| RANGER-1644 |
Change the default Crypt Algo to use stronger cryptographic algo. |
| RANGER-1738 |
RangerYarnAuthorizer not compatible with Hadoop-3.0.0 |
| RANGER-1951 |
build problems with the saveVersion.py script |
| RANGER-1955 |
Wrong quoting in Ranger SQL install scripts |
| RANGER-2112 |
Ranger KMS broken with JDK 8 update 171 |
| RANGER-2114 |
Internal Exception: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'content' at row 1 |
| RANGER-2152 |
Incorrect debugging information in RangerPluginClassLoader.java |
| RANGER-2155 |
Ranger Tagsync fails to Authenticate to Atlas when Tag Source set to AtlasRest in Kerberos environment |
| RANGER-2160 |
'Email Address' search is not working properly along with other filter in user listing page,userRoles filters also needs to be improved. |
| RANGER-2165 |
Address JPA Cache issue when policies Create, Update and Delete are done via REST API in Apache Ranger admin |
| RANGER-2166 |
A ClassNotFound exception is thrown with atlasrest as a tag source |
| RANGER-2180 |
Handle token replacement correctly when token is not defined in the request context |
| RANGER-2182 |
Handle upgrade scenario since atlas-service def is added with new resources for relationship |
| RANGER-2183 |
Use INodeAttribute information to authorize HDFS access |
| RANGER-2186 |
Increment service-specific policy and tag versions after update transaction is committed |
| RANGER-2187 |
External Group search fails on Ranger UI when installed with postgres |
| RANGER-2189 |
Atlas service default policies should allow relationship operations for all |
| RANGER-2193 |
Form validation during testconnection should be consistent with service creation/editing |
| RANGER-2195 |
TagPolicy not working due to failure in updating tag policy version |
| RANGER-2196 |
Ensure that any explicit threads used by Ranger are marked as daemon threads |
| RANGER-2197 |
Delegate Admin is not able to create policy |
| RANGER-2201 |
Log no ranger audits when entityId value is not null or empty string |
| RANGER-2204 |
Ranger Admin's admin log event for changing Audit Logging of a policy doesn't show the actual changes |
| RANGER-2213 |
Tomcat Security Vulnerability Alert. The version of the tomcat for ranger should upgrade to 7.0.90. |
| RANGER-2215 |
Can't copy and paste multiple paths into Ranger Admin UI for HDFS create policy |
| RANGER-2220 |
Admin UI loads slowly because of many small JavaScript files |
| RANGER-2224 |
'drop temporary function ' command should be handled by 'global' resource and 'Temorary UDF Admin' permission. |
| RANGER-2229 |
Perform graceful terminate with retries before doing forceful kill for usersync and tagsync |
| RANGER-2234 |
Cannot add or update a child row,a foreign key constraint fails when installing ranger-admin |
| RANGER-2235 |
Modify the login session detail page as a modal. |
| RANGER-2238 |
String comparison should not use ‘==’ in ServiceUtil.java |
| RANGER-2241 |
Fix release build scripts to conform to latest Apache release guidelines - Part 2 - Remove sha1 and mds |
| RANGER-2242 |
JiSQL utility is failing Oracle UDF |
| RANGER-2244 |
Tomcat Security Vulnerability Alert. The version of the tomcat for ranger should upgrade to 7.0.91 or later. |
| RANGER-2245 |
Exclude Jetty libraries |
| RANGER-2247 |
Ranger Plugin for HDFS throws StringIndexOutOfBounds exception when policy resource is "" |
| RANGER-2248 |
Sorting does not work in AbstractPredicateUtil.java |
| RANGER-2250 |
Service configs fields are not showing for atlas service form page |
| RANGER-2252 |
Permission "Kafka Admin" should not be part of Topic resource in Ranger Kafka resource definition |
| RANGER-2262 |
Improvement of export to excel from report listing page for Oracle database. |
| RANGER-2263 |
Remove unnecessary explicit dependency for apache commons compress jar in Ranger |
| RANGER-2264 |
Kafka default policies for new resources are not showing up in UI when upgrade is done from older version |
| RANGER-2269 |
Implement best coding practices for validating user input |
| RANGER-2270 |
Restrict tag module access to unprivileged users |
| RANGER-2272 |
Ensure that case of resource-definition names and access-type names in Ranger policy is the same as in service-definition after successful validation |
| RANGER-2273 |
Allow service admin and delegated admin user to view list of users and groups though they have 'USER' role |
| RANGER-2275 |
Make db_setup retry delay configurable |
| RANGER-2276 |
