This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a change to branch
dependabot/pip/ranger-tools/src/main/python/fonttools-4.43.0
in repository https://gitbox.apache.org/repos/asf/ranger.git
discard aab0c9301 Bump fonttools from 4.34.4 to 4.43.0 in
/ranger-tools/src/main/python
add 72270ab75 RANGER-4851 : Upon editing an User we are seeing some
discrepancy in its Audit Admin logs
add 477f87950 RANGER-4874: replaced javax.ws.rs-api with jsr311-api, as
jersey-bundle fails with javax.ws.rs-api - #2
add 768044735 RANGER-4878: upgraded webpack version to latest 5.93.0
add e97f95cf1 RANGER-4864: Upon performing Policy Import some of Audit
Admin logs are improper
add 1e2667494 RANGER-4882: updated dependent library versions -
fasterxml.jackson, jersey
add f1c8f00ec RANGER-4884: updated dependent library versions: Hadoop, AWS
SDK, avro, snakeyaml; excluded io.netty
add 286066a86 RANGER-4877 : Upgrade requireJS to 2.3.6 to 2.3.7.
add 9fa4e4c85 Added 'Mugdha Varadkar' as a committer
add 5e4caa5f7 updated committer details for mneethiraj
add 9de9676d5 RANGER-4889: updated RangerMemSizing to support access
request evaluations
add cbc70f694 RANGER-4893: enhanced trie to support custom handling of
matches
add f58a47e2d RANGER-4891: replaced use of PrivilegedAction with
PrivilegedExceptionAction in calls to UserGroupInformation.doAs()
add 4e365456f RANGER-4904: updated Hadoop version to 3.3.6; removed avro
dependency from Ranger KMS assembly
add c0480ed72 RANGER-4905:Reduce memory needed to create Ranger policy
engine
add d338761ef RANGER-4709: Auditing set role command in hive
add c41604713 Added Guru Thejus Arveti as contributor
add 1709b8050 RANGER-4909 : Upgrade axios library version from 1.7.2 to
1.7.4 in Ranger Admin React JS
add cf2c4a536 RANGER-4908: updated plugin to use session cookie for all
APIs
add 2e34537fa RANGER-4911: support validity-schedule in datasets/projects
to enable automatic expiry
add 8bb2053f8 Fix maven build - add jetbrains repository (#380)
add 89879dc54 RANGER-4921: Fix docker compose command in CI (#374)
add 2c77bb8f0 RANGER-4924 : Upgrade webpack library version from 5.93.0 to
5.94.0 in Ranger Admin React JS
add 705f1bf4c RANGER-4925: Cache downloaded archives during CI docker
build (#383)
add f1ba91b11 RANGER-4889: updated RangerMemSizing to support option -k,
to specify list of resource keys - #2
add 7aa065860 RANGER-4922: Reduce time to find tags associated with
multi-level resource
add 6cc4280b5 RANGER-4622: Fix the default value of
ranger.accesslog.rotate.rename_on_rotate (#294)
add 204801c62 RANGER-3746: Introduce ubi9-minimal as the ranger base image
with build & space optimizations (#288)
add 4f6923a4b Added 'Bhavik Patel' as a PMC
add a463e2fb7 RANGER-4385: Fix role filtering logic in RolePredicateUtil
(#280)
add 325900dde RANGER-4814 : Ranger - Upgrade Aircompressor to 0.27
add de085b8b1 RANGER-4313: fix typo in DefaultSchemaRegistryClient (#272)
add 7757ea669 RANGER-3880: updated dba_script.py to set useSSL flag (#173)
add 5b22d92b1 RANGER-3746: Add back dist/.gitignore (#384)
add f49413f97 RANGER-3801: Add support for Ozone in docker (#377)
add 6b777130d RANGER-4914: updated tagsync to support Ozone OFS entities
(#385)
add f7fda3cb2 RANGER-4931:Handling Unknown column 'rangerusersyncID' in
'field list' (#390)
add e671f8614 RANGER-4915:Fix the default SSL Ciphers are too weak issue
for user sync service (#375)
add 854a113f2 RANGER-4307: Allow users customize the time interval (#269)
add 2081a895a RANGER-4912: Upgrade Spring framework to 5.3.39 (#392)
add 5fc70579e RANGER-4935 : Updating library dependencies in Ranger Admin
React package-lock.json
add 64738a246 RANGER-4213: Getting 302 status code instead of 419 in case
of session timeout
add 5f26ed47a RANGER-4936 : Feature for download and upload of individual
policies
add 7ba69cba4 RANGER-4914: Tagsync for ozone - set isRecursive=true for
both ofs and o3fs keys by default (#394)
add bc596e627 RANGER-4820: Support authorization of multiple accesses
grouped by access groups in one policy engine call - #2
add 93c3f6329 RANGER-4934: Ranger API to add and delete resources to the
DataShare in bulk.
add 7af593110 Added 'Brijesh Bhalala' as a committer
add 4f297c35b RANGER-4938: Ensure that only one instance of Ranger plugin
is created in an Ozone Manager process
add 0f6684863 RANGER-4944 : Remove save option and cancel option on User
profile page for users other than ROLE_SYS_ADMIN role
add c1aaffb63 RANGER-4809: Utility to migrate admin audit logs in
x_trx_log table x_trx_log_v2 table
add a4f8cfbdc RANGER-4948: optimize GDS policy engine to use a single
trie-set for all resources across data shares
add 28c61f5d7 RANGER-3801: update docker download-archives.sh to download
all by default
add 47134888e RANGER-4937: Add a new GDS resource API for adding new
resources to a new or existing DataShare and add it to the DataSet
add a28c122d5 RANGER-4949 : Creating security zone with any role selected
fails for oracle DB
add f06d0e708 RANGER-4901 : [Ranger React UI] Admin audits for 'Import
Delete' operation type do not display service name field
add 8d89c9136 RANGER-4951: Prune docker cache before docker-build (#404)
add 16c94a964 RANGER-4956: fixed dedup tags to address potential infinite
loop
add 41de6c6eb RANGER-4961: fix REST API to retrieve policies for a
resource to include tag-based policies as well
add d767c7899 RANGER-4777: Improve API /public/v2/api/service-headers to
filter services depending on user role
add 50f75d7d3 RANGER-4952: Add support for Hive 4.0.1 (#400)
add d54eae3d5 RANGER-4963: Unescaped spaces with disjunctive matching in
solr ranger_auth
add dfd57ff52 RANGER-4922: Reduce time to find tags associated with
multi-level resource - Handle requests with resourceMatchingScope set to
SELF_OR_DESCENDANTS
add d44d5b3df RANGER-4966: Remove self node from the resourceTrie only if
it has no children, no evaluators and no wildcard-evaluators
add 8d17b4b9d RANGER-4967: Refactor RangerTagEnricher class for reusability
add 25f428cde RANGER-4607: Ranger REST API improvements
add 926877837 RANGER-4964: Issue with x_trx_log_IDX_trx_id Index in
x_trx_log Table, causing patch failure
add 8038af6b2 RANGER-4933: Ranger API to Summary View of DataShares in GDS
add ad1fdce46 RANGER-4970: add custom condition to support validity
schedule
add 63acaead1 RANGER-4976: update GDS service-def to support validity
schedule condition in grants
add c97592b71 RANGER-4975: DB patch fix to support for new columns in
Ranger Dataset for MySql and Postrgres
add 06e02200f RANGER-4976: update GDS service-def to support validity
schedule condition in grants - #2
add 2b2da8d79 RANGER-4972 : Ranger User Type federated user should not log
into Ranger for doing any operation
add 03bca8e90 RANGER-4833 : Upgrade from Bootbox.js to Bootprompt.js
add c2765370d RANGER-4973 : Enhance Ranger UI to support a new user type
for external users from Data Sharing
add 349373805 RANGER-4984: Ranger Federated User enum order should be
correct to avoid potential failure in Ranger Admin
add 50cf9e7cc RANGER-4960: API to do Grant / Revoke permissions on the
Dataset for users / groups/ roles
add 592e6d273 Added 'Mahesh Bandal' as a committer
add bec8af3da RANGER-4980: Delete permissions on directory is denied which
has hierarchy of files/directory rooted at the argument passed to the HDFS
command
add e4b7f149f RANGER-4985: update GdsAccessResult to include fields
allowedByDatasets and allowedByProjects
add 9d95ec5c9 RANGER-4523: Suggestion on improving logs from
AtlasNotificationMapper
add fd9e03fd3 RANGER-4982: Reducing few ranger plugin logs to debug level
add 4e96deded RANGER-4988: Adding syncSource and userRole queryParams to
ranger searchUsers rest api for swagger
add 9c492199f RANGER-4981: Log LDAP auth failures at error level in ranger
admin
add 2a340fa66 RANGER-4990: Rationalize processing of match-types for
policy and tag evaluation
add d6f4ebc7b RANGER-4992: Adding new field zonedEventTime in
getAccessLogs API
add 08059b54f RANGER-4986: Implement best practices for Ranger GDS REST
API module
add 5970eda4f RANGER-4997: Ranger DataShare created shows status as ACTIVE
instead of the default REQUESTED.
add 3efbbc782 RANGER-4998: Add validations to Ensure Non-Empty Resource
Values in GDS Resource Creation and Edit APIs
add 89963fbef RANGER-4989: DB patch fix for
add_validity_schedule_labels_keywords_in_x_gds_dataset in mysql
add dad4833d0 RANGER-4991: GDS policy evaluation support for masking and
row-filtering
add 316049090 RANGER-5001: RANGER-4977: Support ignoreDescendantDeny & fix
hbase scan authorization (#411)
add 925ed2311 RANGER-5001: Resolve merge conflicts to fix compilation
failure (#415)
add 806fd9d32 RANGER-5007: Expose service configs in RangerBasePlugin
(#414)
add dd5b5aa8f RANGER-5004: GDS masking to support use of a single mask for
multiple columns
add a553fa060 RANGER-5005: Use sortpom maven plugin to improve readability
of pom files
add 6c729a256 RANGER-3641: KMS API to generate EDEK and DEK together
add 21b8ca9d9 RANGER-4942: Fix docker build with Dockerfile.ranger-build
and update env variables with ENV key=value format
add 651dcf2b0 RANGER-5010: fix validity schedule evaluator handling of
default timezone
add 6988b3157 RANGER-5000: Add validations to ensure that the policy items
are properly formed during dataset policy creation / edit
add 91cc8a9fb RANGER-5016: Deprecate use of version field in
docker-compose.yaml (#421)
add cf736a549 RANGER-4670: (hbase plugin) Config to support disabling
column authorization for fully authorized column families (#417)
add e01b34502 RANGER-4996: Made meta attributes fields in policy rest api
response configurable for retrieval
add 5c8d4d045 RANGER-5017: update checkstyle to improve code readability
add 34e4b31ab RANGER-5065. Disable releases for apache.snapshots repo
(#435)
add c4ea5fdb3 RANGER-5033: checkstyle compliance updates - intg (#434)
add 6f57f2f69 RANGER-5066. Improve CI workflow (#438)
add 599eb5d78 RANGER-5041: checkstyle compliance updates - plugin-kudu
(#433)
add b35fec5b2 RANGER-5054: checkstyle compliance updates - ranger-authn
(#432)
add 0273c79f3 RANGER-5044: checkstyle compliance updates -
plugin-nifi-registry (#430)
add ceb3ff963 RANGER-5057: checkstyle compliance updates - ranger-metrics
(#431)
add 1d53fc84d RANGER-5018: checkstyle complince updates - agents-audit
add f5521c9fa RANGER-5017: skip checkstyle by default to reduce
unnecessary ERROR logs in CI build, can be enabled at module level - #2
add 7e4a629b3 RANGER-5067. ranger-nestedstructure-plugin is not built on
linux (#443)
add f056eae1f RANGER-5008:Handle creation of federated user in Ranger
add 993025563 RANGER-5019: Fix spotbug checks for sub-modules (#441)
