| RANGER-2847 |
Add support/Fix Test connection with Ozone service |
| RANGER-3136 |
NullPointException found when import policies form web side and "isOverride" is selected |
| RANGER-3137 |
Lookup user should has 'Select' permission for all resource in hive-agent |
| RANGER-3421 |
Key getting logged in RangerMasterKey.java |
| RANGER-3452 |
Other attributes and sync source are not shown when user is converted from internal to external |
| RANGER-3453 |
Avoid logging sensitive information in UserMgr.java |
| RANGER-3457 |
[Session Timeout-Ranger]With multiple tabs if one tab encounters session idle timeout other active tab still continues with old/invalid session cookie. |
| RANGER-3463 |
Use apt logger to log messages |
| RANGER-3503 |
Make "hadoop.security.authorization" config as an optional config in cm_ozone service definition |
| RANGER-3718 |
Script exceptions are not considered in ranger-docker |
| RANGER-3722 |
Fix Test-case failure |
| RANGER-3748 |
Fix healthcheck in postgres docker compose file |
| RANGER-3749 |
Fix healthcheck in mysql docker compose file |
| RANGER-3752 |
Restrict duplicate access types entries in policy creation |
| RANGER-3754 |
Chained plugins access evaluation result is not considered in some cases |
| RANGER-3795 |
Fix java patch J10033 and J10046 failure |
| RANGER-3797 |
Not able to create security zone for solr service after upgrade |
| RANGER-3858 |
On dev-support, service creation and ranger-kafka-plugin setup are failed |
| RANGER-3864 |
Spurious creation of service-resource objects in Ranger |
| RANGER-3916 |
Ranger UI fails to open when the Ranger admin domain name includes "service" keyword in it. |
| RANGER-3932 |
Modifying the security zone name should also change the resourcesignature of their policy. |
| RANGER-3947 |
Thread leak because of retry loop in SolrCollectionBootstrapper |
| RANGER-3967 |
Service creation failing for Trino |
| RANGER-4023 |
UserStoreEnricher is not enabled if only mask conditon has attribute based expression |
| RANGER-4034 |
Start and End date fix in validity schedule of Policy Form in Ranger React |
| RANGER-4042 |
Cleanup unused usersync poc package |
| RANGER-4052 |
Zone filter not getting cleared in landing page after deleting the zone from zone listing page in Ranger React |
| RANGER-4073 |
Groups are not visible in mask and row level policy listing tables. |
| RANGER-4074 |
assignPermissionToUser in XUserMgr creates entries with NULL moduleId in x_user_module_perm |
| RANGER-4078 |
[Ranger UI] [React JS] Error displayed on page when navigating to audits tab and clicking on clear search button |
| RANGER-4081 |
[Ranger UI] [React JS] If the url to edit a policy, service or permissions for a module, and the url to view user/group/roles contains an invalid id, then page should display an error |
| RANGER-4084 |
Login id which is available on left most corner coming as Camel case |
| RANGER-4085 |
Search filter hint is not available where you search for policy |
| RANGER-4087 |
Loader is still loading for resource field for policy creation even after Resource lookup API gives 200/204 |
| RANGER-4088 |
While editing policy All permissions & and other resource fields are getting disappered |
| RANGER-4089 |
Getting browser specific pop-up message if try to delete policy after edit |
| RANGER-4090 |
Resouce lookup exception message is not available in react UI |
| RANGER-4091 |
Policy condition & Permission window should close by any click events |
| RANGER-4092 |
[Ranger UI] [React JS] Showing multiple msg prompts for multiple users/groups visibility toggle with same msg. |
| RANGER-4094 |
[Ranger UI] [React JS] User_name/ group_name/ roles field of their tables clipping names more that 14-15 characters long. |
| RANGER-4095 |
[Ranger UI] [React JS] On users/groups/roles page in settings - The page number can be decreased to zero and negative and can be increased beyond max pages available to show. |
| RANGER-4096 |
[Ranger UI] [React JS] "show all users" button is not available in the show users prompt of groups table even if the users list is longer than 100. |
| RANGER-4097 |
[Ranger UI] [React JS] Deletion of all services inside a zone in resource based policy page leads to disappearance of all the other services before refreshing the page. |