Email Address should be verified when Add New User in Ranger Admin |
| RANGER-2277 |
Kylin repository config missing "Common Name for Certificate" |
| RANGER-2278 |
Unable to delete user if he has references in new ref tables. |
| RANGER-2280 |
The emptyText of User Sync and Plugin Status should be reasonable |
| RANGER-2282 |
The error message for changing password is incorrect in User Profile page. |
| RANGER-2283 |
User is getting total count of groups even if he is assigned to one group due to which pagination is breaking |
| RANGER-2284 |
Unable to build image using docker |
| RANGER-2288 |
Sqoop repository config missing "Common Name for Certificate" |
| RANGER-2289 |
Unable to get Audit Admin tab page. |
| RANGER-2292 |
Test case fix for RANGER-2276 |
| RANGER-2294 |
Front-end and back-end email address regular expression should be the same |
| RANGER-2297 |
getContentSummary validation failure |
| RANGER-2298 |
Modify JAVA_VERSION_REQUIRED to 1.8 in install.properties |
| RANGER-2299 |
Modify the permissions of the kms install.properties file to 700 |
| RANGER-2304 |
Need to add property dfs.permissions.ContentSummary.subAccess when enabling Ranger HDFS plugin manually |
| RANGER-2305 |
When Audit spooling to local filesystem is enabled, log files of the component have show a wrong error message |
| RANGER-2306 |
Knox Plugin doesn't pass X-Forwarded-for remote address to Ranger |
| RANGER-2307 |
Native code can segfault or return misleading error messages |
| RANGER-2311 |
After the user profile is updated, the page still displays the original information. |
| RANGER-2313 |
tagsync fails to authenticate with ranger in kerberized cluster when using ranger-tagsync-update.sh script |
| RANGER-2316 |
Incorrect path in Quick Start Guide |
| RANGER-2318 |
Incorrect git url on the homepage |
| RANGER-2321 |
Docker build fails due to PhantomJS dependency |
| RANGER-2326 |
zoneName field is getting added with type "boolean" in Ranger Solr schema |
| RANGER-2327 |
Update Ranger db schema to use common sequence name |
| RANGER-2328 |
Time-based policies do not work correctly if access time is not set in the authorization request |
| RANGER-2333 |
Logs does not get generated for Zone Description field available on Security Zone page. |
| RANGER-2334 |
Audits: filter out service audit logs and additional users logs from user audit logs |
| RANGER-2335 |
Overlapping of 'include' toggle button on policy create/edit page. |
| RANGER-2336 |
Ranger HBase plugin should pack guava lib as a dependency. |
| RANGER-2337 |
Context-Enrichers need to clean up completely when the policy-engine is destroyed |
| RANGER-2339 |
UI changes for User role users should also have access to Security Zone |
| RANGER-2342 |
Exclude jackson jaxrs library from ranger-admin packaging |
| RANGER-2343 |
Evaluate tag policies in the same security zone as accessed resource |
| RANGER-2344 |
Ranger HBase Test failure due to Mini HBase cluster start up issue. |
| RANGER-2347 |
Restrict capabilities of security zone administrator and auditor |
| RANGER-2350 |
Ranger UI: Clicking on zone edit Breadcrumb redirect to 404 page not found |
| RANGER-2352 |
Ranger installation is failing for Oracle and Postgres DB |
| RANGER-2355 |
Reports page: policy listing to have column of Zone name |
| RANGER-2356 |
External user's email address can be edited |
| RANGER-2359 |
Show zone association with tag based service. |
| RANGER-2367 |
Hive "show grants" when Ranger is authorizer should show permission details from Ranger |
| RANGER-2371 |
Security Zone policies do not work correctly when incremental policy updates are enabled |
| RANGER-2372 |
Remove non-existing URL entries from spring config file |
| RANGER-2373 |
User creation POST and PUT response not showing groupIdList and groupNameList with expected data |
| RANGER-2375 |
RangerAuthContext is not correctly initialized |
| RANGER-2376 |
Ranger Plugin ClassLoader Doesn't Restore Thread ClassLoader |
| RANGER-2381 |
Failed to refresh policies when servicename contains space |
| RANGER-2383 |
Incorrect response when trying to delete user attached to a security zone |
| RANGER-2384 |
Get All Zones API is returning response in raw format,proper response object is required. |
| RANGER-2396 |
Inconsistency in policy operations in a disabled Ranger service |
| RANGER-2397 |
HiveServer2 fails to start with Hive Plugin for Ranger |
| RANGER-2399 |
User's listing page hits users API call twice from UI |