add d8157a69e RANGER-5068: Bump rat-plugin to 0.16.1 (#445)
add 90a5ea019 RANGER-5028: checkstyle compliance updates -
credentialbuilder (#444)
add 9d462dde3 RANGER-5021: Add timeouts to jobs in CI (#427)
add d482170dc RANGER-5070: update profiles to include dependent modules
for kms and security-admin (#446)
add 0e4fed70a RANGER-5025: checkstyle compliance updates - agents-common
add 234d28f4a RANGER-5071: CI - Revert to ubuntu-22.04 runner (#451)
add 47670e679 RANGER-5046: checkstyle compliance updates - plugin-ozone
(#429)
add 199a8157e RANGER-5043: checkstyle compliance updates -
plugin-nestedstructure module (#449)
add 92f346687 RANGER-5006: User name column in Ranger audit not rendering
properly when it is of larger length
add 6e62ae756 RANGER-5062: checkstyle compliance updates - storm module
(#448)
add 0e3c357ef RANGER-5063: checkstyle compliance updates - tagsync (#447)
add c70be7178 RANGER-5052: checkstyle compliance updates - plugin-yarn
module (#452)
add 2f34ae59f RANGER-5032: checkstyle compliance updates - hive-agent
(#450)
add e138b300b RANGER-5048: checkstyle compliance updates -
plugin-schema-registry module (#454)
add c34e78001 RANGER-5050: checkstyle compliance updates - plugin-sqoop
module (#456)
add db3cb2e2f RANGER-5073: docker setup updated to support Oracle database
add 990496a05 RANGER-5002: fix schema creation/migration failures with
Oracle database
add ae6ea0f74 RANGER-5027: agents-installer module: update for code
readability improvement (#458)
add a7f1a7325 RANGER-5059: checkstyle compliance updates - ranger-tools
add 20e0e6985 RANGER-5058: checkstyle compliance updates -
ranger-plugin-classloader (#460)
add decba1b44 RANGER-5049: checkstyle compliance updates - plugin-solr
module (#455)
add 728090e60 RANGER-5031: checkstyle compliance updates - hdfs-agent
(#461)
add d86e8201b [RANGER-5060]: checkstyle compliance updates - ranger-util
module (#462)
add d7e69e766 RANGER-5037: checkstyle compliance updates - plugin-atlas
(#466)
add de2fa77e6 RANGER-4791 : Fixing build issue for Phantomjs Auto
configuration failed due to OPEN_SSL
add 7645b977e RANGER-5077: Autolink GitHub with Jira (#470)
add 15cc59f40 RANGER-5045: checkstyle compliance updates - plugin-nifi
module (#467)
add ece6a16fc RANGER-5042: checkstyle compliance updates - plugin-kylin
module (#468)
add a1f6239ca RANGER-5079: remove unnecessary warn log -
NashornScriptEngineCreator on JDK15 or higher (#472)
add c1e64ff3c RANGER-5055: checkstyle compliance updates - ranger-common-ha
add caf6a1a9f RANGER-5039: checkstyle compliance updates - plugin-kafka
module (#463)
add 95d96348c RANGER-5030: checkstyle compliance updates - hbase-agent
module (#471)
add 05d4ff8ee RANGER-5035 : kms module: update for code readability
improvement (#474)
add b3e3b18aa RANGER-5053: checkstyle compliance updates - plugin-shim
modules (#473)
add 71eb184db RANGER-5075: fix for plugin installation failures due to
missing libraries
add 66f2e14f4 RANGER-5040 : plugin-kms module: update for code readability
improvement (#476)
add 425d22bb4 RANGER-5026: agents-cred module: update for code readability
improvement
add 426f2a0c5 RANGER-5064: checkstyle compliance updates - usersync modules
add e080c0c79 RANGER-5029: checkstyle compliance updates -
embeddedwebserver module (#477)
add 932e3c680 RANGER-5034: checkstyle compliance updates - jisql module
(#478)
add b6f14743f RANGER-4791 : Updating cookie and express dependencies in
Ranger Admin React package-lock.json
add df94b7f07 Revert "RANGER-4791 : Updating cookie and express
dependencies in Ranger Admin React package-lock.json"
add 0646b607a RANGER-5083 : Updating cookie and express dependencies in
Ranger Admin React package-lock.json
add 218288b20 RANGER-4969 : Ranger - Upgrade commons-io to 2.17.0
add 26e951f62 RANGER-5038: checkstyle compliance updates - elasticsearch
module (#479)
add 36dc76409 RANGER-5051: checkstyle compliance updates - plugin-trino
(#480)
add 789604fcb RANGER-5056 : checkstyle compliance updates -
ranger-examples (#481)
add 87b4e05dc RANGER-5047: checkstyle compliance updates - presto module
(#482)
add 64fc4aaa8 RANGER-4453: Exception while calling solr api when ranger
authorisation is disabled for solr
add 236e69c8a RANGER-4520: Both usersync/tagsync instances becoming active
and syncing users/tags
add ca73b3c8c RANGER-5069: Add ability to Kafka authorizer to define super
users through Kafka config
add 6dd1af9ab RANGER-4388: KMS metrics - Implementing best practices (#494)
add 8a605be50 RANGER-5089: Getting 204 instead of 404 status code when
invalid service name is passed
add 6b00c50fd RANGER-5036: checkstyle compliance updates - knox-agent
(#502)
add 080431f39 RANGER-5072: Bump org.apache.avro:avro from 1.11.3 to 1.11.4
(#453)
add 615e245b5 RANGER-5095: Bump atlas to 2.4.0 & spring-ldap-core to 2.4.4
(#500)
add c4fd910bd Bump fonttools from 4.34.4 to 4.43.0 in
/ranger-tools/src/main/python
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (aab0c9301)
\
N -- N -- N
refs/heads/dependabot/pip/ranger-tools/src/main/python/fonttools-4.43.0
(c4fd910bd)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 2 +
.github/workflows/maven.yml | 75 +-
agents-audit/pom.xml | 402 +-
.../AmazonCloudWatchAuditDestination.java | 113 +-
.../ranger/audit/destination/AuditDestination.java | 80 +-
.../destination/ElasticSearchAuditDestination.java | 338 +-
.../audit/destination/FileAuditDestination.java | 435 +-
.../audit/destination/HDFSAuditDestination.java | 355 +-
.../audit/destination/Log4JAuditDestination.java | 202 +-
.../audit/destination/SolrAuditDestination.java | 899 +--
.../apache/ranger/audit/model/AuditEventBase.java | 14 +-
.../ranger/audit/model/AuditIndexRecord.java | 226 +-
.../apache/ranger/audit/model/AuthzAuditEvent.java | 1089 ++--
.../ranger/audit/model/EnumRepositoryType.java | 31 +-
.../ranger/audit/model/SPOOL_FILE_STATUS.java | 2 +-
.../ranger/audit/provider/AsyncAuditProvider.java | 526 +-
.../audit/provider/AuditFileCacheProvider.java | 62 +-
.../apache/ranger/audit/provider/AuditHandler.java | 26 +-
.../audit/provider/AuditMessageException.java | 65 +-
.../audit/provider/AuditProviderFactory.java | 1034 +--
.../ranger/audit/provider/AuditWriterFactory.java | 90 +-
.../ranger/audit/provider/BaseAuditHandler.java | 935 +--
.../audit/provider/BufferedAuditProvider.java | 198 +-
.../apache/ranger/audit/provider/DebugTracer.java | 23 +-
.../ranger/audit/provider/DummyAuditProvider.java | 186 +-
.../ranger/audit/provider/LocalFileLogBuffer.java | 1278 ++--
.../ranger/audit/provider/Log4jAuditProvider.java | 144 +-
.../apache/ranger/audit/provider/Log4jTracer.java | 56 +-
.../apache/ranger/audit/provider/LogBuffer.java | 11 +-
.../ranger/audit/provider/LogDestination.java | 28 +-
.../org/apache/ranger/audit/provider/MiscUtil.java | 1895 +++---
.../audit/provider/MultiDestAuditProvider.java | 413 +-
.../provider/StandAloneAuditProviderFactory.java | 53 +-
.../audit/provider/hdfs/HdfsAuditProvider.java | 124 +-
.../audit/provider/hdfs/HdfsLogDestination.java | 922 +--
.../audit/provider/kafka/KafkaAuditProvider.java | 331 +-
.../audit/provider/solr/SolrAuditProvider.java | 537 +-
.../apache/ranger/audit/queue/AuditAsyncQueue.java | 358 +-
.../apache/ranger/audit/queue/AuditBatchQueue.java | 679 +-
.../audit/queue/AuditFileCacheProviderSpool.java | 1011 ++-
.../apache/ranger/audit/queue/AuditFileQueue.java | 46 +-
.../ranger/audit/queue/AuditFileQueueSpool.java | 998 ++-
.../apache/ranger/audit/queue/AuditFileSpool.java | 1572 ++---
.../org/apache/ranger/audit/queue/AuditQueue.java | 385 +-
.../ranger/audit/queue/AuditSummaryQueue.java | 469 +-
.../org/apache/ranger/audit/test/TestEvents.java | 53 +-
.../ranger/audit/utils/AbstractKerberosUser.java | 79 +-
.../audit/utils/AbstractRangerAuditWriter.java | 331 +-
.../audit/utils/InMemoryJAASConfiguration.java | 144 +-
.../apache/ranger/audit/utils/KerberosAction.java | 20 +-
.../ranger/audit/utils/KerberosJAASConfigUser.java | 25 +-
.../apache/ranger/audit/utils/KerberosUser.java | 7 +-
.../org/apache/ranger/audit/utils/ORCFileUtil.java | 373 +-
.../ranger/audit/utils/RangerAuditWriter.java | 2 +-
.../ranger/audit/utils/RangerJSONAuditWriter.java | 183 +-
.../ranger/audit/utils/RangerORCAuditWriter.java | 155 +-
.../apache/ranger/audit/utils/RollingTimeUtil.java | 494 +-
.../org/apache/ranger/audit/utils/SolrAppUtil.java | 11 +-
.../audit/utils/RangerJSONAuditWriterTest.java | 52 +-
agents-common/dev-support/spotbugsIncludeFile.xml | 64 -
agents-common/pom.xml | 195 +-
.../security/KrbPasswordSaverLoginModule.java | 79 +-
.../apache/hadoop/security/SecureClientLogin.java | 352 +-
.../admin/client/AbstractRangerAdminClient.java | 20 +-
.../ranger/admin/client/RangerAdminClient.java | 39 +-
.../ranger/admin/client/RangerAdminRESTClient.java | 2406 +++----
.../admin/client/datatype/GrantRevokeData.java | 420 +-
.../ranger/admin/client/datatype/RESTResponse.java | 364 +-
.../hadoop/config/RangerAdminConfig.java | 46 +-
.../hadoop/config/RangerAuditConfig.java | 15 +-
.../hadoop/config/RangerChainedPluginConfig.java | 46 +-
.../hadoop/config/RangerConfigConstants.java | 43 +-
.../hadoop/config/RangerConfiguration.java | 138 +-
.../hadoop/config/RangerLegacyConfigBuilder.java | 425 +-
.../hadoop/config/RangerPluginConfig.java | 102 +-
.../hadoop/constants/RangerHadoopConstants.java | 157 +-
.../ranger/authorization/utils/JsonUtils.java | 165 +-
.../ranger/authorization/utils/StringUtil.java | 976 ++-
.../plugin/audit/RangerDefaultAuditHandler.java | 518 +-
.../audit/RangerMultiResourceAuditHandler.java | 77 +-
.../apache/ranger/plugin/client/BaseClient.java | 336 +-
.../ranger/plugin/client/HadoopConfigHolder.java | 870 ++-
.../ranger/plugin/client/HadoopException.java | 86 +-
.../RangerAbstractConditionEvaluator.java | 51 +-
.../RangerAccessedFromClusterCondition.java | 51 +-
.../RangerAccessedFromClusterTypeCondition.java | 52 +-
.../RangerAccessedNotFromClusterCondition.java | 51 +-
.../RangerAccessedNotFromClusterTypeCondition.java | 52 +-
...AnyOfExpectedTagsPresentConditionEvaluator.java | 71 +-
.../RangerConditionEvaluator.java | 10 +-
.../RangerContextAttributeValueInCondition.java | 58 +-
.../RangerContextAttributeValueNotInCondition.java | 58 +-
...ngerHiveResourcesAccessedTogetherCondition.java | 243 +-
...rHiveResourcesNotAccessedTogetherCondition.java | 243 +-
.../plugin/conditionevaluator/RangerIpMatcher.java | 354 +-
...oneOfExpectedTagsPresentConditionEvaluator.java | 70 +-
.../RangerScriptConditionEvaluator.java | 145 +-
.../RangerScriptTemplateConditionEvaluator.java | 78 +-
.../RangerTagsAllPresentConditionEvaluator.java | 77 +-
.../conditionevaluator/RangerTimeOfDayMatcher.java | 345 +-
.../RangerValidityScheduleConditionEvaluator.java | 81 +
