This is an automated email from the ASF dual-hosted git repository.
pradeepagrawal8184 pushed a change to branch RANGER-5740_esplugin
in repository https://gitbox.apache.org/repos/asf/ranger.git
omit 2b041024a RANGER-5743: Docker setup for Apache Ranger ElasticSearch
plugin and Integrate ES plugin with x-pack-security on ES 7.17
omit 2e1b5c5b5 RANGER-5740: Align Elasticsearch plugin caller identity with
X-Pack Security
add 1641c7d75 RANGER-5749: Limit concurrent Ranger Admin UI sessions per
user (#1200)
add 2554f24a5 RANGER-5554: Refactor Ranger Admin docker bootstrap to use
runtime config only (#1236)
add 32bd6de2f RANGER-5355: Docs - add release notes, blog posts and
project pages to the MkDocs site (#1240)
add d87bd9ee1 RANGER-5801: Remove legacy v1 PublicAPIs and associated dead
code (#1233)
add f3efea682 RANGER-5775: Fix docker compose warnings for unset
RANGER_JVM_METASPACE variables (#1241)
add da5695f1f RANGER-5799: Validate class assignability before
instantiating configured service-def classes (#1237)
add a8481cd86 RANGER-5785: Upgrade google-cloud-kms (#1210)
add ee4fcc1e8 RANGER-5787 : Refactoring the security zone API (#1229)
add fb2025626 RANGER-5800 : UserGroup API require additional checks (#1245)
add 072bbd438 RANGER-5793: Align delegated-admin checks for policy update
and delete when access grants are unchanged (#1223)
add 5f88104f3 RANGER-5797: Improve policy evaluation logic for _any access
type and priority handling (#1234)
add 83e92c926 RANGER-5810: Rewrite README for Docker Hub installs, JDK 17
builds and PR workflow (#1260)
add d0f9fe978 RANGER-5696: Added deltaSyncServerType config to optimize
delta sync … (#1218)
add 6847eb7b9 RANGER-5110: Prevent entity soft deletion when LDAP DN is
updated (#1162)
add 9f4d07dc5 RANGER-5764:Enhancing RangerUserStore to include or exclude
user group mappings (#1185)
add afb2049b8 RANGER-5740: Align Elasticsearch plugin caller identity with
X-Pack Security
add 558d8c417 RANGER-5743: Docker setup for Apache Ranger ElasticSearch
plugin and Integrate ES plugin with x-pack-security on ES 7.17
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (2b041024a)
\
N -- N -- N refs/heads/RANGER-5740_esplugin (558d8c417)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 2 +-
README.md | 231 ++++---
agents-audit/orc-util/pom.xml | 6 -
.../audit/utils/RangerORCAuditWriterTest.java | 16 +
agents-common/pom.xml | 16 +
.../RangerAbstractGeolocationProvider.java | 12 +-
.../plugin/contextenricher/RangerGdsEnricher.java | 12 +-
.../plugin/contextenricher/RangerTagEnricher.java | 13 +-
.../contextenricher/RangerUserStoreEnricher.java | 13 +-
.../policyengine/RangerPolicyRepository.java | 10 +-
.../RangerDefaultPolicyEvaluator.java | 19 +-
.../contextenricher/TestRangerGdsEnricher.java | 23 +
.../plugin/policyengine/TestPolicyEngine.java | 7 +
.../TestRangerPolicyRepositoryContextEnricher.java | 73 ++
...test_policyengine_hive_any_access_priority.json | 126 ++++
dev-support/ranger-docker/.env | 7 +
dev-support/ranger-docker/Dockerfile.ranger | 60 +-
dev-support/ranger-docker/README.md | 10 +-
.../docker-compose.ranger-audit-service.yml | 10 +-
.../ranger-docker/docker-compose.ranger.yml | 8 +-
dev-support/ranger-docker/ozone-action-matcher.md | 32 +-
.../admin/configs/ranger-admin-site-mysql.yaml | 117 ++++
.../admin/configs/ranger-admin-site-oracle.yaml | 117 ++++
.../admin/configs/ranger-admin-site-postgres.yaml | 117 ++++
.../scripts/admin/create-ranger-services.py | 90 ++-
dev-support/ranger-docker/scripts/admin/dba.py | 470 +++++++++++++
.../admin/ranger-admin-install-mysql.properties | 115 ----
.../admin/ranger-admin-install-oracle.properties | 116 ----
