This is an automated email from the ASF dual-hosted git repository.
ramackri pushed a change to branch backport-audit-pr3-plugins-2.10
in repository https://gitbox.apache.org/repos/asf/ranger.git
from 01a9fdf04 RANGER-5482: Point docker PDP audits at audit ingestor
add fb8abbc7e RANGER-5815: [ranger-2.10] Implement best coding practices
for validating service configs (#1271)
add 162e2d92a Revert "RANGER-5730: Restrict role import createNonExist
flag to roles only (#1166)" (#1275)
add c03beac49 RANGER-5818: Use the common hardened script engine for
nestedstructure row-filter evaluation (#1282)
add 230b34e27 Make grant/revoke endpoint security patterns
slash-insensitive (follow-up to RANGER-5677) (#1285)
add 55beb757d RANGER-5482: Admin OpenSearch audit UI for ranger-2.10
(PR-2) (#1262)
add 1f511c729 Merge branch 'ranger-2.10' into
backport-audit-pr3-plugins-2.10
No new revisions were added by this update.
Summary of changes:
.../policyengine/RangerRequestScriptEvaluator.java | 3 +-
.../org/apache/ranger/plugin/store/RoleStore.java | 19 --
.../ranger/plugin/util/ScriptEngineUtil.java | 6 +
.../ranger/server/tomcat/EmbeddedServer.java | 12 +
.../server/tomcat/OpenSearchIndexBootStrapper.java | 220 +++++++++++++
.../authorizer/RecordFilterJavaScript.java | 34 +-
.../authorizer/TestRecordFilterJavaScript.java | 11 +-
.../conf/ranger_opensearch_schema.json} | 14 +-
security-admin/pom.xml | 5 +
.../java/org/apache/ranger/biz/RangerBizUtil.java | 1 +
.../java/org/apache/ranger/biz/RoleDBStore.java | 14 +-
.../java/org/apache/ranger/biz/RoleRefUpdater.java | 26 +-
.../java/org/apache/ranger/biz/ServiceMgr.java | 149 ++++++++-
.../main/java/org/apache/ranger/biz/XAuditMgr.java | 8 +
.../opensearch/OpenSearchAccessAuditsService.java | 285 ++++++++++++++++
.../apache/ranger/opensearch/OpenSearchMgr.java | 193 +++++++++++
.../apache/ranger/opensearch/OpenSearchUtil.java | 362 +++++++++++++++++++++
.../main/java/org/apache/ranger/rest/RoleREST.java | 10 +-
.../conf.dist/security-applicationContext.xml | 16 +-
.../org/apache/ranger/biz/TestRoleDBStore.java | 4 +-
.../org/apache/ranger/biz/TestRoleRefUpdater.java | 49 ---
.../OpenSearchAccessAuditsServiceTest.java | 185 +++++++++++
.../ranger/opensearch/OpenSearchMgrTest.java | 55 ++++
.../ranger/opensearch/OpenSearchUtilTest.java | 219 +++++++++++++
.../java/org/apache/ranger/rest/TestRoleREST.java | 11 +-
.../TestGrantRevokeSecurityNonePatterns.java | 88 +++++
26 files changed, 1840 insertions(+), 159 deletions(-)
create mode 100644
embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/OpenSearchIndexBootStrapper.java
copy
security-admin/contrib/{elasticsearch_for_audit_setup/conf/ranger_es_schema.json
=> opensearch_for_audit_setup/conf/ranger_opensearch_schema.json} (90%)
create mode 100644
security-admin/src/main/java/org/apache/ranger/opensearch/OpenSearchAccessAuditsService.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/opensearch/OpenSearchMgr.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/opensearch/OpenSearchUtil.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/opensearch/OpenSearchAccessAuditsServiceTest.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/opensearch/OpenSearchMgrTest.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/opensearch/OpenSearchUtilTest.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/security/web/filter/TestGrantRevokeSecurityNonePatterns.java