.../RangerAbstractContextEnricher.java | 505 +-
.../RangerAbstractGeolocationProvider.java | 207 +-
.../RangerAdminGdsInfoRetriever.java | 110 +-
.../contextenricher/RangerAdminTagRetriever.java | 84 +-
.../RangerAdminUserStoreRetriever.java | 9 +-
.../contextenricher/RangerContextEnricher.java | 22 +-
.../RangerFileBasedGeolocationProvider.java | 11 +-
.../RangerFileBasedTagRetriever.java | 365 +-
.../plugin/contextenricher/RangerGdsEnricher.java | 198 +-
.../contextenricher/RangerGdsInfoRetriever.java | 36 +-
.../RangerServiceResourceMatcher.java | 116 +-
.../plugin/contextenricher/RangerTagEnricher.java | 2022 +++---
.../plugin/contextenricher/RangerTagForEval.java | 151 +-
.../plugin/contextenricher/RangerTagRetriever.java | 68 +-
.../contextenricher/RangerUserStoreEnricher.java | 152 +-
.../contextenricher/RangerUserStoreRefresher.java | 304 +-
.../contextenricher/RangerUserStoreRetriever.java | 15 +-
.../externalretrievers/GetFromDataFile.java | 12 +-
.../externalretrievers/GetFromURL.java | 56 +-
.../RangerMultiSourceUserStoreRetriever.java | 197 +-
.../ranger/plugin/errors/ValidationErrorCode.java | 34 +-
.../apache/ranger/plugin/geo/BinarySearchTree.java | 414 +-
.../ranger/plugin/geo/GeolocationMetadata.java | 96 +-
.../org/apache/ranger/plugin/geo/RangeChecker.java | 2 +-
.../ranger/plugin/geo/RangerGeolocationData.java | 396 +-
.../plugin/geo/RangerGeolocationDatabase.java | 109 +-
.../org/apache/ranger/plugin/geo/ValuePrinter.java | 109 +-
.../apache/ranger/plugin/geo/ValueProcessor.java | 2 +-
.../apache/ranger/plugin/model/AuditFilter.java | 19 +-
.../org/apache/ranger/plugin/model/GroupInfo.java | 15 +-
.../ranger/plugin/model/RangerBaseModelObject.java | 552 +-
.../ranger/plugin/model/RangerDatasetHeader.java | 13 +-
.../org/apache/ranger/plugin/model/RangerGds.java | 894 ++-
.../apache/ranger/plugin/model/RangerGrant.java | 103 +
.../apache/ranger/plugin/model/RangerMetrics.java | 10 +-
.../ranger/plugin/model/RangerPluginInfo.java | 961 +--
.../apache/ranger/plugin/model/RangerPolicy.java | 3526 ++++++-----
.../ranger/plugin/model/RangerPolicyDelta.java | 91 +-
.../ranger/plugin/model/RangerPolicyHeader.java | 130 +
.../model/RangerPolicyResourceSignature.java | 596 +-
.../ranger/plugin/model/RangerPrincipal.java | 9 +-
.../org/apache/ranger/plugin/model/RangerRole.java | 223 +-
.../ranger/plugin/model/RangerSecurityZone.java | 115 +-
.../plugin/model/RangerSecurityZoneHeaderInfo.java | 5 +-
.../ranger/plugin/model/RangerSecurityZoneV2.java | 172 +-
.../ranger/plugin/model/RangerServerHealth.java | 55 +-
.../apache/ranger/plugin/model/RangerService.java | 507 +-
.../ranger/plugin/model/RangerServiceDef.java | 6672 ++++++++++----------
.../plugin/model/RangerServiceHeaderInfo.java | 10 +
.../ranger/plugin/model/RangerServiceResource.java | 252 +-
.../model/RangerServiceResourceWithTags.java | 58 +-
.../ranger/plugin/model/RangerServiceTags.java | 84 +-
.../org/apache/ranger/plugin/model/RangerTag.java | 369 +-
.../apache/ranger/plugin/model/RangerTagDef.java | 30 +-
.../ranger/plugin/model/RangerTagResourceMap.java | 69 +-
.../plugin/model/RangerValidityRecurrence.java | 213 +-
.../plugin/model/RangerValiditySchedule.java | 56 +-
.../ranger/plugin/model/ServiceDeleteResponse.java | 80 +-
.../org/apache/ranger/plugin/model/UserInfo.java | 24 +-
.../model/validation/RangerPolicyValidator.java | 2383 +++----
.../model/validation/RangerRoleValidator.java | 394 +-
.../validation/RangerSecurityZoneValidator.java | 152 +-
.../model/validation/RangerServiceDefHelper.java | 1880 +++---
.../validation/RangerServiceDefValidator.java | 1669 ++---
.../model/validation/RangerServiceValidator.java | 631 +-
.../plugin/model/validation/RangerValidator.java | 1613 ++---
.../RangerValidityScheduleValidator.java | 270 +-
.../validation/RangerZoneResourceMatcher.java | 46 +-
.../model/validation/ValidationFailureDetails.java | 156 +-
.../ValidationFailureDetailsBuilder.java | 84 +-
.../ranger/plugin/policyengine/CacheMap.java | 6 +-
.../ranger/plugin/policyengine/PolicyEngine.java | 608 +-
.../plugin/policyengine/PolicyEvaluatorForTag.java | 75 +-
.../plugin/policyengine/RangerAccessRequest.java | 58 +-
.../policyengine/RangerAccessRequestImpl.java | 744 +--
.../policyengine/RangerAccessRequestReadOnly.java | 208 +-
.../policyengine/RangerAccessRequestWrapper.java | 91 +-
.../plugin/policyengine/RangerAccessResource.java | 29 +-
.../policyengine/RangerAccessResourceImpl.java | 461 +-
.../policyengine/RangerAccessResourceReadOnly.java | 81 +-
.../plugin/policyengine/RangerAccessResult.java | 767 +--
.../policyengine/RangerAccessResultProcessor.java | 5 +-
.../plugin/policyengine/RangerMutableResource.java | 8 +-
.../plugin/policyengine/RangerPluginContext.java | 187 +-
.../plugin/policyengine/RangerPolicyEngine.java | 85 +-
.../policyengine/RangerPolicyEngineImpl.java | 2204 ++++---
.../policyengine/RangerPolicyEngineOptions.java | 443 +-
.../policyengine/RangerPolicyRepository.java | 801 ++-
.../policyengine/RangerRequestScriptEvaluator.java | 2328 +++----
.../plugin/policyengine/RangerResourceACLs.java | 1122 ++--
.../policyengine/RangerResourceAccessInfo.java | 32 +-
.../plugin/policyengine/RangerResourceTrie.java | 797 +--
.../policyengine/RangerSecurityZoneMatcher.java | 79 +-
.../policyengine/RangerTagAccessRequest.java | 64 +-
.../plugin/policyengine/RangerTagResource.java | 22 +-
.../plugin/policyengine/gds/GdsAccessResult.java | 164 +-
.../policyengine/gds/GdsDataShareEvaluator.java | 169 +-
.../policyengine/gds/GdsDatasetEvaluator.java | 123 +-
.../plugin/policyengine/gds/GdsDipEvaluator.java | 25 +-
.../plugin/policyengine/gds/GdsDshidEvaluator.java | 23 +-
.../plugin/policyengine/gds/GdsPolicyEngine.java | 644 +-
.../policyengine/gds/GdsProjectEvaluator.java | 81 +-
.../gds/GdsSharedResourceEvaluator.java | 140 +-
.../RangerAbstractPolicyEvaluator.java | 961 +--
.../RangerAbstractPolicyItemEvaluator.java | 326 +-
.../RangerAuditPolicyEvaluator.java | 177 +-
.../RangerCustomConditionEvaluator.java | 30 +-
.../RangerDataMaskPolicyItemEvaluator.java | 5 +-
.../RangerDefaultDataMaskPolicyItemEvaluator.java | 88 +-
.../RangerDefaultPolicyEvaluator.java | 2459 ++++----
.../RangerDefaultPolicyItemEvaluator.java | 471 +-
.../RangerDefaultRowFilterPolicyItemEvaluator.java | 75 +-
.../RangerOptimizedPolicyEvaluator.java | 204 +-
.../policyevaluator/RangerPolicyEvaluator.java | 1308 ++--
.../policyevaluator/RangerPolicyItemEvaluator.java | 62 +-
.../RangerRowFilterPolicyItemEvaluator.java | 5 +-
.../RangerValidityScheduleEvaluator.java | 257 +-
.../RangerDefaultPolicyResourceMatcher.java | 865 ++-
.../RangerPolicyResourceMatcher.java | 128 +-
.../RangerResourceEvaluator.java | 3 +-
.../RangerAbstractResourceMatcher.java | 1326 ++--
.../RangerDefaultResourceMatcher.java | 199 +-
.../resourcematcher/RangerPathResourceMatcher.java | 1314 ++--
.../resourcematcher/RangerResourceMatcher.java | 19 +-
.../resourcematcher/RangerURLResourceMatcher.java | 373 +-
.../plugin/resourcematcher/ResourceMatcher.java | 183 +-
.../resourcematcher/ScheduledTimeExactMatcher.java | 3 +-
.../resourcematcher/ScheduledTimeRangeMatcher.java | 5 +-
.../ranger/plugin/service/RangerAuthContext.java | 6 +-
.../plugin/service/RangerAuthContextListener.java | 1 -
.../ranger/plugin/service/RangerBasePlugin.java | 2612 ++++----
.../ranger/plugin/service/RangerBaseService.java | 901 ++-
.../ranger/plugin/service/RangerChainedPlugin.java | 20 +-
.../service/RangerDefaultRequestProcessor.java | 32 +-
.../plugin/service/RangerDefaultService.java | 44 +-
.../plugin/service/ResourceLookupContext.java | 107 +-
.../ranger/plugin/store/AbstractGdsStore.java | 141 +-
.../ranger/plugin/store/AbstractPredicateUtil.java | 1908 +++---
.../ranger/plugin/store/AbstractServiceStore.java | 1215 ++--
.../ranger/plugin/store/AbstractTagStore.java | 36 +-
.../plugin/store/EmbeddedServiceDefsUtil.java | 739 +--
.../org/apache/ranger/plugin/store/GdsStore.java | 9 +-
.../ranger/plugin/store/GeolocationStore.java | 7 +-
.../java/org/apache/ranger/plugin/store/PList.java | 371 +-
.../store/RangerServiceResourceSignature.java | 158 +-
.../ranger/plugin/store/RolePredicateUtil.java | 236 +-
.../org/apache/ranger/plugin/store/RoleStore.java | 24 +-
.../plugin/store/SecurityZonePredicateUtil.java | 207 +-
.../ranger/plugin/store/SecurityZoneStore.java | 9 +-
.../ranger/plugin/store/ServicePredicateUtil.java | 391 +-
.../apache/ranger/plugin/store/ServiceStore.java | 95 +-
.../ranger/plugin/store/StoredServiceResource.java | 12 +-
.../ranger/plugin/store/TagPredicateUtil.java | 493 +-
.../org/apache/ranger/plugin/store/TagStore.java | 23 +-
.../apache/ranger/plugin/store/TagValidator.java | 459 +-
.../plugin/store/file/GeolocationFileStore.java | 344 +-
.../ranger/plugin/util/AutoClosableLock.java | 8 +-
.../plugin/util/CachedResourceEvaluators.java | 170 +
.../apache/ranger/plugin/util/DownloadTrigger.java | 4 +-
.../apache/ranger/plugin/util/DownloaderTask.java | 6 +-
.../plugin/util/GraalScriptEngineCreator.java | 22 +-
.../ranger/plugin/util/GrantRevokeRequest.java | 820 ++-
.../ranger/plugin/util/GrantRevokeRoleRequest.java | 531 +-
.../apache/ranger/plugin/util/JavaScriptEdits.java | 13 +-
.../plugin/util/JavaScriptEngineCreator.java | 6 +-
.../org/apache/ranger/plugin/util/JsonUtilsV2.java | 35 +-
.../apache/ranger/plugin/util/KeySearchFilter.java | 216 +-
.../apache/ranger/plugin/util/MacroProcessor.java | 8 +-
.../plugin/util/NashornScriptEngineCreator.java | 6 +-
.../apache/ranger/plugin/util/PasswordUtils.java | 467 +-
.../ranger/plugin/util/PerfDataRecorder.java | 437 +-
.../apache/ranger/plugin/util/PolicyRefresher.java | 1032 ++-
.../plugin/util/RangerAccessRequestUtil.java | 798 +--
.../org/apache/ranger/plugin/util/RangerCache.java | 206 +-
.../ranger/plugin/util/RangerCommonConstants.java | 315 +-
.../ranger/plugin/util/RangerMetricsUtil.java | 174 +-
.../ranger/plugin/util/RangerObjectFactory.java | 20 +-
.../plugin/util/RangerPerfCollectorTracer.java | 48 +-
.../ranger/plugin/util/RangerPerfTracer.java | 189 +-
.../plugin/util/RangerPerfTracerFactory.java | 94 +-
.../ranger/plugin/util/RangerPluginCapability.java | 171 +-
.../ranger/plugin/util/RangerPolicyDeltaUtil.java | 82 +-
.../ranger/plugin/util/RangerPurgeResult.java | 10 +-
.../ranger/plugin/util/RangerRESTClient.java | 1439 +++--
.../apache/ranger/plugin/util/RangerRESTUtils.java | 213 +-
.../ranger/plugin/util/RangerReadWriteLock.java | 7 +-
.../plugin/util/RangerRequestExprResolver.java | 159 +-
.../plugin/util/RangerRequestedResources.java | 165 +-
.../util/RangerResourceEvaluatorsRetriever.java | 154 +-
.../org/apache/ranger/plugin/util/RangerRoles.java | 18 +-
.../ranger/plugin/util/RangerRolesProvider.java | 602 +-