.../admin/ranger-admin-install-postgres.properties | 118 ----
.../ranger-admin-install-sqlserver.properties | 122 ----
dev-support/ranger-docker/scripts/admin/ranger.sh | 148 ++--
distro/src/main/assembly/kms.xml | 9 +-
kms/pom.xml | 15 +
.../fig01-policy_ussales_rib.jpg | Bin
.../fig02-policy_globalsales_highly_sensitive.jpg | Bin
.../fig03-policy_globalsales_sensitive.jpg | Bin
.../fig04-policy_globalsales_non_sensitive.jpg | Bin
...-policy_globalsales_row_filter_sales_region.jpg | Bin
.../fig06-roles_capturing_sl_sr.jpg | Bin
.../fig07-policy_ussales_tag_attribute_based.jpg | Bin
.../fig08-policy_tag_based_sl.jpg | Bin
...ig09-policy_globalsales_row_filter_sr_roles.jpg | Bin
.../fig10-roles_capturing_sl_sr_sp.jpg | Bin
...policy_globalsalespartners_row_filter_sr_sp.jpg | Bin
.../table_globalsales.jpg | Bin
.../table_globalsalespartners.jpg | Bin
.../adventures_in_abac_1.files/table_ussales.jpg | Bin
...policy_globalsalespartners_row_filter_sr_sp.jpg | Bin
...-policy_globalsalespartners_row_filter_abac.jpg | Bin
.../fig3-policy_tag_based_on_user_role.jpg | Bin
.../fig4-policy_tag_policy_abac.jpg | Bin
.../table_globalsalespartners.jpg | Bin
.../integrating_applications.files/image1.png | Bin
.../integrating_applications.files/image2.png | Bin
mkdocs/docs/blog/abac-part-1.md | 205 ++++++
mkdocs/docs/blog/abac-part-2.md | 149 ++++
mkdocs/docs/blog/blog.md | 54 +-
mkdocs/docs/blog/dynamic-expressions.md | 293 ++++++++
mkdocs/docs/blog/integrating-applications.md | 757 +++++++++++++++++++++
mkdocs/docs/blog/policy-model.md | 305 +++++++++
mkdocs/docs/project/community.md | 174 +++++
mkdocs/docs/project/contributing.md | 212 +++++-
mkdocs/docs/project/release-process.md | 395 +++++++----
mkdocs/docs/project/security.md | 198 ++++++
mkdocs/docs/release-notes/1.x-and-older.md | 199 ++++++
mkdocs/docs/release-notes/2.0.0.md | 385 +++++++++++
mkdocs/docs/release-notes/2.1.0.md | 404 +++++++++++
mkdocs/docs/release-notes/2.2.0.md | 310 +++++++++
mkdocs/docs/release-notes/2.3.0.md | 248 +++++++
mkdocs/docs/release-notes/2.4.0.md | 230 +++++++
mkdocs/docs/release-notes/2.5.0.md | 496 ++++++++++++++
mkdocs/docs/release-notes/2.6.0.md | 204 ++++++
mkdocs/docs/release-notes/2.7.0.md | 161 +++++
mkdocs/docs/release-notes/2.8.0.md | 185 +++++
mkdocs/docs/release-notes/2.9.0.md | 168 +++++
mkdocs/docs/release-notes/download.md | 218 ++++++
mkdocs/docs/release-notes/index.md | 71 ++
mkdocs/mkdocs.yml | 33 +-
pom.xml | 11 +-
.../main/java/org/apache/ranger/biz/AssetMgr.java | 4 -
.../apache/ranger/biz/RangerPolicyAdminImpl.java | 90 ++-
.../java/org/apache/ranger/biz/ServiceMgr.java | 5 +-
.../java/org/apache/ranger/biz/SessionMgr.java | 210 +++++-
.../main/java/org/apache/ranger/biz/XUserMgr.java | 21 +
.../apache/ranger/common/RangerUserStoreCache.java | 5 +-
.../java/org/apache/ranger/common/ServiceUtil.java | 437 ------------
...efUpdateForResourceSpecificAccesses_J10012.java | 4 -
.../PatchForHBaseServiceDefUpdate_J10035.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10006.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10007.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10009.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10010.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10017.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10027.java | 4 -
.../patch/PatchForHiveServiceDefUpdate_J10030.java | 4 -
.../PatchForKafkaServiceDefUpdate_J10015.java | 4 -
.../PatchForKafkaServiceDefUpdate_J10025.java | 4 -
.../PatchForKafkaServiceDefUpdate_J10033.java | 4 -
...PatchForOzoneServiceDefConfigUpdate_J10051.java | 4 -