| RANGER-2400 |
policy name needs to be unique within security zone and service |
| RANGER-2401 |
Ranger Secuity Zone needs to be added in audit type filter in admin audit |
| RANGER-2403 |
proper error should be thrown when service part of zone being deleted |
| RANGER-2404 |
Delegate-admin permission granted by policy needs to be effective only within the zone to which the policy belongs |
| RANGER-2405 |
Evaluation of Ranger policies targeted to valid but partial resources |
| RANGER-2406 |
rangerusersync open too many session for ldap sync |
| RANGER-2409 |
Policy level condition sample matcher initialization issue |
| RANGER-2411 |
Restrict Admin role user to create Zone for KMS service |
| RANGER-2412 |
Policy Condition Evaluators existing and newly created should work in both policy level and policy item level |
| RANGER-2413 |
Python script to update rangertagsync config properties |
| RANGER-2415 |
Value of isExcludes flag needs to be considered when matching accessed resource to Ranger policy |
| RANGER-2417 |
Set Atlas Entity owner to RangerAccessResource ownerUser attribute for Atlas Ranger Plugin |
| RANGER-2419 |
Improve sql script to skip statements when atlas service def is not supported |
| RANGER-2421 |
Solr audit fails in Atlas plugin |
| RANGER-2423 |
Ranger KnoxSSO authentication in Ranger HA environment |
| RANGER-2430 |
Zoneadmin User is able to create policy for those services which is not associated to zone |
| RANGER-2434 |
Remove dependency from com.google.common.base.Objects or MoreObjects |
| RANGER-2437 |
Update grant/revoke error message to provide more information about the principal type |
| RANGER-2438 |
Legacy PublicAPI REST API to get all policies fails |
| RANGER-2439 |
Unable to view policy details from access audits when policy has policy condition at policy level |
| RANGER-2444 |
Admin logs are not getting generated when "policy level" policy condition is updated |
| RANGER-2445 |
Import of Tag based policies for zone |
| RANGER-2449 |
if service part of zone is not present then null pointer exception is thrown |
| RANGER-2451 |
Atlas plugin is not working when security zone is created for Atlas service in Ranger Admin. |
| RANGER-2453 |
Tag data-masking policy should allow only one tag as resource |
| RANGER-2455 |
When service created inside a zone landing page that service gets created in unzonned landing page. |
| RANGER-2456 |
Upgrade of Ranger Admin to the current version fails in PatchForKafkaServiceDefUpdate_J10025 |
| RANGER-2459 |
[E] ranger_core_db_mysql.sql file import failed! |
| RANGER-2463 |
Ranger admin authorization audits fails intermittently to fetch from Solr |
| RANGER-2469 |
java.lang.IllegalArgumentException: More than one fragment with the name during Ranger start after RANGER-2464 |
| RANGER-2473 |
Upgrade of Ranger Admin to the current version fails in PatchForAtlasResourceAndAccessTypeUpdate_J10016 |
| RANGER-2474 |
Policy version and details in access audits wrong when deny condition added to policy |
| RANGER-2478 |
Exception in thread "main" java.lang.NoClassDefFoundError: com/google/common/base/Preconditions |
| RANGER-2479 |
Change test connection preferred SQL statement for Oracle DB Flavor |
| RANGER-2480 |
Hive URL Policy doesn't match if recursive flag is on for the url resource |
| RANGER-2485 |
Security zone filter is causing Ranger audit access request waiting for longer |
| RANGER-2487 |
Resource policy names with a characters that are typically HTML escaped mutate and grow as they are saved. |
| RANGER-2493 |
Ranger takes long time to delete a service with many policies |
| RANGER-2500 |
Zone Policies not getting imported when 'updateIfExists=true' is passed through curl. |
| RANGER-2502 |
Presto plugin insert bug |
| RANGER-2509 |
Add validation message for Importing non JSON file on import action. |
| RANGER-2511 |
default tag based service is getting created for the tag based service |
| RANGER-2513 |
Unable to delete user if he has references in new ref tables. |
| RANGER-2514 |
Search field validation prompt is inconsistent with field names in audit page |
| RANGER-2516 |
Update Ranger default policies to provide entity-read access to public group |
| RANGER-2518 |
Allow service creator to delete the service |
| RANGER-2519 |
Import policy may fail if a policy exists with same guid in another service |
| RANGER-2520 |
Prevent Roles to be saved in Ranger Role Management page when user or groups are not added to the role |