.../apache/ranger/plugin/util/RangerRolesUtil.java | 24 +-
.../plugin/util/RangerSecurityZoneHelper.java | 31 +-
.../util/RangerServiceNotFoundException.java | 10 +-
.../plugin/util/RangerServiceTagsDeltaUtil.java | 73 +-
.../apache/ranger/plugin/util/RangerSslHelper.java | 489 +-
.../ranger/plugin/util/RangerTimeRangeChecker.java | 19 +-
.../apache/ranger/plugin/util/RangerUserStore.java | 40 +-
.../ranger/plugin/util/RangerUserStoreUtil.java | 84 +-
.../ranger/plugin/util/ScriptEngineUtil.java | 79 +-
.../apache/ranger/plugin/util/SearchFilter.java | 635 +-
.../apache/ranger/plugin/util/ServiceDefUtil.java | 666 +-
.../apache/ranger/plugin/util/ServiceGdsInfo.java | 212 +-
.../apache/ranger/plugin/util/ServicePolicies.java | 1042 +--
.../org/apache/ranger/plugin/util/ServiceTags.java | 604 +-
.../ranger/plugin/util/StringTokenReplacer.java | 34 +-
.../apache/ranger/plugin/util/TimedEventUtil.java | 75 +-
.../apache/ranger/plugin/util/URLEncoderUtil.java | 22 +-
.../org/apache/ranger/plugin/util/XMLUtils.java | 216 +-
.../ranger/services/gds/RangerServiceGds.java | 52 +-
.../ranger/services/tag/RangerServiceTag.java | 224 +-
.../src/main/resources/resourcenamemap.properties | 2 +-
.../service-defs/ranger-servicedef-gds.json | 7 +
.../ranger/authorization/utils/TestStringUtil.java | 61 +-
.../RangerCustomConditionMatcherTest.java | 541 +-
.../conditionevaluator/RangerIpMatcherTest.java | 444 +-
.../RangerRequestScriptEvaluatorTest.java | 331 +-
.../conditionevaluator/RangerSimpleMatcher.java | 179 +-
.../RangerTimeOfDayMatcherTest.java | 494 +-
...stRangerValidityScheduleConditionEvaluator.java | 163 +
.../plugin/contextenricher/TestTagEnricher.java | 28 +-
.../plugin/errors/TestValidationErrorCode.java | 21 +-
.../ranger/plugin/model/TestRangerHealth.java | 65 +-
.../ranger/plugin/model/TestRangerPolicy.java | 11 +-
.../model/TestRangerPolicyResourceSignature.java | 439 +-
.../ranger/plugin/model/TestRangerService.java | 8 +-
.../RangerSecurityZoneValidatorTest.java | 1120 ++--
.../plugin/model/validation/TestDirectedGraph.java | 96 +-
.../validation/TestRangerPolicyValidator.java | 1775 +++---
.../validation/TestRangerServiceDefHelper.java | 620 +-
.../validation/TestRangerServiceDefValidator.java | 1117 ++--
.../validation/TestRangerServiceValidator.java | 1066 ++--
.../model/validation/TestRangerValidator.java | 938 +--
.../model/validation/ValidationTestUtils.java | 820 +--
.../ranger/plugin/policyengine/TestCacheMap.java | 160 +-
.../plugin/policyengine/TestPathResourceTrie.java | 317 +-
.../ranger/plugin/policyengine/TestPolicyACLs.java | 561 +-
.../plugin/policyengine/TestPolicyEngine.java | 1824 +++---
.../policyengine/TestPolicyEngineComparison.java | 67 +-
.../policyengine/TestPolicyEngineForDeltas.java | 810 ++-
.../plugin/policyengine/TestProjectProvider.java | 114 +-
.../plugin/policyengine/TestRangerAuthContext.java | 177 +-
.../policyengine/TestRangerPluginCapability.java | 20 +-
.../TestRangerSecurityZoneMatcher.java | 41 +-
.../policyengine/gds/TestGdsPolicyEngine.java | 131 +-
.../RangerDefaultPolicyEvaluatorTest.java | 215 +-
.../RangerAbstractResourceMatcherTest.java | 24 +-
.../RangerDefaultResourceMatcherTest.java | 159 +-
.../RangerPathResourceMatcherTest.java | 256 +-
.../RangerURLResourceMatcherTest.java | 164 +-
.../TestDefaultPolicyResourceMatcher.java | 296 +-
.../TestDefaultPolicyResourceMatcherForPolicy.java | 306 +-
.../resourcematcher/TestResourceMatcher.java | 210 +-
.../plugin/service/TestRangerBasePlugin.java | 73 +-
.../ranger/plugin/util/JavaScriptEditsTest.java | 33 +-
.../ranger/plugin/util/MacroProcessorTest.java | 44 +-
.../ranger/plugin/util/PasswordUtilsTest.java | 350 +-
.../apache/ranger/plugin/util/RangerCacheTest.java | 114 +-
.../plugin/util/RangerRequestExprResolverTest.java | 22 +-
.../plugin/util/RangerTimeRangeCheckerTest.java | 94 +-
.../ranger/plugin/util/ServiceDefUtilTest.java | 947 +--
.../apache/ranger/plugin/util/TestServiceTags.java | 143 +
.../resources/plugin/test_base_plugin_hive.json | 10 +-
.../gds/gds_info_hive_access.json} | 104 +-
.../gds/gds_info_hive_data_mask.json} | 104 +-
.../gds/gds_info_hive_row_filter.json} | 84 +-
..._hive.json => test_gds_policy_hive_access.json} | 159 +-
...ve.json => test_gds_policy_hive_data_mask.json} | 183 +-
...e.json => test_gds_policy_hive_row_filter.json} | 151 +-
.../src/test/resources/policyengine/hbaseTags.json | 74 +
...incremental_update_for_wildcard_evaluators.json | 125 +
.../policyengine/test_policyengine_hive.json | 2 +-
.../test_policyengine_marker_access_types.json | 2 +-
.../policyengine/test_policyengine_tag_hbase.json | 179 +
.../test_policyengine_tag_hive_filebased.json | 26 +-
agents-cred/pom.xml | 80 +-
.../credutils/CredentialsProviderUtil.java | 127 +-
.../credutils/kerberos/AbstractJaasConf.java | 11 +-
.../kerberos/KerberosCredentialsProvider.java | 19 +-
.../credutils/kerberos/KeytabJaasConf.java | 2 +-
.../hadoop/utils/RangerCredentialProvider.java | 85 +-
.../hadoop/utils/RangerCredentialProviderTest.java | 315 +-
agents-installer/pom.xml | 13 +-
.../ranger/utils/install/XmlConfigChanger.java | 964 +--
credentialbuilder/pom.xml | 129 +-
.../ranger/credentialapi/CredentialReader.java | 124 +-
.../org/apache/ranger/credentialapi/buildks.java | 1054 ++--
.../ranger/credentialapi/TestCredentialReader.java | 20 +-
.../apache/ranger/credentialapi/Testbuildks.java | 47 +-
dev-support/RangerCodeScheme-IntelliJ.xml | 501 ++
dev-support/checkstyle-suppressions.xml | 5 +
dev-support/checkstyle.xml | 381 +-
dev-support/ranger-docker/.dockerignore | 1 +
dev-support/ranger-docker/.env | 21 +-
dev-support/ranger-docker/Dockerfile.ranger | 11 +-
dev-support/ranger-docker/Dockerfile.ranger-base | 12 +-
.../ranger-docker/Dockerfile.ranger-base-ubi | 84 +
dev-support/ranger-docker/Dockerfile.ranger-build | 18 +-
dev-support/ranger-docker/Dockerfile.ranger-hadoop | 14 +-
dev-support/ranger-docker/Dockerfile.ranger-hbase | 4 +-
dev-support/ranger-docker/Dockerfile.ranger-hive | 11 +-
dev-support/ranger-docker/Dockerfile.ranger-kafka | 4 +-
dev-support/ranger-docker/Dockerfile.ranger-kms | 4 +
dev-support/ranger-docker/Dockerfile.ranger-knox | 17 +-
dev-support/ranger-docker/Dockerfile.ranger-mysql | 2 +-
...ger-knox-expect.sh => Dockerfile.ranger-oracle} | 21 +-
...nger-knox-expect.sh => Dockerfile.ranger-ozone} | 19 +-
.../ranger-docker/Dockerfile.ranger-postgres | 2 +-
.../ranger-docker/Dockerfile.ranger-tagsync | 3 +
.../ranger-docker/Dockerfile.ranger-usersync | 3 +
dev-support/ranger-docker/README.md | 131 +-
dev-support/ranger-docker/config/init_oracle.sh | 45 +
.../ranger-docker/config/ozone/docker-config | 68 +
.../config/ozone/enable-ozone-plugin.sh | 497 ++
.../ozone/ranger-ozone-plugin-install.properties | 83 +
.../ozone/ranger-ozone-setup.sh} | 27 +-
...base.yml => docker-compose.ranger-base-ubi.yml} | 7 +-
.../ranger-docker/docker-compose.ranger-base.yml | 1 -
.../ranger-docker/docker-compose.ranger-build.yml | 1 -
.../ranger-docker/docker-compose.ranger-hadoop.yml | 1 -
.../ranger-docker/docker-compose.ranger-hbase.yml | 1 -
.../ranger-docker/docker-compose.ranger-hive.yml | 1 -
.../ranger-docker/docker-compose.ranger-kafka.yml | 1 -
.../ranger-docker/docker-compose.ranger-kms.yml | 1 -
.../ranger-docker/docker-compose.ranger-knox.yml | 1 -
.../ranger-docker/docker-compose.ranger-mysql.yml | 1 -
...stgres.yml => docker-compose.ranger-oracle.yml} | 11 +-
.../ranger-docker/docker-compose.ranger-ozone.yml | 71 +
.../docker-compose.ranger-postgres-mounted.yml | 1 -
.../docker-compose.ranger-postgres.yml | 1 -
.../docker-compose.ranger-tagsync.yml | 1 -
.../ranger-docker/docker-compose.ranger-trino.yml | 1 -
.../docker-compose.ranger-usersync.yml | 1 -
.../ranger-docker/docker-compose.ranger.yml | 1 -
dev-support/ranger-docker/download-archives.sh | 61 +-
.../scripts/create-ranger-services.py | 10 +-
.../ranger-docker/scripts/hive-site-oracle.xml | 52 +
...anger-kafka.sh => ozone-plugin-docker-setup.sh} | 24 +-
.../scripts/ranger-admin-install-oracle.properties | 93 +
dev-support/ranger-docker/scripts/ranger-hadoop.sh | 11 +-
dev-support/ranger-docker/scripts/ranger-hbase.sh | 10 +-
dev-support/ranger-docker/scripts/ranger-hive.sh | 10 +-
dev-support/ranger-docker/scripts/ranger-kafka.sh | 10 +-
.../scripts/ranger-kms-install-oracle.properties | 225 +
.../ranger-docker/scripts/ranger-knox-expect.py | 24 +
dev-support/ranger-docker/scripts/ranger-knox.sh | 14 +-
distro/pom.xml | 1436 +++--
distro/src/main/assembly/hbase-agent.xml | 12 +-
distro/src/main/assembly/hdfs-agent.xml | 14 +-
distro/src/main/assembly/hive-agent.xml | 14 +-
distro/src/main/assembly/kms.xml | 15 +-
distro/src/main/assembly/knox-agent.xml | 14 +-
distro/src/main/assembly/plugin-atlas.xml | 28 +-
distro/src/main/assembly/plugin-elasticsearch.xml | 28 +-
distro/src/main/assembly/plugin-kafka.xml | 31 +-
distro/src/main/assembly/plugin-kms.xml | 32 +-
distro/src/main/assembly/plugin-kylin.xml | 14 +-
distro/src/main/assembly/plugin-ozone.xml | 24 +-
distro/src/main/assembly/plugin-presto.xml | 12 +-
distro/src/main/assembly/plugin-solr.xml | 18 +-
distro/src/main/assembly/plugin-sqoop.xml | 30 +-
distro/src/main/assembly/plugin-trino.xml | 14 +-
distro/src/main/assembly/plugin-yarn.xml | 38 +-
distro/src/main/assembly/ranger-tools.xml | 4 +
distro/src/main/assembly/storm-agent.xml | 12 +-
docs/pom.xml | 49 +-
embeddedwebserver/pom.xml | 115 +-
.../ranger-admin-transaction-log-migrate.sh | 48 +
.../tomcat/ElasticSearchIndexBootStrapper.java | 526 +-
.../ranger/server/tomcat/EmbeddedServer.java | 1140 ++--
.../tomcat/EmbeddedServerMetricsCollector.java | 56 +-
.../ranger/server/tomcat/EmbeddedServerUtil.java | 221 +-
.../server/tomcat/SolrCollectionBootstrapper.java | 848 ++-
.../ranger/server/tomcat/StopEmbeddedServer.java | 19 +-
hbase-agent/pom.xml | 402 +-
.../authorization/hbase/AuthorizationSession.java | 732 ++-
.../ranger/authorization/hbase/ColumnIterator.java | 124 +-
.../authorization/hbase/HbaseAuditHandler.java | 50 +-
.../authorization/hbase/HbaseAuditHandlerImpl.java | 255 +-
.../ranger/authorization/hbase/HbaseAuthUtils.java | 24 +-
.../authorization/hbase/HbaseAuthUtilsImpl.java | 115 +-
.../ranger/authorization/hbase/HbaseConstants.java | 2 +
.../ranger/authorization/hbase/HbaseFactory.java | 62 +-
.../ranger/authorization/hbase/HbaseUserUtils.java | 55 +-
.../authorization/hbase/HbaseUserUtilsImpl.java | 218 +-
.../hbase/RangerAuthorizationCoprocessor.java | 3802 +++++------
.../hbase/RangerAuthorizationFilter.java | 239 +-
.../authorization/hbase/RangerHBasePlugin.java | 79 +
.../authorization/hbase/RangerHBaseResource.java | 14 +-
.../ranger/services/hbase/RangerServiceHBase.java | 189 +-
.../ranger/services/hbase/client/HBaseClient.java | 817 +--