.../PatchForOzoneServiceDefUpdate_J10041.java | 4 -
.../patch/PatchForTagServiceDefUpdate_J10008.java | 4 -
.../patch/PatchForTagServiceDefUpdate_J10028.java | 4 -
.../apache/ranger/patch/PatchMigration_J10002.java | 4 -
.../java/org/apache/ranger/rest/AssetREST.java | 4 -
.../java/org/apache/ranger/rest/PublicAPIs.java | 360 ----------
.../org/apache/ranger/rest/SecurityZoneREST.java | 46 +-
.../web/filter/RangerKRBAuthenticationFilter.java | 52 +-
.../ranger/service/PublicAPIServiceBase.java | 44 --
.../org/apache/ranger/service/XPolicyService.java | 747 --------------------
.../apache/ranger/service/XRepositoryService.java | 125 ----
.../java/org/apache/ranger/view/VXPermObjList.java | 79 ---
.../java/org/apache/ranger/view/VXPolicyList.java | 79 ---
.../java/org/apache/ranger/view/VXRepository.java | 207 ------
.../org/apache/ranger/view/VXRepositoryList.java | 79 ---
.../conf.dist/ranger-admin-default-site.xml | 13 +
.../main/resources/conf.dist/ranger-admin-site.xml | 10 +
security-admin/src/main/webapp/WEB-INF/web.xml | 3 +
.../users_details/UserForm.jsx | 11 +-
.../java/org/apache/ranger/biz/TestAssetMgr.java | 4 -
.../ranger/biz/TestRangerPolicyAdminImpl.java | 398 ++++++++++-
.../java/org/apache/ranger/biz/TestServiceMgr.java | 38 ++
.../java/org/apache/ranger/biz/TestSessionMgr.java | 408 +++++++++++
.../java/org/apache/ranger/biz/TestXUserMgr.java | 44 ++
.../org/apache/ranger/common/TestServiceUtil.java | 250 -------
.../ranger/patch/TestPatchMigration_J10002.java | 3 -
.../org/apache/ranger/rest/TestPublicAPIs.java | 460 -------------
.../apache/ranger/rest/TestSecurityZoneREST.java | 289 ++++++--
.../org/apache/ranger/rest/TestServiceREST.java | 29 +
.../filter/TestRangerKRBAuthenticationFilter.java | 77 +++
.../ranger/service/TestXPolicyServiceMapping.java | 380 -----------
.../ranger/service/TestXRepositoryService.java | 108 ---
.../ldapusersync/process/LdapUserGroupBuilder.java | 22 +-
.../unixusersync/config/UserGroupSyncConfig.java | 13 +
.../process/PolicyMgrUserGroupBuilder.java | 81 ++-
.../process/TestLdapUserGroupBuilder.java | 91 +++
.../config/TestUserGroupSyncConfig.java | 18 +
.../process/TestPolicyMgrUserGroupBuilder.java | 272 ++++++++
ugsync/src/test/resources/ranger-ugsync-site.xml | 22 +
138 files changed, 9596 insertions(+), 4435 deletions(-)
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/policyengine/TestRangerPolicyRepositoryContextEnricher.java
create mode 100644
agents-common/src/test/resources/policyengine/test_policyengine_hive_any_access_priority.json
create mode 100644
dev-support/ranger-docker/scripts/admin/configs/ranger-admin-site-mysql.yaml
create mode 100644
dev-support/ranger-docker/scripts/admin/configs/ranger-admin-site-oracle.yaml
create mode 100644
dev-support/ranger-docker/scripts/admin/configs/ranger-admin-site-postgres.yaml
create mode 100644 dev-support/ranger-docker/scripts/admin/dba.py
delete mode 100644
dev-support/ranger-docker/scripts/admin/ranger-admin-install-mysql.properties
delete mode 100644
dev-support/ranger-docker/scripts/admin/ranger-admin-install-oracle.properties
delete mode 100644
dev-support/ranger-docker/scripts/admin/ranger-admin-install-postgres.properties
delete mode 100644
dev-support/ranger-docker/scripts/admin/ranger-admin-install-sqlserver.properties
