +++---
.../process/RangerUgSyncRESTClient.java | 82 +-
.../unixusersync/process/UnixUserGroupBuilder.java | 1103 +-
.../ranger/usergroupsync/AbstractMapper.java | 23 +-
.../usergroupsync/AbstractUserGroupSource.java | 28 +-
.../org/apache/ranger/usergroupsync/Mapper.java | 2 +-
.../org/apache/ranger/usergroupsync/RegEx.java | 132 +-
.../apache/ranger/usergroupsync/UserGroupSink.java | 15 +-
.../ranger/usergroupsync/UserGroupSource.java | 9 +-
.../apache/ranger/usergroupsync/UserGroupSync.java | 188 +-
.../usergroupsync/UserSyncMetricsProducer.java | 148 +-
.../process/TestFileSourceUserGroupBuilder.java | 9 +-
.../process/TestUnixUserGroupBuilder.java | 34 +-
.../PolicyMgrUserGroupBuilderTest.java | 161 +-
.../ranger/usergroupsync/TestLdapUserGroup.java | 804 +-
.../org/apache/ranger/usergroupsync/TestRegEx.java | 53 +-
unixauthclient/pom.xml | 32 +-
.../unix/jaas/ConsolePromptCallbackHandler.java | 72 +-
.../authentication/unix/jaas/PamLoginModule.java | 225 +-
.../authentication/unix/jaas/PamPrincipal.java | 68 +-
.../unix/jaas/RemoteUnixLoginModule.java | 776 +-
.../unix/jaas/UnixGroupPrincipal.java | 22 +-
.../unix/jaas/UnixUserPrincipal.java | 22 +-
.../unix/jaas/UsernamePasswordCallbackHandler.java | 20 +-
.../authentication/UnixAuthenticationTester.java | 23 +-
unixauthnative/pom.xml | 2 +-
unixauthnative/src/main/c/credValidator.c | 4 +-
unixauthservice/pom.xml | 40 +-
.../ranger/authentication/PasswordValidator.java | 248 +-
.../authentication/UnixAuthenticationService.java | 629 +-
1726 files changed, 267443 insertions(+), 267910 deletions(-)
delete mode 100644 agents-common/dev-support/spotbugsIncludeFile.xml
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/conditionevaluator/RangerValidityScheduleConditionEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerGrant.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPolicyHeader.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/util/CachedResourceEvaluators.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/conditionevaluator/TestRangerValidityScheduleConditionEvaluator.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/util/TestServiceTags.java
copy agents-common/src/test/resources/{plugin/hive_gds_info.json =>
policyengine/gds/gds_info_hive_access.json} (70%)
copy agents-common/src/test/resources/{plugin/hive_gds_info.json =>
policyengine/gds/gds_info_hive_data_mask.json} (70%)
rename agents-common/src/test/resources/{plugin/hive_gds_info.json =>
policyengine/gds/gds_info_hive_row_filter.json} (86%)
copy
agents-common/src/test/resources/policyengine/gds/{test_gds_policy_engine_hive.json
=> test_gds_policy_hive_access.json} (78%)
copy
agents-common/src/test/resources/policyengine/gds/{test_gds_policy_engine_hive.json
=> test_gds_policy_hive_data_mask.json} (74%)
rename
agents-common/src/test/resources/policyengine/gds/{test_gds_policy_engine_hive.json
=> test_gds_policy_hive_row_filter.json} (74%)
create mode 100644 agents-common/src/test/resources/policyengine/hbaseTags.json
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_hdfs_incremental_update_for_wildcard_evaluators.json
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_tag_hbase.json
create mode 100644 dev-support/RangerCodeScheme-IntelliJ.xml
copy dev-support/ranger-docker/{Dockerfile.ranger-postgres =>
Dockerfile.ranger-oracle} (79%)
create mode 100644 dev-support/ranger-docker/config/init_oracle.sh
copy dev-support/ranger-docker/{docker-compose.ranger-postgres.yml =>
docker-compose.ranger-oracle.yml} (53%)
copy dev-support/ranger-docker/scripts/{hive-site-mysql.xml =>
hive-site-oracle.xml} (93%)
copy
dev-support/ranger-docker/scripts/{ranger-admin-install-postgres.properties =>
ranger-admin-install-oracle.properties} (92%)
copy dev-support/ranger-docker/scripts/{ranger-kms-install-mysql.properties =>
ranger-kms-install-oracle.properties} (97%)
create mode 100644
hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerHBasePlugin.java
create mode 100644
hbase-agent/src/test/resources/policyengine/test_policyengine_hbase_ignoreDenyDescendant.json
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/OperationOptimizer.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerAccessControlEnforcer.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAccessRequest.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuditHandler.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsPlugin.java