.../services/hbase/client/HBaseConnectionMgr.java | 198 +-
.../services/hbase/client/HBaseResourceMgr.java | 251 +-
.../hbase/AuthorizationSessionTest.java | 380 +-
.../authorization/hbase/ColumnIteratorTest.java | 219 +-
.../hbase/HBaseRangerAuthorizationTest.java | 971 ++-
.../hbase/HbaseAuthUtilsImplTest.java | 19 +-
.../authorization/hbase/RangerAdminClientImpl.java | 25 +-
.../hbase/RangerAuthorizationCoprocessorTest.java | 43 +-
.../hbase/RangerAuthorizationFilterTest.java | 179 +-
.../authorization/hbase/TestPolicyEngine.java | 243 +-
.../services/hbase/TestRangerServiceHBase.java | 205 +-
hbase-agent/src/test/resources/hbase-policies.json | 97 +-
...st_policyengine_hbase_ignoreDenyDescendant.json | 55 +
hdfs-agent/pom.xml | 178 +-
.../authorization/hadoop/OperationOptimizer.java | 276 +
.../hadoop/RangerAccessControlEnforcer.java | 870 +++
.../hadoop/RangerHdfsAccessRequest.java | 79 +
.../hadoop/RangerHdfsAuditHandler.java | 222 +
.../authorization/hadoop/RangerHdfsAuthorizer.java | 1643 +----
.../authorization/hadoop/RangerHdfsPlugin.java | 138 +
...AccessVerifier.java => RangerHdfsResource.java} | 37 +-
.../exceptions/RangerAccessControlException.java | 11 +-
.../ranger/services/hdfs/RangerServiceHdfs.java | 350 +-
.../ranger/services/hdfs/client/HdfsClient.java | 604 +-
.../services/hdfs/client/HdfsConnectionMgr.java | 153 +-
.../services/hdfs/client/HdfsResourceMgr.java | 186 +-
.../ranger/services/hdfs/HDFSRangerTest.java | 418 +-
.../services/hdfs/RangerAdminClientImpl.java | 34 +-
.../services/hdfs/RangerHdfsAuthorizerTest.java | 315 +-
.../services/hdfs/client/HdfsClientTest.java | 299 +-
hive-agent/pom.xml | 204 +-
.../authorizer/XaSecureHiveAuthorizerFactory.java | 8 +-
.../hive/authorizer/RangerHiveAccessRequest.java | 191 +-
.../hive/authorizer/RangerHiveAuditHandler.java | 672 +-
.../hive/authorizer/RangerHiveAuthorizer.java | 6540 +++++++++----------
.../hive/authorizer/RangerHiveAuthorizerBase.java | 211 +-
.../authorizer/RangerHiveAuthorizerFactory.java | 20 +-
.../hive/authorizer/RangerHivePolicyProvider.java | 186 +-
.../hive/authorizer/RangerHiveResource.java | 239 +-
.../hive/authorizer/RangerHiveResourceACLs.java | 39 +-
.../hive/constants/RangerHiveConstants.java | 13 +-
.../ranger/services/hive/RangerServiceHive.java | 404 +-
.../ranger/services/hive/client/HiveClient.java | 1545 +++--
.../services/hive/client/HiveConnectionMgr.java | 145 +-
.../services/hive/client/HiveResourceMgr.java | 286 +-
.../services/hive/HIVERangerAuthorizerTest.java | 663 +-
.../services/hive/RangerAdminClientImpl.java | 27 +-
.../services/hive/RangerHiveOperationType.java | 27 +-
.../hive/TestAllHiveOperationInRanger.java | 21 +-
intg/pom.xml | 127 +-
.../main/java/org/apache/ranger/RangerClient.java | 143 +-
.../org/apache/ranger/RangerServiceException.java | 4 +-
.../main/python/apache_ranger/model/ranger_gds.py | 13 +-
.../java/org/apache/ranger/TestRangerClient.java | 49 +-
jisql/pom.xml | 13 +-
.../apache/util/outputformatter/CSVFormatter.java | 62 +-
.../util/outputformatter/DefaultFormatter.java | 359 +-
.../util/outputformatter/JisqlFormatter.java | 40 +-
.../apache/util/outputformatter/XMLFormatter.java | 71 +-
jisql/src/main/java/org/apache/util/sql/Jisql.java | 673 +-
.../java/org/apache/util/sql/MaskingThread.java | 44 +-
.../java/org/apache/util/sql/MySQLPLRunner.java | 251 +-
kms/dev-support/findbugsExcludeFile.xml | 48 -
kms/pom.xml | 707 +--
kms/scripts/db_setup.py | 2 +-
kms/scripts/dba_script.py | 3 +
kms/scripts/setup.sh | 6 +-
.../java/javax/ws/rs/core/NoContentException.java | 43 +
.../key/AzureKeyVaultClientAuthenticator.java | 151 +-
.../org/apache/hadoop/crypto/key/ConsoleUtil.java | 20 +-
.../org/apache/hadoop/crypto/key/DB2HSMMKUtil.java | 142 +-
.../hadoop/crypto/key/DBToAzureKeyVault.java | 382 +-
.../apache/hadoop/crypto/key/DBToKeySecure.java | 190 +-
.../org/apache/hadoop/crypto/key/HSM2DBMKUtil.java | 143 +-
.../apache/hadoop/crypto/key/JKS2RangerUtil.java | 391 +-
.../crypto/key/KeySecureToRangerDBMKUtil.java | 120 +-
.../hadoop/crypto/key/MigrateDBMKeyToGCP.java | 152 +-
.../apache/hadoop/crypto/key/Ranger2JKSUtil.java | 354 +-
.../hadoop/crypto/key/RangerAWSKMSProvider.java | 78 +-
.../key/RangerAzureKeyVaultKeyGenerator.java | 425 +-
.../crypto/key/RangerGoogleCloudHSMProvider.java | 370 +-
.../org/apache/hadoop/crypto/key/RangerHSM.java | 86 +-
.../org/apache/hadoop/crypto/key/RangerKMSDB.java | 147 +-
.../org/apache/hadoop/crypto/key/RangerKMSMKI.java | 15 +-
.../apache/hadoop/crypto/key/RangerKeyStore.java | 651 +-
.../hadoop/crypto/key/RangerKeyStoreProvider.java | 403 +-
.../apache/hadoop/crypto/key/RangerMasterKey.java | 532 +-
.../hadoop/crypto/key/RangerSafenetKeySecure.java | 304 +-
.../crypto/key/RangerTencentKMSProvider.java | 199 +-
.../crypto/key/VerifyIsDBMasterkeyCorrect.java | 86 +-
.../crypto/key/VerifyIsHSMMasterkeyCorrect.java | 120 +-
...agerKeyGeneratorKeyProviderCryptoExtension.java | 280 +-
.../apache/hadoop/crypto/key/kms/server/KMS.java | 1116 ++--
.../hadoop/crypto/key/kms/server/KMSACLs.java | 487 +-
.../hadoop/crypto/key/kms/server/KMSACLsType.java | 21 +-
.../hadoop/crypto/key/kms/server/KMSAudit.java | 426 +-
.../crypto/key/kms/server/KMSAuditLogger.java | 231 +-
.../key/kms/server/KMSAuthenticationFilter.java | 231 +-
.../crypto/key/kms/server/KMSConfiguration.java | 177 +-
.../key/kms/server/KMSExceptionsProvider.java | 157 +-
.../crypto/key/kms/server/KMSJMXServlet.java | 16 +-
.../crypto/key/kms/server/KMSJSONReader.java | 31 +-
.../crypto/key/kms/server/KMSJSONWriter.java | 42 +-
.../hadoop/crypto/key/kms/server/KMSMDCFilter.java | 134 +-
.../crypto/key/kms/server/KMSMetricUtil.java | 300 +-
.../crypto/key/kms/server/KMSServerJSONUtils.java | 76 +-
.../hadoop/crypto/key/kms/server/KMSWebApp.java | 551 +-
.../kms/server/KeyAuthorizationKeyProvider.java | 566 +-
.../hadoop/crypto/key/kms/server/MetricREST.java | 27 +-
.../crypto/key/kms/server/RangerKMSRestApi.java | 30 +-
.../key/kms/server/SimpleKMSAuditLogger.java | 112 +-
.../apache/ranger/common/RangerJsonProvider.java | 7 +-
.../java/org/apache/ranger/entity/XXDBBase.java | 416 +-
.../org/apache/ranger/entity/XXRangerKeyStore.java | 202 +-
.../apache/ranger/entity/XXRangerMasterKey.java | 84 +-
.../apache/ranger/kms/biz/RangerKMSStartUp.java | 53 +-
.../java/org/apache/ranger/kms/dao/BaseDao.java | 44 +-
.../org/apache/ranger/kms/dao/DaoManagerBase.java | 46 +-
.../org/apache/ranger/kms/dao/RangerKMSDao.java | 14 +-
.../apache/ranger/kms/dao/RangerMasterKeyDao.java | 7 +-
.../ranger/kms/metrics/KMSMetricWrapper.java | 59 +-
.../org/apache/ranger/kms/metrics/KMSMetrics.java | 82 +-
.../kms/metrics/collector/KMSMetricsCollector.java | 96 +-
.../ranger/kms/metrics/source/KMSMetricSource.java | 66 +-
kms/src/main/resources/hadoop-metrics2.properties | 1 -
.../hadoop/crypto/key/kms/TestRangerKeyStore.java | 269 +-
.../crypto/key/kms/server/DerbyTestUtils.java | 17 +-
.../key/kms/server/RangerKeyStoreProviderTest.java | 93 +-
.../crypto/key/kms/server/RangerMasterKeyTest.java | 83 +-
.../hadoop/crypto/key/kms/server/TestKMSACLs.java | 336 +-
.../hadoop/crypto/key/kms/server/TestKMSAudit.java | 321 +-
.../kms/server/TestKMSAuthenticationFilter.java | 27 +-
.../server/TestKeyAuthorizationKeyProvider.java | 444 +-
.../ranger/kms/metrics/TestKMSMetricsWrapper.java | 33 +-
kms/src/test/resources/hadoop-metrics2.properties | 1 -
knox-agent/pom.xml | 315 +-
.../admin/client/RangerAdminJersey2RESTClient.java | 2295 ++++---
.../authorization/knox/KnoxRangerPlugin.java | 214 +-
.../authorization/knox/RangerPDPKnoxFilter.java | 356 +-
.../ranger/services/knox/RangerServiceKnox.java | 175 +-
.../ranger/services/knox/client/KnoxClient.java | 791 ++-
.../services/knox/client/KnoxConnectionMgr.java | 130 +-
.../services/knox/client/KnoxResourceMgr.java | 168 +-
.../ranger/services/knox/KnoxRangerTest.java | 337 +-
.../services/knox/RangerAdminClientImpl.java | 25 +-
plugin-atlas/pom.xml | 84 +-
.../atlas/authorizer/RangerAtlasAuthorizer.java | 187 +-
.../ranger/services/atlas/RangerServiceAtlas.java | 955 ++-
.../atlas/json/model/ResourceEntityResponse.java | 74 +-
.../json/model/ResourceOperationResponse.java | 116 +-
.../atlas/json/model/ResourceTaxonomyResponse.java | 43 +-
.../atlas/json/model/ResourceTermResponse.java | 44 +-
.../atlas/json/model/ResourceTypeResponse.java | 44 +-
plugin-elasticsearch/pom.xml | 124 +-
.../RangerElasticsearchAuditHandler.java | 70 +-
.../authorizer/RangerElasticsearchAuthorizer.java | 202 +-
.../elasticsearch/RangerServiceElasticsearch.java | 177 +-
.../elasticsearch/client/ElasticsearchClient.java | 488 +-
.../client/ElasticsearchResourceMgr.java | 132 +-
.../elasticsearch/privilege/IndexPrivilege.java | 51 +-
.../privilege/IndexPrivilegeUtils.java | 132 +-
plugin-kafka/pom.xml | 153 +-
.../kafka/authorizer/RangerKafkaAuditHandler.java | 85 +-
.../kafka/authorizer/RangerKafkaAuthorizer.java | 623 +-
.../ranger/services/kafka/RangerServiceKafka.java | 192 +-
.../services/kafka/client/ServiceKafkaClient.java | 415 +-
.../kafka/client/ServiceKafkaConnectionMgr.java | 127 +-
.../authorizer/KafkaRangerAuthorizerGSSTest.java | 189 +-
.../KafkaRangerAuthorizerSASLSSLTest.java | 126 +-
.../authorizer/KafkaRangerAuthorizerTest.java | 444 +-
.../authorizer/KafkaRangerTopicCreationTest.java | 116 +-
.../kafka/authorizer/KafkaTestUtils.java | 108 +-
.../kafka/authorizer/RangerAdminClientImpl.java | 28 +-
plugin-kms/pom.xml | 42 +-
.../kms/authorizer/RangerKMSAccessRequest.java | 29 +-
.../kms/authorizer/RangerKMSPlugin.java | 20 +-
.../kms/authorizer/RangerKMSResource.java | 12 +-
.../kms/authorizer/RangerKmsAuthorizer.java | 614 +-
.../ranger/services/kms/RangerServiceKMS.java | 397 +-
.../ranger/services/kms/client/KMSClient.java | 738 +--
.../services/kms/client/KMSConnectionMgr.java | 31 +-
.../ranger/services/kms/client/KMSResourceMgr.java | 121 +-
.../client/json/model/KMSSchedulerResponse.java | 93 +-
.../kms/authorizer/DerbyTestUtils.java | 16 +-
.../kms/authorizer/RangerAdminClientImpl.java | 19 +-
.../kms/authorizer/RangerKmsAuthorizerTest.java | 172 +-
plugin-kudu/pom.xml | 23 +-
.../ranger/services/kudu/RangerServiceKudu.java | 10 +-
plugin-kylin/pom.xml | 126 +-
.../kylin/authorizer/RangerKylinAuthorizer.java | 256 +-
.../ranger/services/kylin/RangerServiceKylin.java | 116 +-
.../ranger/services/kylin/client/KylinClient.java | 508 +-
.../services/kylin/client/KylinResourceMgr.java | 132 +-
.../client/json/model/KylinProjectResponse.java | 124 +-
.../kylin/authorizer/RangerAdminClientImpl.java | 31 +-
.../authorizer/RangerKylinAuthorizerTest.java | 1012 +--
plugin-kylin/src/test/resources/kylin.properties | 2 +-
plugin-nestedstructure/pom.xml | 150 +-
