Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

** Bug
    * [RANGER-2737] - Ranger REST API returns different information when GET user by id and by name
    * [RANGER-3080] - A service administrator should be allowed to set "excludes" flag for a policy resource
    * [RANGER-3108] - NPE in RangerPolicyRepository.init
    * [RANGER-3387] - Ranger Admin Header Validation.
    * [RANGER-3394] - Too much `varchar(4000)` causes table to exceed ROW SIZE limit in MySQL
    * [RANGER-3500] - Ranger policy list doesn't support sorting by field
    * [RANGER-3670] - Policy update creates unnecessary entries in transaction log table
    * [RANGER-3680] - mysql ErrorCode:1118 when Importing DB schema to database
    * [RANGER-3719] - Can not create mysql table with charset utf8mb4.
    * [RANGER-3775] - Logback.xml has been incorrectly modified by RANGER-3704.
    * [RANGER-3789] - Upgrade Handlebars version to 4.7.7
    * [RANGER-3790] - Ranger tagsync module should not depend on kafka server
    * [RANGER-3791] - Upgrade json-smart, gson and jersey-client libraries version
    * [RANGER-3798] - Ranger API Resource Metrics REST "Up time of JVM" does not update.
    * [RANGER-3806] - Group's users mapping entry failing whenever primary key auto-increment is not set to 1 in db
    * [RANGER-3807] - getUserRoles API gives 200 for non existing user passed to this API
    * [RANGER-3813] - Fix ConcurrentModificationException in UnixUserGroupBuilder
    * [RANGER-3814] - IS_IN_ROLE(roleName) condition always returns false
    * [RANGER-3816] - update getResourceACLs() API to handle macros in resource names
    * [RANGER-3819] - Upgrade springframework version
    * [RANGER-3820] - Upgrade Netty version to 4.1.78.Final
    * [RANGER-3824] - [Ranger] : /service/tags/resources error message is not proper for duplicate resource & not able to update resource resource
    * [RANGER-3825] - Ranger internal user is unable to change his password after the upgrade.
    * [RANGER-3829] - Incremental Sync value is always true under Ranger Audit (Usersync)
    * [RANGER-3840] - SHOW DATABASES command should list databases owned by the user
    * [RANGER-3846] - Ranger DB patch 058 failing when multiple policies having same resourceSignature
    * [RANGER-3847] - [Ranger] : Http status & Error message is not correct for /xaudit/trx_log
    * [RANGER-3848] - RangerClient does not auto renew Kerberos ticket after ticket lifetime expired
    * [RANGER-3853] - Ranger java patch J10054 takes time
    * [RANGER-3854] - Ranger Java patch J10056 takes time
    * [RANGER-3857] - Ranger java patch J10055 takes time
    * [RANGER-3863] - Ranger Failed to run on Apple M1 macOS (Apple Silicon)
    * [RANGER-3883] - emailchange and passwordchange User REST API's work even when invalid user id is used in the url
    * [RANGER-3885] - User REST API /users/firstnames returns only null with status code 204
    * [RANGER-3894] - Application is 'unknown' for metastore in plugin status page
    * [RANGER-3897] - RangerUserStore cache improvement
    * [RANGER-3898] -  Ranger Roles cache Improvement
    * [RANGER-3907] - Skip auditing of operation like monitorHealth in HDFS Ranger Plugin audit handler 
    * [RANGER-3911] - NPE fix in RangerDefaultPolicyEvaluator
    * [RANGER-3912] -  Ranger Policy report for a given user should fetch policies maintained for roles belonging to that user and groups
