This is an automated email from the ASF dual-hosted git repository.
roryqi pushed a change to annotated tag hive-ci-v0.1.17
in repository https://gitbox.apache.org/repos/asf/gravitino.git
*** WARNING: tag hive-ci-v0.1.17 was modified! ***
from 126a254ae (tag)
to 0da26a4b3 (tag)
tagging cb66b9be30e9d970cf6374f1f5a58c33e1c0a742 (commit)
replaces hive-ci-v0.1.16
by Rory
on Tue Dec 17 19:30:12 2024 +0800
- Log -----------------------------------------------------------------
Add SQL base authorization
-----------------------------------------------------------------------
from 71005e7bf [#5527] Add audit command to roles, users and groups in the
Gravitino CLI (#5802)
add 983ce4be0 [#5790] auth(chain): Chain authorization properties (#5791)
add 1c3949a03 fix compilation error in cli (#5887)
add 94c6a724d [#5842] feat(core): supports credential REST endpoint in
Gravitino server (#5841)
add cb66b9be3 [#5846][FOLLOWUP] dev(build): Change the environment
variable from `ENABLE_JDBC_AUTHORIZATION` to `ENABLE_SQL_BASE_AUTHORIATION`
(#5888)
No new revisions were added by this update.
Summary of changes:
.../ranger/ChainAuthorizationProperties.java | 160 ++++++++++++++++
.../authorization/ranger/RangerAuthorization.java | 23 ++-
.../ranger/RangerAuthorizationPlugin.java | 17 +-
.../ranger/RangerAuthorizationProperties.java | 80 ++++++++
.../ranger/TestChainAuthorizationProperties.java | 213 +++++++++++++++++++++
.../ranger/TestRangerAuthorizationProperties.java | 110 +++++++++++
.../ranger/integration/test/RangerFilesetIT.java | 18 +-
.../ranger/integration/test/RangerHiveE2EIT.java | 18 +-
.../ranger/integration/test/RangerITEnv.java | 26 +--
.../integration/test/RangerIcebergE2EIT.java | 51 ++---
.../ranger/integration/test/RangerPaimonE2EIT.java | 18 +-
.../apache/gravitino/catalog/hive/HiveCatalog.java | 8 +-
.../catalog/hive/HiveCatalogOperations.java | 12 +-
...eta.java => HiveCatalogPropertiesMetadata.java} | 4 +-
.../gravitino/catalog/hive/TestHiveCatalog.java | 2 +-
.../catalog/hive/TestHiveCatalogOperations.java | 32 +---
.../gravitino/catalog/hive/TestHiveSchema.java | 2 +-
.../gravitino/catalog/hive/TestHiveTable.java | 2 +-
.../hive/integration/test/CatalogHiveIT.java | 2 +-
.../integration/test/HiveUserAuthenticationIT.java | 8 +-
.../hive/integration/test/ProxyCatalogHiveIT.java | 4 +-
.../apache/gravitino/cli/GravitinoCommandLine.java | 9 +-
.../java/org/apache/gravitino/GravitinoEnv.java | 14 ++
.../apache/gravitino/catalog/CatalogManager.java | 4 +
.../gravitino/catalog/CredentialManager.java | 53 +++++
.../connector/AuthorizationPropertiesMeta.java | 68 -------
dev/docker/hive/start.sh | 4 +-
docs/security/authorization-pushdown.md | 2 +
.../apache/gravitino/server/GravitinoServer.java | 2 +
.../server/web/rest/ExceptionHandlers.java | 38 ++++
.../rest/MetadataObjectCredentialOperations.java | 100 ++++++++++
.../TestMetadataObjectCredentialOperations.java | 164 ++++++++++++++++
32 files changed, 1058 insertions(+), 210 deletions(-)
create mode 100644
authorizations/authorization-ranger/src/main/java/org/apache/gravitino/authorization/ranger/ChainAuthorizationProperties.java
create mode 100644
authorizations/authorization-ranger/src/main/java/org/apache/gravitino/authorization/ranger/RangerAuthorizationProperties.java
create mode 100644
authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/TestChainAuthorizationProperties.java
create mode 100644
authorizations/authorization-ranger/src/test/java/org/apache/gravitino/authorization/ranger/TestRangerAuthorizationProperties.java
rename
catalogs/catalog-hive/src/main/java/org/apache/gravitino/catalog/hive/{HiveCatalogPropertiesMeta.java
=> HiveCatalogPropertiesMetadata.java} (95%)
create mode 100644
core/src/main/java/org/apache/gravitino/catalog/CredentialManager.java
delete mode 100644
core/src/main/java/org/apache/gravitino/connector/AuthorizationPropertiesMeta.java
create mode 100644
server/src/main/java/org/apache/gravitino/server/web/rest/MetadataObjectCredentialOperations.java
create mode 100644
server/src/test/java/org/apache/gravitino/server/web/rest/TestMetadataObjectCredentialOperations.java