.../nestedstructure/authorizer/AccessResult.java | 42 +-
.../nestedstructure/authorizer/DataMasker.java | 98 +-
.../authorizer/FieldLevelAccess.java | 35 +-
.../authorizer/JsonManipulator.java | 78 +-
.../nestedstructure/authorizer/MaskTypes.java | 64 +-
.../authorizer/MaskingException.java | 34 +-
.../authorizer/NestedStructureAccessType.java | 45 +-
.../authorizer/NestedStructureAuditHandler.java | 7 +-
.../authorizer/NestedStructureAuthorizer.java | 68 +-
.../authorizer/NestedStructureResource.java | 40 +-
.../authorizer/NestedStructureService.java | 38 +-
.../authorizer/RecordFilterJavaScript.java | 96 +-
.../nestedstructure/authorizer/ExampleClient.java | 48 +-
.../nestedstructure/authorizer/TestDataMasker.java | 127 +-
.../authorizer/TestJsonManipulator.java | 119 +-
.../authorizer/TestNestedStructureAuthorizer.java | 28 +-
.../authorizer/TestRecordFilterJavaScript.java | 29 +-
plugin-nifi-registry/pom.xml | 34 +-
.../nifi/registry/RangerServiceNiFiRegistry.java | 15 +-
.../nifi/registry/client/NiFiRegistryAuthType.java | 2 -
.../nifi/registry/client/NiFiRegistryClient.java | 92 +-
.../nifi/registry/client/NiFiRegistryConfigs.java | 21 +-
.../registry/client/NiFiRegistryConnectionMgr.java | 45 +-
.../registry/client/TestNiFiRegistryClient.java | 14 +-
.../client/TestNiFiRegistryConnectionMgr.java | 20 +-
plugin-nifi/pom.xml | 30 +-
.../ranger/services/nifi/RangerServiceNiFi.java | 19 +-
.../ranger/services/nifi/client/NiFiAuthType.java | 2 -
.../ranger/services/nifi/client/NiFiClient.java | 97 +-
.../ranger/services/nifi/client/NiFiConfigs.java | 18 +-
.../services/nifi/client/NiFiConnectionMgr.java | 43 +-
.../services/nifi/client/TestNiFiClient.java | 16 +-
.../nifi/client/TestNiFiConnectionMgr.java | 20 +-
plugin-ozone/pom.xml | 134 +-
.../ozone/authorizer/RangerOzoneAuthorizer.java | 344 +-
.../ranger/services/ozone/RangerServiceOzone.java | 132 +-
.../ranger/services/ozone/client/OzoneClient.java | 145 +-
.../services/ozone/client/OzoneConnectionMgr.java | 40 +-
.../services/ozone/client/OzoneResourceMgr.java | 125 +-
plugin-presto/pom.xml | 83 +-
.../presto/authorizer/PrestoAccessType.java | 7 +-
.../authorizer/RangerPrestoAccessRequest.java | 20 +-
.../presto/authorizer/RangerPrestoResource.java | 83 +
.../authorizer/RangerSystemAccessControl.java | 1353 ++--
.../services/presto/RangerServicePresto.java | 143 +-
.../services/presto/client/PrestoClient.java | 923 ++-
.../presto/client/PrestoConnectionManager.java | 117 +-
.../presto/client/PrestoResourceManager.java | 236 +-
.../presto/authorizer/RangerAdminClientImpl.java | 24 +-
.../authorizer/RangerSystemAccessControlTest.java | 267 +-
plugin-schema-registry/pom.xml | 188 +-
.../registry/RangerServiceSchemaRegistry.java | 29 +-
.../registry/client/AutocompletionAgent.java | 72 +-
.../registry/client/SchemaRegistryResourceMgr.java | 87 +-
.../connection/DefaultSchemaRegistryClient.java | 296 +-
.../client/connection/ISchemaRegistryClient.java | 4 +-
.../client/connection/util/SecurityUtils.java | 182 +-
.../registry/client/AutocompletionAgentTest.java | 83 +-
.../client/SchemaRegistryResourceMgrTest.java | 56 +-
.../DefaultSchemaRegistryClientTest.java | 81 +-
.../client/connection/util/SecurityUtilsTest.java | 53 +-
.../client/util/AcceptAllHostnameVerifier.java | 2 +-
.../DefaultSchemaRegistryClientForTesting.java | 2 -
.../client/util/TestAutocompletionAgent.java | 9 +-
plugin-solr/pom.xml | 100 +-
.../solr/authorizer/FieldToAttributeMapping.java | 55 +-
.../solr/authorizer/RangerSolrAuditHandler.java | 31 +-
.../solr/authorizer/RangerSolrAuthorizer.java | 1770 +++---
.../solr/authorizer/SolrAuthzUtil.java | 424 +-
.../solr/authorizer/SubsetQueryPlugin.java | 38 +-
.../ranger/services/solr/RangerServiceSolr.java | 144 +-
.../ranger/services/solr/RangerSolrConstants.java | 77 +-
.../services/solr/client/ServiceSolrClient.java | 1124 ++--
.../solr/client/ServiceSolrConnectionMgr.java | 61 +-
plugin-sqoop/pom.xml | 107 +-
.../sqoop/authorizer/RangerSqoopAuthorizer.java | 274 +-
.../ranger/services/sqoop/RangerServiceSqoop.java | 104 +-
.../ranger/services/sqoop/client/SqoopClient.java | 584 +-
.../services/sqoop/client/SqoopResourceMgr.java | 165 +-
.../client/json/model/SqoopConnectorResponse.java | 51 +-
.../client/json/model/SqoopConnectorsResponse.java | 22 +-
.../sqoop/client/json/model/SqoopJobResponse.java | 121 +-
.../sqoop/client/json/model/SqoopJobsResponse.java | 22 +-
.../sqoop/client/json/model/SqoopLinkResponse.java | 70 +-
.../client/json/model/SqoopLinksResponse.java | 22 +-
.../sqoop/authorizer/RangerAdminClientImpl.java | 36 +-
.../authorizer/RangerSqoopAuthorizerTest.java | 1761 +++---
.../src/test/resources/sqoop_bootstrap.properties | 2 +-
plugin-trino/pom.xml | 10 +-
.../ranger/services/trino/RangerServiceTrino.java | 120 +-
.../ranger/services/trino/client/TrinoClient.java | 528 +-
.../trino/client/TrinoConnectionManager.java | 46 +-
.../trino/client/TrinoResourceManager.java | 147 +-
.../trino/authorizer/RangerAdminClientImpl.java | 8 +-
plugin-yarn/pom.xml | 62 +-
.../yarn/authorizer/RangerYarnAuthorizer.java | 528 +-
.../ranger/services/yarn/RangerServiceYarn.java | 216 +-
.../ranger/services/yarn/client/YarnClient.java | 580 +-
.../services/yarn/client/YarnConnectionMgr.java | 7 +-
.../services/yarn/client/YarnResourceMgr.java | 97 +-
.../client/json/model/YarnSchedulerResponse.java | 90 +-
pom.xml | 1565 ++---
ranger-atlas-plugin-shim/pom.xml | 60 +-
.../atlas/authorizer/RangerAtlasAuthorizer.java | 276 +-
ranger-authn/pom.xml | 73 +-
.../apache/ranger/authz/handler/RangerAuth.java | 28 +-
.../ranger/authz/handler/RangerAuthHandler.java | 9 +-
.../handler/jwt/RangerDefaultJwtAuthHandler.java | 71 +-
.../authz/handler/jwt/RangerJwtAuthHandler.java | 67 +-
ranger-common-ha/pom.xml | 112 +-
.../org/apache/ranger/RangerHAInitializer.java | 58 +-
.../ranger/ha/ActiveInstanceElectorService.java | 320 +-
.../org/apache/ranger/ha/ActiveInstanceState.java | 182 +-
.../apache/ranger/ha/ActiveStateChangeHandler.java | 46 +-
.../java/org/apache/ranger/ha/CuratorFactory.java | 351 +-
.../java/org/apache/ranger/ha/HAConfiguration.java | 471 +-
.../ranger/ha/RangerServiceServerIdSelector.java | 138 +-
.../java/org/apache/ranger/ha/ServiceState.java | 165 +-
.../ranger/ha/ZookeeperSecurityProperties.java | 103 +-
.../org/apache/ranger/ha/annotation/HAService.java | 2 -
.../apache/ranger/ha/service/HARangerService.java | 2 -
.../apache/ranger/ha/service/ServiceManager.java | 72 +-
.../service/TestRangerServiceServerIdSelector.java | 14 +-
ranger-elasticsearch-plugin-shim/pom.xml | 112 +-
.../RangerElasticsearchAccessControl.java | 23 +-
.../authorizer/RangerElasticsearchAuthorizer.java | 164 +-
.../plugin/RangerElasticsearchPlugin.java | 165 +-
.../action/filter/RangerSecurityActionFilter.java | 86 +-
.../plugin/authc/user/UsernamePasswordToken.java | 113 +-
.../rest/filter/RangerSecurityRestFilter.java | 60 +-
.../elasticsearch/plugin/utils/RequestUtils.java | 521 +-
ranger-examples/conditions-enrichers/pom.xml | 12 +-
.../RangerPolicyConditionSampleSimpleMatcher.java | 230 +-
.../RangerSampleSimpleMatcher.java | 230 +-
.../RangerSampleCountryProvider.java | 120 +-
.../RangerSampleProjectProvider.java | 112 +-
.../RangerSampleSimpleMatcherTest.java | 230 +-
.../dev-support/findbugsIncludeFile.xml | 25 -
ranger-examples/distro/pom.xml | 45 +-
ranger-examples/plugin-sampleapp/pom.xml | 148 +-
.../ranger/examples/sampleapp/IAuthorizer.java | 4 +-
.../examples/sampleapp/RangerAuthorizer.java | 15 +-
ranger-examples/pom.xml | 8 +-
ranger-examples/sample-client/pom.xml | 38 +-
.../ranger/examples/sampleclient/SampleClient.java | 104 +-
.../src/main/python/sample_gds_client.py | 20 +-
ranger-examples/sampleapp/pom.xml | 24 +-
.../examples/sampleapp/DefaultAuthorizer.java | 4 +-
.../ranger/examples/sampleapp/IAuthorizer.java | 4 +-
.../ranger/examples/sampleapp/SampleApp.java | 171 +-
ranger-hbase-plugin-shim/pom.xml | 56 +-
.../hbase/XaSecureAuthorizationCoprocessor.java | 8 +-
.../hbase/RangerAuthorizationCoprocessor.java | 4055 ++++--------
.../access/RangerAccessControlListsTest.java | 55 +-
ranger-hdfs-plugin-shim/pom.xml | 38 +-
.../authorization/hadoop/RangerHdfsAuthorizer.java | 182 +-
ranger-hive-plugin-shim/pom.xml | 40 +-
.../authorizer/XaSecureHiveAuthorizerFactory.java | 7 +-
.../authorizer/RangerHiveAuthorizerFactory.java | 154 +-
ranger-kafka-plugin-shim/pom.xml | 33 +-
.../kafka/authorizer/RangerKafkaAuthorizer.java | 229 +-
ranger-kms-plugin-shim/pom.xml | 40 +-
.../kms/authorizer/RangerKmsAuthorizer.java | 298 +-
ranger-knox-plugin-shim/pom.xml | 30 +-
.../authorization/knox/RangerPDPKnoxFilter.java | 185 +-
.../deploy/RangerPDPKnoxDeploymentContributor.java | 72 +-
ranger-kylin-plugin-shim/pom.xml | 71 +-
.../kylin/authorizer/RangerKylinAuthorizer.java | 143 +-
ranger-metrics/pom.xml | 50 +-
.../ranger/metrics/RangerMetricsSystemWrapper.java | 31 +-
.../ranger/metrics/sink/RangerMetricsJsonSink.java | 28 +-
.../metrics/sink/RangerMetricsPrometheusSink.java | 21 +-
.../source/RangerMetricsContainerSource.java | 43 +-
.../metrics/source/RangerMetricsJvmSource.java | 96 +-
.../ranger/metrics/source/RangerMetricsSource.java | 6 +-
.../metrics/wrapper/RangerMetricsSinkWrapper.java | 8 +-
.../source/TestRangerMetricsContainerSource.java | 67 +-
ranger-ozone-plugin-shim/pom.xml | 57 +-
.../ozone/authorizer/RangerOzoneAuthorizer.java | 69 +-
ranger-plugin-classloader/pom.xml | 15 +-
.../classloader/PluginClassLoaderActivator.java | 35 +-
.../classloader/RangerPluginClassLoader.java | 297 +-
.../classloader/RangerPluginClassLoaderUtil.java | 206 +-
.../ranger/plugin/classloader/test/TestPlugin.java | 2 +-
.../plugin/classloader/test/TestPrintParent.java | 9 +-
.../{Impl => impl}/TestChildFistClassLoader.java | 58 +-
.../test/{Impl => impl}/TestPluginImpl.java | 13 +-
.../classloader/test/{Impl => impl}/TestPrint.java | 12 +-
ranger-presto-plugin-shim/pom.xml | 136 +-
.../presto/authorizer/PrestoRangerPlugin.java | 13 +-
.../presto/authorizer/RangerConfig.java | 84 +-
.../authorizer/RangerSystemAccessControl.java | 848 +--
.../RangerSystemAccessControlFactory.java | 59 +-
ranger-solr-plugin-shim/pom.xml | 100 +-
.../solr/authorizer/RangerSolrAuthorizer.java | 316 +-
ranger-sqoop-plugin-shim/pom.xml | 71 +-
.../sqoop/authorizer/RangerSqoopAuthorizer.java | 146 +-
ranger-storm-plugin-shim/pom.xml | 54 +-
.../storm/authorizer/XaSecureStormAuthorizer.java | 4 +-
.../storm/authorizer/RangerStormAuthorizer.java | 193 +-
ranger-tools/conf/logback-mem-sizing.xml | 21 +
ranger-tools/pom.xml | 54 +-
.../ranger/policyengine/CommandLineParser.java | 249 +-
.../apache/ranger/policyengine/PerfTestClient.java | 241 +-
.../apache/ranger/policyengine/PerfTestEngine.java | 134 +-