    * [RANGER-3914] - Change sync_source column's datatype from varchar to text
    * [RANGER-3918] - Namespace policy that is created in Ranger by HBase Grant command not getting honored
    * [RANGER-3920] - When sync'ing users from Ldap,  intermittent User/Group/UserGroup membership  is missing
    * [RANGER-3941] - optimize cache refresh in RangerUserStoreCache
    * [RANGER-3946] - ranger-yarn-plugin missing commons-lang-2.6.jar
    * [RANGER-3953] - potential NPE during policy-engine initialization
    * [RANGER-3956] - Upgrade Commons Text to 1.10.0
    * [RANGER-3959] - condition expression validation
    * [RANGER-3966] - incorrect roles used in policy evaluation for custom RangerAccessRequest impl
    * [RANGER-3969] - Remove os.path.join causing incorrect windows path
    * [RANGER-3970] - Expression evaluation improvements
    * [RANGER-3977] - Fix Ranger TagRest API deleteTagResourceMapByGuid
    * [RANGER-3989] - KMS APIs fail due to ConcurrentModificationException
    * [RANGER-3991] - Upgrade underscore-min.js, underscore.js and moment-with-locales.min.js
    * [RANGER-4000] - unit test failure in JDK17
    * [RANGER-4008] - RangerTagEnricher to ignore invalid resources
    * [RANGER-4014] - update getResourceACLs() API to handle resource names having macros in row-filter/masking policies
    * [RANGER-4018] - Ranger src packaging should exclude generated/unnecessary files
    * [RANGER-4029] - Ranger cannot build with HBase 2.5.x versions because preBalance coprocessor hook syntax changed in HBASE-26147
    * [RANGER-4035] - support for policies to refer access-types using category, like Create/Read/Update/Delete/Manage
    * [RANGER-4043] - [ugsync]Enumerate Groups will give error on executing 'getent group' command
    * [RANGER-4044] - Publish official docker images for ranger to dockerhub
    * [RANGER-4055] - Compulsory field firstName can be passed empty or null in the payload while creating user through API
    * [RANGER-4057] - [Ranger] /tags/tags/cache/reset api give 200 response for invalid service
    * [RANGER-4064] - RANGER-3348 introduces bug in python client for SSL enabled clusters
    * [RANGER-4065] - Fix README and PyPI Doc for Ranger Python Client 
    * [RANGER-4074] - assignPermissionToUser in XUserMgr creates entries with NULL moduleId in x_user_module_perm
    * [RANGER-4079] - Python client to use the given Ranger endpoint, instead of its baseURL
    * [RANGER-4102] - update TestPolicyACLs unit test to validate ACL count
    * [RANGER-4109] - Add unique constraint on resource_signature column of x_rms_service_resource table
    * [RANGER-4110] - Upgrade to TLS to version 1.2 -Part2
    * [RANGER-4112] - Update servicedef by name results in 400 status code while the same request works with update servicedef using id
    * [RANGER-4113] - Upgrade tomcat to 8.5.86
    * [RANGER-4121] - NPE in security-zone update validation
    * [RANGER-4123] - No policy found for given version
    * [RANGER-4126] - Fetching getDBVersion in BaseDao class in the security-admin-web throws Exception for Oracle Database
    * [RANGER-4127] - Unable to delete the user if policy is created by same user and added in the policy item
    * [RANGER-4144] - Fixed Kafka Test Suite Issues
    * [RANGER-4154] - Usersync fails to push users to Ranger, due to missing firstName field
    * [RANGER-4155] - Structure of resource(UI) hierarchy in policy form not proper formatted for multiple values. 