rename
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/{HDFSAccessVerifier.java
=> RangerHdfsResource.java} (57%)
delete mode 100644 kms/dev-support/findbugsExcludeFile.xml
copy
agents-common/src/main/java/org/apache/ranger/plugin/conditionevaluator/RangerConditionEvaluator.java
=>
plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKMSAccessRequest.java
(54%)
copy
ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/DefaultAuthorizer.java
=>
plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKMSPlugin.java
(64%)
copy
security-admin/src/main/java/org/apache/ranger/db/XXCredentialStoreDao.java =>
plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKMSResource.java
(70%)
copy
agents-audit/src/main/java/org/apache/ranger/audit/model/SPOOL_FILE_STATUS.java
=>
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/PrestoAccessType.java
(81%)
copy
ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/DefaultAuthorizer.java
=>
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerPrestoAccessRequest.java
(61%)
create mode 100644
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerPrestoResource.java
delete mode 100644 ranger-examples/dev-support/findbugsIncludeFile.xml
copy
agents-common/src/main/java/org/apache/ranger/plugin/util/DownloaderTask.java
=>
ranger-plugin-classloader/src/main/java/org/apache/ranger/plugin/classloader/PluginClassLoaderActivator.java
(52%)
rename
ranger-plugin-classloader/src/test/java/org/apache/ranger/plugin/classloader/test/{Impl
=> impl}/TestChildFistClassLoader.java (51%)
rename
ranger-plugin-classloader/src/test/java/org/apache/ranger/plugin/classloader/test/{Impl
=> impl}/TestPluginImpl.java (85%)
rename
ranger-plugin-classloader/src/test/java/org/apache/ranger/plugin/classloader/test/{Impl
=> impl}/TestPrint.java (83%)
copy
security-admin/db/mysql/patches/{055-add-syncSource-col-in-x_user-x_portal_user-x_group.sql
=> 075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql} (58%)
create mode 100644
security-admin/db/oracle/patches/068-create-view-principal.sql
copy security-admin/db/{sqlserver/patches/021-update-tag-for-owner.sql =>
oracle/patches/069-add-gz_json_x_security_zone.sql} (71%)
copy
security-admin/db/oracle/patches/{054-add-version-in-x_service_version_info.sql
=> 072-alter-x_access_type_def.sql} (84%)
rename security-admin/db/oracle/patches/{067-create-x_trx_log_v2.sql =>
073-create-x_trx_log_v2.sql} (96%)
rename security-admin/db/oracle/patches/{068-create-index-for-x_trx_log.sql =>
074-create-index-for-x_trx_log.sql} (67%)
copy
security-admin/db/oracle/patches/{044-add-role-version-in-serviceVersionInfo.sql
=> 075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql} (63%)
copy
security-admin/db/postgres/patches/{055-add-syncSource-col-in-x_user-x_portal_user-x_group.sql
=> 075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql} (64%)
delete mode 100644
security-admin/db/sqlanywhere/patches/068-create-index-for-x_trx_log.sql
rename security-admin/db/sqlanywhere/patches/{067-create-x_trx_log_v2.sql =>
073-create-x_trx_log_v2.sql} (100%)
copy security-admin/db/sqlanywhere/patches/{027-sortorder-column-size.sql =>
074-create-index-for-x_trx_log.sql} (76%)
copy
security-admin/db/sqlanywhere/patches/{055-add-syncSource-col-in-x_user-x_portal_user-x_group.sql
=> 075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql} (60%)
rename security-admin/db/sqlserver/patches/{067-create-x_trx_log_v2.sql =>
073-create-x_trx_log_v2.sql} (100%)
rename security-admin/db/sqlserver/patches/{068-create-index-for-x_trx_log.sql
=> 074-create-index-for-x_trx_log.sql} (69%)
copy
security-admin/db/sqlserver/patches/{032-add-options-to-policy-and-tag-for-time-based-processing.sql
=> 075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql} (71%)
delete mode 100644
security-admin/src/main/webapp/libs/bower/bootbox/js/bootbox.js
create mode 100644
security-admin/src/main/webapp/libs/bower/bootprompt/bootprompt.js
create mode 100644 security-admin/src/main/webapp/react-webapp/.prettierignore
create mode 100644 security-admin/src/main/webapp/react-webapp/.prettierrc
create mode 100644
security-admin/src/test/java/org/apache/ranger/rest/TestGdsREST.java