.../ranger/policyengine/PerfTestOptions.java | 125 +-
.../RangerAccessRequestDeserializer.java | 32 +-
.../policyengine/RangerPluginPerfTester.java | 349 +-
.../policyengine/RangerPolicyenginePerfTester.java | 106 +-
.../policyengine/RangerResourceDeserializer.java | 28 +-
.../perftest/v2/RangerPolicyFactory.java | 419 +-
.../apache/ranger/sizing/PerfMemTimeTracker.java | 16 +-
.../apache/ranger/sizing/PerfRequestGenerator.java | 174 +
.../org/apache/ranger/sizing/RangerMemSizing.java | 1047 +--
.../apache/ranger/policyengine/PerfTesterTest.java | 27 +-
.../RangerPolicyEnginePerformanceTest.java | 328 +-
ranger-util/pom.xml | 24 +-
.../ranger/common/RangerVersionAnnotation.java | 90 +-
.../apache/ranger/common/RangerVersionInfo.java | 210 +-
ranger-util/src/scripts/saveVersion.py | 44 +-
ranger-yarn-plugin-shim/pom.xml | 52 +-
.../yarn/authorizer/RangerYarnAuthorizer.java | 241 +-
.../optimized/current/ranger_core_db_mysql.sql | 34 +-
.../db/mysql/patches/070-add-gds-perm.sql | 2 +
.../patches/074-create-index-for-x_trx_log.sql} | 29 +-
...y_schedule-labels-keywords-in-x_gds_dataset.sql | 37 +
.../optimized/current/ranger_core_db_oracle.sql | 13 +
.../patches/066-create-sz-ref-role-table.sql | 26 +
.../oracle/patches/068-create-view-principal.sql | 23 +
...ble.sql => 069-add-gz_json_x_security_zone.sql} | 26 +-
...e-table.sql => 072-alter-x_access_type_def.sql} | 27 +-
..._trx_log_v2.sql => 073-create-x_trx_log_v2.sql} | 1 +
...able.sql => 074-create-index-for-x_trx_log.sql} | 32 +-
...y_schedule-labels-keywords-in-x_gds_dataset.sql | 34 +
.../optimized/current/ranger_core_db_postgres.sql | 34 +-
.../patches/074-create-index-for-x_trx_log.sql} | 38 +-
...y_schedule-labels-keywords-in-x_gds_dataset.sql | 42 +
.../current/ranger_core_db_sqlanywhere.sql | 6 +
..._trx_log_v2.sql => 073-create-x_trx_log_v2.sql} | 0
.../patches/074-create-index-for-x_trx_log.sql} | 24 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 31 +-
.../optimized/current/ranger_core_db_sqlserver.sql | 3 +
..._trx_log_v2.sql => 073-create-x_trx_log_v2.sql} | 0
.../patches/074-create-index-for-x_trx_log.sql} | 32 +-
..._schedule-labels-keywords-in-x_gds_dataset.sql} | 37 +-
security-admin/pom.xml | 1037 ++-
security-admin/scripts/dba_script.py | 3 +
security-admin/scripts/setup.sh | 6 +-
.../java/javax/ws/rs/core/NoContentException.java | 44 +
.../main/java/org/apache/ranger/biz/AssetMgr.java | 54 +-
.../java/org/apache/ranger/biz/GdsDBStore.java | 61 +-
.../java/org/apache/ranger/biz/RangerBizUtil.java | 17 +-
.../java/org/apache/ranger/biz/ServiceDBStore.java | 137 +-
.../java/org/apache/ranger/biz/ServiceMgr.java | 8 +-
.../java/org/apache/ranger/biz/SessionMgr.java | 4 +-
.../main/java/org/apache/ranger/biz/UserMgr.java | 169 +-
.../main/java/org/apache/ranger/biz/XAuditMgr.java | 20 +-
.../java/org/apache/ranger/biz/XAuditMgrBase.java | 8 +-
.../main/java/org/apache/ranger/biz/XUserMgr.java | 156 +-
.../java/org/apache/ranger/biz/XUserMgrBase.java | 39 -
.../apache/ranger/common/RangerCommonEnums.java | 5 +-
.../org/apache/ranger/common/RangerSearchUtil.java | 19 +-
.../ranger/common/RangerServicePoliciesCache.java | 3 +-
.../apache/ranger/common/ServiceGdsInfoCache.java | 2 +
.../java/org/apache/ranger/db/XXPolicyDao.java | 12 +
.../ranger/db/XXSecurityZoneRefServiceDao.java | 2 +-
.../ranger/db/XXSecurityZoneRefTagServiceDao.java | 2 +-
.../java/org/apache/ranger/db/XXServiceDao.java | 2 +-
.../org/apache/ranger/entity/XXGdsDataset.java | 44 +-
.../patch/cliutil/TrxLogV2MigrationUtil.java | 399 ++
.../java/org/apache/ranger/rest/AssetREST.java | 109 +-
.../main/java/org/apache/ranger/rest/GdsREST.java | 596 +-
.../java/org/apache/ranger/rest/PublicAPIsv2.java | 8 +-
.../main/java/org/apache/ranger/rest/RoleREST.java | 1 +
.../java/org/apache/ranger/rest/ServiceREST.java | 23 +-
.../main/java/org/apache/ranger/rest/TagREST.java | 18 +-
.../main/java/org/apache/ranger/rest/UserREST.java | 2 -
.../java/org/apache/ranger/rest/XUserREST.java | 135 +-
.../ranger/security/context/RangerAPIList.java | 15 +-
.../ranger/security/context/RangerAPIMapping.java | 88 +-
.../handler/RangerAuthenticationProvider.java | 8 +-
.../authentication/RangerAuthSuccessHandler.java | 2 +-
.../security/web/filter/RangerKrbFilter.java | 4 +-
.../web/filter/RangerSSOAuthenticationFilter.java | 19 +-
.../service/AbstractAuditedResourceService.java | 17 +-
.../ranger/service/RangerAuditedModelService.java | 14 +-
.../ranger/service/RangerGdsDataShareService.java | 2 +-
.../ranger/service/RangerGdsDatasetService.java | 9 +
.../service/RangerGdsSharedResourceService.java | 2 +-
.../ranger/service/RangerTrxLogV2Service.java | 1 +
.../org/apache/ranger/service/XGroupService.java | 4 +
.../ranger/service/XGroupUserServiceBase.java | 2 +-
.../ranger/service/XUgsyncAuditInfoService.java | 2 +
.../main/java/org/apache/ranger/util/RestUtil.java | 24 +-
.../ranger/validation/RangerGdsValidator.java | 88 +-
.../java/org/apache/ranger/view/VXAccessAudit.java | 21 +
.../main/resources/META-INF/jpa_named_queries.xml | 36 +-
.../conf.dist/ranger-admin-default-site.xml | 2 +-
.../main/webapp/libs/bower/bootbox/js/bootbox.js | 1246 ----
.../webapp/libs/bower/bootprompt/bootprompt.js | 1138 ++++
.../main/webapp/libs/bower/requirejs/js/require.js | 10 +-
security-admin/src/main/webapp/login.jsp | 2 +-
security-admin/src/main/webapp/package-lock.json | 30 +-
security-admin/src/main/webapp/package.json | 2 +-
.../src/main/webapp/react-webapp/package-lock.json | 635 +-
.../src/main/webapp/react-webapp/package.json | 4 +-
.../main/webapp/react-webapp/src/utils/XAEnums.js | 11 +-
.../src/views/AuditEvent/AccessLogs.jsx | 67 +-
.../src/views/AuditEvent/AccessLogsTable.jsx | 16 +-
.../src/views/AuditEvent/AdminLogs.jsx | 32 +-
.../src/views/AuditEvent/AdminLogs/GroupLogs.jsx | 1 -
.../src/views/AuditEvent/AdminLogs/PolicyLogs.jsx | 1 +
.../src/views/AuditEvent/AdminLogs/RoleLogs.jsx | 1 -
.../AdminLogs/UserAssociationWithGroupLogs.jsx | 70 +
.../src/views/AuditEvent/AdminLogs/UserLogs.jsx | 1 -
.../views/AuditEvent/AdminLogs/UserprofileLogs.jsx | 1 -
.../src/views/AuditEvent/OperationAdminModal.jsx | 12 +-
.../src/views/PolicyListing/PolicyListing.jsx | 205 +-
.../users_details/EditUserView.jsx | 3 +-
.../users_details/UserFormComp.jsx | 33 +-
.../users_details/UserListing.jsx | 27 +-
.../webapp/react-webapp/src/views/UserProfile.jsx | 61 +-
security-admin/src/main/webapp/scripts/Init.js | 8 +-
.../src/main/webapp/scripts/routers/Router.js | 41 +-
.../src/main/webapp/scripts/utils/XAEnums.js | 3 +-
.../src/main/webapp/scripts/utils/XALangSupport.js | 57 -
.../src/main/webapp/scripts/utils/XAUtils.js | 26 +-
.../views/permissions/ModulePermsTableLayout.js | 1 -
.../webapp/scripts/views/reports/AuditLayout.js | 36 +-
.../webapp/scripts/views/service/ServiceCreate.js | 22 +-
.../org/apache/ranger/biz/TestServiceDBStore.java | 89 +-
.../java/org/apache/ranger/biz/TestUserMgr.java | 280 +-
.../java/org/apache/ranger/biz/TestXUserMgr.java | 286 +-
.../java/org/apache/ranger/rest/TestAssetREST.java | 124 +-
.../java/org/apache/ranger/rest/TestGdsREST.java | 253 +
.../java/org/apache/ranger/rest/TestRoleREST.java | 1 +
.../org/apache/ranger/rest/TestServiceREST.java | 11 +-
.../java/org/apache/ranger/rest/TestTagREST.java | 9 +-
.../java/org/apache/ranger/rest/TestUserREST.java | 4 +-
.../java/org/apache/ranger/rest/TestXUserREST.java | 108 +-
.../apache/ranger/service/TestXPermMapService.java | 27 +-
storm-agent/pom.xml | 192 +-
.../authorization/storm/StormRangerPlugin.java | 187 +-
.../storm/authorizer/RangerStormAuthorizer.java | 247 +-
.../ranger/services/storm/RangerServiceStorm.java | 182 +-
.../ranger/services/storm/client/StormClient.java | 773 ++-
.../services/storm/client/StormConnectionMgr.java | 26 +-
.../services/storm/client/StormResourceMgr.java | 124 +-
.../services/storm/client/json/model/Topology.java | 51 +-
.../client/json/model/TopologyListResponse.java | 21 +-
.../authorization/storm/RangerAdminClientImpl.java | 39 +-
.../storm/StormRangerAuthorizerTest.java | 185 +-
.../authorization/storm/WordCounterBolt.java | 23 +-
.../ranger/authorization/storm/WordSpout.java | 38 +-
tagsync/pom.xml | 264 +-
.../tagsync/ha/TagSyncHAInitializerImpl.java | 156 +-
.../ranger/tagsync/model/AbstractTagSource.java | 99 +-
.../org/apache/ranger/tagsync/model/TagSink.java | 12 +-
.../org/apache/ranger/tagsync/model/TagSource.java | 15 +-
.../AtlasNestedStructureResourceMapper.java | 46 +-
.../ranger/tagsync/process/TagSyncConfig.java | 1072 ++--
.../tagsync/process/TagSyncMetricsProducer.java | 124 +-
.../ranger/tagsync/process/TagSynchronizer.java | 851 ++-
.../tagsync/sink/tagadmin/TagAdminRESTSink.java | 770 ++-
.../source/atlas/AtlasAdlsResourceMapper.java | 259 +-
.../source/atlas/AtlasHbaseResourceMapper.java | 229 +-
.../source/atlas/AtlasHdfsResourceMapper.java | 194 +-
.../source/atlas/AtlasHiveResourceMapper.java | 140 +-
.../source/atlas/AtlasKafkaResourceMapper.java | 64 +-
.../source/atlas/AtlasNotificationMapper.java | 86 +-
.../source/atlas/AtlasOzoneResourceMapper.java | 376 +-
.../tagsync/source/atlas/AtlasResourceMapper.java | 184 +-
.../source/atlas/AtlasResourceMapperUtil.java | 144 +-
.../source/atlas/AtlasStormResourceMapper.java | 60 +-
.../tagsync/source/atlas/AtlasTagSource.java | 533 +-
.../source/atlas/EntityNotificationWrapper.java | 174 +-
.../source/atlasrest/AtlasRESTTagSource.java | 329 +-
.../source/atlasrest/RangerAtlasEntity.java | 15 +-
.../atlasrest/RangerAtlasEntityWithTags.java | 5 +-
.../ranger/tagsync/source/file/FileTagSource.java | 531 +-
.../nestedstructureplugin/ResourceTests.java | 5 +-
.../tagsync/process/TestAdlsResourceMapper.java | 18 +-
.../tagsync/process/TestHbaseResourceMapper.java | 60 +-
.../tagsync/process/TestHdfsResourceMapper.java | 284 +-
.../tagsync/process/TestHiveResourceMapper.java | 219 +-
.../tagsync/process/TestKafkaResourceMapper.java | 35 +-
.../tagsync/process/TestOzoneResourceMapper.java | 177 +-
.../tagsync/process/TestTagSynchronizer.java | 61 +-
ugsync-util/pom.xml | 37 +-
.../ugsyncutil/model/FileSyncSourceInfo.java | 166 +-
.../ranger/ugsyncutil/model/GroupUserInfo.java | 2 +-
.../ugsyncutil/model/LdapSyncSourceInfo.java | 268 +-
.../ranger/ugsyncutil/model/UgsyncAuditInfo.java | 223 +-
.../ugsyncutil/model/UnixSyncSourceInfo.java | 226 +-
.../model/UsersGroupRoleAssignments.java | 132 +-
.../apache/ranger/ugsyncutil/model/XGroupInfo.java | 202 +-
.../apache/ranger/ugsyncutil/model/XUserInfo.java | 264 +-
.../ugsyncutil/util/UgsyncCommonConstants.java | 10 +-
ugsync/ldapconfigchecktool/ldapconfigcheck/pom.xml | 46 +-
.../ldapconfigcheck/AuthenticationCheck.java | 123 +-
.../ranger/ldapconfigcheck/CommandLineOptions.java | 171 +-
