This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a change to branch atlas-2.6
in repository https://gitbox.apache.org/repos/asf/atlas.git
from 43ff6d0c04 ATLAS-5428: add iceberg rest catalog model (#782)
new e50d3a1c7c ATLAS-5409: Atlas Kafka clients authenticate with
OAUTHBEARER using K… (#762)
new f5d223316e ATLAS-5413: Initialize PatchContext before typedef JSON
patches register Java handlers (#766)
new a891f16617 ATLAS-5418: Enforce entity read check on v1 entity audit
API (#770)
new 66b33ddb1b ATLAS-5158: Remove unused Spring Security XML configuration
(#483)
new 88a03ec751 ATLAS-5421 : Prevent /api/atlas/admin/importfile from
reading arbitrary server files and enumerating filesystem paths (#776)
new 8b3f3f5ab9 ATLAS-5421 : Prevent /api/atlas/admin/importfile from
reading arbitrary server files and enumerating filesystem paths
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
distro/src/conf/atlas-application.properties | 9 +
docs/src/documents/Import-Export/ImportAPI.md | 2 +-
.../documents/Import-Export/ImportAPIOptions.md | 12 +-
.../java/org/apache/atlas/AtlasConfiguration.java | 1 +
.../main/java/org/apache/atlas/AtlasErrorCode.java | 1 +
.../org/apache/atlas/kafka/KafkaNotification.java | 8 +-
.../security/kafka/AtlasKafkaOAuthHandler.java | 264 +++++++++++++++++++++
.../security/kafka/AtlasKafkaOAuthHandlerTest.java | 168 +++++++++++++
release-log.txt | 5 +
.../repository/impexp/ImportFilePathValidator.java | 112 +++++++++
.../atlas/repository/impexp/ImportService.java | 18 +-
.../repository/patches/AtlasPatchManager.java | 32 ++-
.../bootstrap/AtlasTypeDefStoreInitializer.java | 4 +-
.../impexp/ImportFilePathValidatorTest.java | 185 +++++++++++++++
.../atlas/repository/impexp/ImportServiceTest.java | 29 ++-
.../repository/patches/AtlasPatchManagerTest.java | 19 ++
.../AtlasTypeDefStoreInitializerTest.java | 8 +-
.../apache/atlas/web/resources/EntityResource.java | 6 +
.../java/org/apache/atlas/web/rest/EntityREST.java | 27 ++-
.../apache/atlas/web/rest/NotificationREST.java | 2 +
webapp/src/main/resources/spring-security.xml | 110 ---------
.../atlas/web/resources/EntityResourceTest.java | 52 +++-
22 files changed, 928 insertions(+), 146 deletions(-)
create mode 100644
notification/src/main/java/org/apache/atlas/security/kafka/AtlasKafkaOAuthHandler.java
create mode 100644
notification/src/test/java/org/apache/atlas/security/kafka/AtlasKafkaOAuthHandlerTest.java
create mode 100644
repository/src/main/java/org/apache/atlas/repository/impexp/ImportFilePathValidator.java
create mode 100644
repository/src/test/java/org/apache/atlas/repository/impexp/ImportFilePathValidatorTest.java
delete mode 100644 webapp/src/main/resources/spring-security.xml