** New Feature
    * [RANGER-3828] - Fine-grained Access Control over nested structures
    * [RANGER-3852] - Performance and scalability analyzer tool for Ranger
    * [RANGER-3855] - RangerExternalUserStoreRetriever class
    * [RANGER-3971] - Upgrade HBASE version to 2.4.6
    * [RANGER-4028] - Ranger - Upgrade bootbox.js.


** Improvement
    * [RANGER-2928] - [Ranger Zone REST API] Resources data is missing in XML format
    * [RANGER-3165] - Upgrade Elasticsearch version in Ranger to Elasticsearch 7.10.2
    * [RANGER-3534] - Review of RangerHiveAuditHandler
    * [RANGER-3623] - Add ability to enable anonymous download of policy/role/tag
    * [RANGER-3633] - Remove eclipse .project file from git
    * [RANGER-3664] - Ranger KMS : Add refresh functionality on kms key listing page.
    * [RANGER-3763] - The max limit of the requested entities is not configurable in tagsync
    * [RANGER-3767] - Add text message in HDFS and YARN policy pages to highlight the fallback ACL option
    * [RANGER-3787] - Non-daemon threads started by ElasticSearchAuditDestination cause Spark application hanging
    * [RANGER-3794] - Improve performance of delete users/groups utility
    * [RANGER-3796] - Enhancement to support multiple resource sets in a policy
    * [RANGER-3818] - Upgrade Solr to 8.11.2
    * [RANGER-3822] - RangerService outputs password information in plaintext
    * [RANGER-3837] - Allow Ranger non-admins to get, create, edit and delete roles
    * [RANGER-3856] - Ranger admin client option to work with non-kerberized server
    * [RANGER-3865] - support for using user attributes in masking expressions
    * [RANGER-3900] - Roles deletion Takes time in Apache Ranger when there are more users,groups,roles
    * [RANGER-3902] - dbLoadTime is not added correctly in RangerServicePoliciesCache
    * [RANGER-3903] - Improvement in RangerPolicyDeltaUtil--> applyDeltas method
    * [RANGER-3910] - API Documentation is broken for knox sso
    * [RANGER-3934] - improve tag cache handling to reduce resource usage
    * [RANGER-3940] - Add javascript includes(), intersects() polyfills for array prototype to RangerCommonConstants
    * [RANGER-3948] - update serialization to skip empty values
    * [RANGER-3951] - optimize memory used for tags in plugins and server
    * [RANGER-3955] - optimization to reduce duplicate strings
    * [RANGER-3973] - LDAP incremental search not always available
    * [RANGER-3978] - Docker setup to run Ranger KMS 
    * [RANGER-3982] - Python client for Ranger KMS REST APIs
    * [RANGER-3983] - Support getColumnMasks and getRowFilters in Trino SPI 376+
    * [RANGER-3985] - Trino plugin: Check table name when creating tables
    * [RANGER-3986] - Upgrade trino guice dependency to 5.1.0
    * [RANGER-3988] - Trino plugin should differntiate between views and tables
    * [RANGER-3997] - option to use default value when user/group/tag does not have the attribute
    * [RANGER-4004] - During the service deletion also, we can clear the in-memory cache for that service which got deleted on the ranger side
    * [RANGER-4011] - option to disable creation of default policies per hierarchy
    * [RANGER-4012] - getPolicyByName searches policy by serviceName, policyName simply by traverse all policies in RangerServicePoliciesCache instead of DB  
    * [RANGER-4024] - Adding requestId as part of Ranger logs via RangerMDCFilter when the request header contains request-Id
    * [RANGER-4071] - Support for LDAP/AD usernames and group names with special chars
    * [RANGER-4080] - Python client update to add missing security-zone APIs
    * [RANGER-4083] - Tag-based policy UI to not show permissions in deny/exception for services that don't support deny/exception
    * [RANGER-4100] - Efficient computation of the smallest set of evaluators returned by search of multiple Trie trees
    * [RANGER-4101] - Java client update to add missing security-zone APIs
    * [RANGER-4107] - Upgrade EclipseLink
    * [RANGER-4114] - Consistent use of plugin property prefix in context enrichers
    * [RANGER-4117] - service-def option to include expression condition implictly
    * [RANGER-4122] - [RangerAdmin] Reorganize authorization/access check logic

** Test
    * [RANGER-3808] - Ranger的REST API接口(/roles/roles/{id}/addUsersAndGroups)本地测试提示404
    * [RANGER-3834] - Test cases for RoleREST.java missing (security-admin module)
    * [RANGER-3849] - Test cases for ServiceREST.java missing
    * [RANGER-4105] - Python script to create/update/delete policies from multiple threads


** Task
    * [RANGER-3780] - Ranger - Upgrade tomcat to 8.5.79
    * [RANGER-3782] - RANGER - Upgrade spring-security version to 5.6.5
    * [RANGER-3841] - update version ranger-2.4 to 2.4.0-SNAPSHOT
    * [RANGER-3960] - RANGER - Upgrade spring-security version to 5.7.5
    * [RANGER-3996] - Upgrade commons-configuration2 to version 2.8.0
    * [RANGER-4116] - Define description/topics/merge strategy for the github repository with .asf.yaml
    * [RANGER-4140] - Release Apache Ranger 2.4.0