.../apache/ranger/ldapconfigcheck/LdapConfig.java | 343 +-
.../ldapconfigcheck/LdapConfigCheckMain.java | 137 +-
.../apache/ranger/ldapconfigcheck/UserSync.java | 932 +--
ugsync/pom.xml | 185 +-
.../process/CustomSSLSocketFactory.java | 209 +-
.../ldapusersync/process/LdapUserGroupBuilder.java | 2553 ++++----
.../unixusersync/config/UserGroupSyncConfig.java | 2535 ++++----
.../unixusersync/ha/UserSyncHAInitializerImpl.java | 84 +-
.../unixusersync/model/GetXGroupListResponse.java | 38 +-
.../unixusersync/model/GetXUserListResponse.java | 41 +-
.../process/FileSourceUserGroupBuilder.java | 557 +-
.../process/PolicyMgrUserGroupBuilder.java | 3826 ++++++-----
.../process/RangerUgSyncRESTClient.java | 82 +-
.../unixusersync/process/UnixUserGroupBuilder.java | 1103 ++--
.../ranger/usergroupsync/AbstractMapper.java | 23 +-
.../usergroupsync/AbstractUserGroupSource.java | 28 +-
.../org/apache/ranger/usergroupsync/Mapper.java | 2 +-
.../org/apache/ranger/usergroupsync/RegEx.java | 132 +-
.../apache/ranger/usergroupsync/UserGroupSink.java | 15 +-
.../ranger/usergroupsync/UserGroupSource.java | 9 +-
.../apache/ranger/usergroupsync/UserGroupSync.java | 188 +-
.../usergroupsync/UserSyncMetricsProducer.java | 148 +-
.../process/TestFileSourceUserGroupBuilder.java | 9 +-
.../process/TestUnixUserGroupBuilder.java | 34 +-
.../PolicyMgrUserGroupBuilderTest.java | 161 +-
.../ranger/usergroupsync/TestLdapUserGroup.java | 804 ++-
.../org/apache/ranger/usergroupsync/TestRegEx.java | 53 +-
unixauthclient/pom.xml | 36 +-
.../unix/jaas/ConsolePromptCallbackHandler.java | 72 +-
.../authentication/unix/jaas/PamLoginModule.java | 225 +-
.../authentication/unix/jaas/PamPrincipal.java | 68 +-
.../unix/jaas/RemoteUnixLoginModule.java | 776 ++-
.../unix/jaas/UnixGroupPrincipal.java | 22 +-
.../unix/jaas/UnixUserPrincipal.java | 22 +-
.../unix/jaas/UsernamePasswordCallbackHandler.java | 20 +-
.../authentication/UnixAuthenticationTester.java | 23 +-
unixauthnative/pom.xml | 6 +-
unixauthnative/src/main/c/credValidator.c | 4 +-
unixauthpam/pom.xml | 4 +
unixauthservice/pom.xml | 44 +-
.../scripts/ranger-usersync-services.sh | 2 +-
.../ranger/authentication/PasswordValidator.java | 248 +-
.../authentication/UnixAuthenticationService.java | 629 +-
1134 files changed, 137645 insertions(+), 132705 deletions(-)
delete mode 100644 agents-common/dev-support/spotbugsIncludeFile.xml
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/conditionevaluator/RangerValidityScheduleConditionEvaluator.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerGrant.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/model/RangerPolicyHeader.java
mode change 100755 => 100644
agents-common/src/main/java/org/apache/ranger/plugin/store/GdsStore.java
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/util/CachedResourceEvaluators.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/conditionevaluator/TestRangerValidityScheduleConditionEvaluator.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/util/TestServiceTags.java
copy agents-common/src/test/resources/{plugin/hive_gds_info.json =>
policyengine/gds/gds_info_hive_access.json} (55%)
copy agents-common/src/test/resources/{plugin/hive_gds_info.json =>
policyengine/gds/gds_info_hive_data_mask.json} (53%)
rename agents-common/src/test/resources/{plugin/hive_gds_info.json =>
policyengine/gds/gds_info_hive_row_filter.json} (67%)
copy
agents-common/src/test/resources/policyengine/gds/{test_gds_policy_engine_hive.json
=> test_gds_policy_hive_access.json} (74%)
copy
agents-common/src/test/resources/policyengine/gds/{test_gds_policy_engine_hive.json
=> test_gds_policy_hive_data_mask.json} (69%)
rename
agents-common/src/test/resources/policyengine/gds/{test_gds_policy_engine_hive.json
=> test_gds_policy_hive_row_filter.json} (70%)
create mode 100644 agents-common/src/test/resources/policyengine/hbaseTags.json
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_hdfs_incremental_update_for_wildcard_evaluators.json
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_tag_hbase.json
create mode 100644 dev-support/RangerCodeScheme-IntelliJ.xml
create mode 100644 dev-support/ranger-docker/Dockerfile.ranger-base-ubi
copy dev-support/ranger-docker/{scripts/ranger-knox-expect.sh =>
Dockerfile.ranger-oracle} (73%)
copy dev-support/ranger-docker/{scripts/ranger-knox-expect.sh =>
Dockerfile.ranger-ozone} (66%)
create mode 100644 dev-support/ranger-docker/config/init_oracle.sh
create mode 100644 dev-support/ranger-docker/config/ozone/docker-config
create mode 100644
dev-support/ranger-docker/config/ozone/enable-ozone-plugin.sh
create mode 100644
dev-support/ranger-docker/config/ozone/ranger-ozone-plugin-install.properties
rename dev-support/ranger-docker/{scripts/ranger-knox-expect.sh =>
config/ozone/ranger-ozone-setup.sh} (62%)
copy dev-support/ranger-docker/{docker-compose.ranger-base.yml =>
docker-compose.ranger-base-ubi.yml} (58%)
copy dev-support/ranger-docker/{docker-compose.ranger-postgres.yml =>
docker-compose.ranger-oracle.yml} (53%)
create mode 100644 dev-support/ranger-docker/docker-compose.ranger-ozone.yml
create mode 100644 dev-support/ranger-docker/scripts/hive-site-oracle.xml
copy dev-support/ranger-docker/scripts/{ranger-kafka.sh =>
ozone-plugin-docker-setup.sh} (58%)
create mode 100644
dev-support/ranger-docker/scripts/ranger-admin-install-oracle.properties
create mode 100755
dev-support/ranger-docker/scripts/ranger-kms-install-oracle.properties
create mode 100644 dev-support/ranger-docker/scripts/ranger-knox-expect.py
create mode 100755
embeddedwebserver/scripts/ranger-admin-transaction-log-migrate.sh
create mode 100644
hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerHBasePlugin.java
create mode 100644
hbase-agent/src/test/resources/policyengine/test_policyengine_hbase_ignoreDenyDescendant.json
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/OperationOptimizer.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerAccessControlEnforcer.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAccessRequest.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuditHandler.java
create mode 100644
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsPlugin.java
rename
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/{HDFSAccessVerifier.java
=> RangerHdfsResource.java} (57%)
delete mode 100644 kms/dev-support/findbugsExcludeFile.xml
create mode 100644 kms/src/main/java/javax/ws/rs/core/NoContentException.java
copy
agents-common/src/main/java/org/apache/ranger/plugin/conditionevaluator/RangerConditionEvaluator.java
=>
plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKMSAccessRequest.java
(54%)
copy
ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/DefaultAuthorizer.java
=>
plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKMSPlugin.java
(64%)
copy
plugin-yarn/src/main/java/org/apache/ranger/services/yarn/client/YarnConnectionMgr.java
=>
plugin-kms/src/main/java/org/apache/ranger/authorization/kms/authorizer/RangerKMSResource.java
(70%)
copy
agents-audit/src/main/java/org/apache/ranger/audit/model/SPOOL_FILE_STATUS.java
=>
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/PrestoAccessType.java
(81%)
copy
ranger-examples/sampleapp/src/main/java/org/apache/ranger/examples/sampleapp/DefaultAuthorizer.java
=>
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerPrestoAccessRequest.java
(61%)
create mode 100644
plugin-presto/src/main/java/org/apache/ranger/authorization/presto/authorizer/RangerPrestoResource.java
delete mode 100644 ranger-examples/dev-support/findbugsIncludeFile.xml
copy
agents-common/src/main/java/org/apache/ranger/plugin/util/DownloaderTask.java
=>
ranger-plugin-classloader/src/main/java/org/apache/ranger/plugin/classloader/PluginClassLoaderActivator.java
(52%)
rename
ranger-plugin-classloader/src/test/java/org/apache/ranger/plugin/classloader/test/{Impl
=> impl}/TestChildFistClassLoader.java (51%)
rename
ranger-plugin-classloader/src/test/java/org/apache/ranger/plugin/classloader/test/{Impl
=> impl}/TestPluginImpl.java (85%)
rename
ranger-plugin-classloader/src/test/java/org/apache/ranger/plugin/classloader/test/{Impl
=> impl}/TestPrint.java (83%)
create mode 100644
ranger-tools/src/main/java/org/apache/ranger/sizing/PerfRequestGenerator.java
copy security-admin/db/{oracle/patches/066-create-sz-ref-role-table.sql =>
mysql/patches/074-create-index-for-x_trx_log.sql} (50%)
create mode 100644
security-admin/db/mysql/patches/075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql
create mode 100644
security-admin/db/oracle/patches/068-create-view-principal.sql
copy security-admin/db/oracle/patches/{066-create-sz-ref-role-table.sql =>
069-add-gz_json_x_security_zone.sql} (50%)
copy security-admin/db/oracle/patches/{066-create-sz-ref-role-table.sql =>
072-alter-x_access_type_def.sql} (50%)
rename security-admin/db/oracle/patches/{077-create-x_trx_log_v2.sql =>
073-create-x_trx_log_v2.sql} (96%)
copy security-admin/db/oracle/patches/{066-create-sz-ref-role-table.sql =>
074-create-index-for-x_trx_log.sql} (50%)
create mode 100644
security-admin/db/oracle/patches/075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql
copy security-admin/db/{oracle/patches/066-create-sz-ref-role-table.sql =>
postgres/patches/074-create-index-for-x_trx_log.sql} (50%)
create mode 100644
security-admin/db/postgres/patches/075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql
rename security-admin/db/sqlanywhere/patches/{067-create-x_trx_log_v2.sql =>
073-create-x_trx_log_v2.sql} (100%)
copy security-admin/db/{oracle/patches/066-create-sz-ref-role-table.sql =>
sqlanywhere/patches/074-create-index-for-x_trx_log.sql} (50%)
copy security-admin/db/{oracle/patches/066-create-sz-ref-role-table.sql =>
sqlanywhere/patches/075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql}
(50%)
rename security-admin/db/sqlserver/patches/{067-create-x_trx_log_v2.sql =>
073-create-x_trx_log_v2.sql} (100%)
copy security-admin/db/{oracle/patches/066-create-sz-ref-role-table.sql =>
sqlserver/patches/074-create-index-for-x_trx_log.sql} (50%)
copy security-admin/db/{oracle/patches/066-create-sz-ref-role-table.sql =>
sqlserver/patches/075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql}
(50%)
create mode 100644
security-admin/src/main/java/javax/ws/rs/core/NoContentException.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/patch/cliutil/TrxLogV2MigrationUtil.java
delete mode 100644
security-admin/src/main/webapp/libs/bower/bootbox/js/bootbox.js
create mode 100644
security-admin/src/main/webapp/libs/bower/bootprompt/bootprompt.js
create mode 100644
security-admin/src/main/webapp/react-webapp/src/views/AuditEvent/AdminLogs/UserAssociationWithGroupLogs.jsx
create mode 100644
security-admin/src/test/java/org/apache/ranger/rest/TestGdsREST.java