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig01-policy_ussales_rib.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig02-policy_globalsales_highly_sensitive.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig03-policy_globalsales_sensitive.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig04-policy_globalsales_non_sensitive.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig05-policy_globalsales_row_filter_sales_region.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig06-roles_capturing_sl_sr.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig07-policy_ussales_tag_attribute_based.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig08-policy_tag_based_sl.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig09-policy_globalsales_row_filter_sr_roles.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig10-roles_capturing_sl_sr_sp.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/fig11-policy_globalsalespartners_row_filter_sr_sp.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/table_globalsales.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/table_globalsalespartners.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_1.files/table_ussales.jpg (100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_2.files/fig1-policy_globalsalespartners_row_filter_sr_sp.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_2.files/fig2-policy_globalsalespartners_row_filter_abac.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_2.files/fig3-policy_tag_based_on_user_role.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/adventures_in_abac_2.files/fig4-policy_tag_policy_abac.jpg
(100%)
copy {docs/src/site/resources/blogs/adventures_in_abac_1.files =>
mkdocs/docs/assets/blogs/adventures_in_abac_2.files}/table_globalsalespartners.jpg
(100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/integrating_applications.files/image1.png (100%)
copy {docs/src/site/resources =>
mkdocs/docs/assets}/blogs/integrating_applications.files/image2.png (100%)
create mode 100644 mkdocs/docs/blog/abac-part-1.md
create mode 100644 mkdocs/docs/blog/abac-part-2.md
create mode 100644 mkdocs/docs/blog/dynamic-expressions.md
create mode 100644 mkdocs/docs/blog/integrating-applications.md
create mode 100644 mkdocs/docs/blog/policy-model.md
create mode 100644 mkdocs/docs/project/community.md
create mode 100644 mkdocs/docs/project/security.md
create mode 100644 mkdocs/docs/release-notes/1.x-and-older.md
create mode 100644 mkdocs/docs/release-notes/2.0.0.md
create mode 100644 mkdocs/docs/release-notes/2.1.0.md
create mode 100644 mkdocs/docs/release-notes/2.2.0.md
create mode 100644 mkdocs/docs/release-notes/2.3.0.md
create mode 100644 mkdocs/docs/release-notes/2.4.0.md
create mode 100644 mkdocs/docs/release-notes/2.5.0.md
create mode 100644 mkdocs/docs/release-notes/2.6.0.md
create mode 100644 mkdocs/docs/release-notes/2.7.0.md
create mode 100644 mkdocs/docs/release-notes/2.8.0.md
create mode 100644 mkdocs/docs/release-notes/2.9.0.md
create mode 100644 mkdocs/docs/release-notes/download.md
delete mode 100644
security-admin/src/main/java/org/apache/ranger/rest/PublicAPIs.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/service/PublicAPIServiceBase.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/service/XPolicyService.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/service/XRepositoryService.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/view/VXPermObjList.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/view/VXPolicyList.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/view/VXRepository.java
delete mode 100644
security-admin/src/main/java/org/apache/ranger/view/VXRepositoryList.java
delete mode 100644
security-admin/src/test/java/org/apache/ranger/rest/TestPublicAPIs.java
delete mode 100644
security-admin/src/test/java/org/apache/ranger/service/TestXPolicyServiceMapping.java
delete mode 100644
security-admin/src/test/java/org/apache/ranger/service/TestXRepositoryService.java