| RANGER-4099 |
[Ranger UI] [React JS] Focus remains on last hovered element in the dropdown of security zone search bar of resource based policy page. |
| RANGER-4103 |
[Ranger-react] Fix for improving logout mechanism in Ranger react code base. |
| RANGER-4115 |
Tags containing attributes not processed correctly by tagsync |
| RANGER-4119 |
[UI] Syntax check button missing in policy level condition |
| RANGER-4129 |
ArrayIndexOutOfBounds exception may be thrown while processing events |
| RANGER-4131 |
clientIP is not logged for create/grant/revoke role operations via hive beeline |
| RANGER-4132 |
[Ranger UI] If view policy button is clicked for a policy which is deleted, then the page gets stuck in loading state |
| RANGER-4135 |
Regression caused by Ranger-3920 |
| RANGER-4136 |
Incorrect processing of tag-deltas by RangerTagEnricher |
| RANGER-4146 |
[Ranger UI] [React JS] Tag-based policy UI to not show permissions in deny/exception for services that don't support deny/exception |
| RANGER-4157 |
implicit expression condition not added to service-defs having existing conditions |
| RANGER-4167 |
Kafka Test Suite Issues (RANGER-4144 on 3.0.0 branch) |
| RANGER-4173 |
Ozone_key tag based policies are not working |
| RANGER-4176 |
Failed to collect dependencies at org.apache.hbase:hbase-server:jar:2.4.6 -> org.glassfish.web:javax.servlet.jsp 2.3.2 -> org.glassfish:javax.el3.0.1-b06-SNAPSHOT |
| RANGER-4177 |
policy create/update should fail when it references non-existing user/group/role |
| RANGER-4178 |
NoClassDefFoundError: org/apache/hadoop/hive/ql/exec/vector/ColumnVector |
| RANGER-4180 |
Log Dir for gc-worker.log is not using same VAR as logs dir for other ranger logs |
| RANGER-4183 |
Upon creating a zone, in zone details under Service section table, Service Type column value loads after some millisecond |
| RANGER-4187 |
Not able to search using multiple user filter in access audit tab |
| RANGER-4192 |
A higher priority Data-masking policy is not considered when computing Datamask type |
| RANGER-4193 |
ServiceTagsProcessor fails to handle update of an existing Service-Resource |
| RANGER-4194 |
For Hive service def resources not supporting exclude and recursive are showing this option in service view detail |
| RANGER-4197 |
Encryption Tab's key manager table show blank data. |
| RANGER-4198 |
[BUILD] [JDK11] - failed - ranger-master-snapshot-publish : Unix Native Authenticator #773' does not have a result yet. |
| RANGER-4199 |
RangerPluginClassLoader.java has log error |
| RANGER-4214 |
Build broken on JDK11 - |
| RANGER-4219 |
Grant permission in Impala engine not working with {user} in ranger policy |
| RANGER-4225 |
Possible Jackson serialization issue due to not comply with Java bean standards |
| RANGER-4233 |
DOC SITE : Recent revamp of doc site has some issues when accessed via mobile or ipad |
| RANGER-4241 |
Fix sql patch 65 syntax issue for oracle db |
| RANGER-4242 |
Ranger Upgrade is failing while executing the PatchPreSql_057_ForUpdateToUniqueGUID_J10052 |
| RANGER-4244 |
security zone REST API status code |
| RANGER-4250 |
Ranger throws BAD Request Error when we are not passing exec user to the getRoles (/public/v2/api/roles/name/{name}) |
| RANGER-4258 |
Ranger: Instead of limiting the listing to only 25, Ranger should provide a comprehensive list of maximum service definitions, services, and zones. |
| RANGER-4260 |
In trino service while creating policy add permission is rendering incorrectly. |
| RANGER-4261 |
Support for DEBUG logs in admin, usersync and tagsync |
| RANGER-4263 |
LookupResource give blank response in new react UI |
| RANGER-4273 |
Fix to maintain the zone search while editing the filtered policy on Report page |
| RANGER-4276 |
Millions of logs getting generated with text "No context-enrichers!!!" |
| RANGER-4288 |
User with ROLE_ADMIN_AUDITOR not able to view zone policy on Ranger Admin UI |
| RANGER-4291 |
If a ROW_FILTER type policy resources match, then an audit log record with Result=Denied is created |
| RANGER-4292 |
[Ranger UI] [React JS] Long zone names are not showing perfectly in the zone search dropdown of service manager |
| RANGER-4293 |
[Ranger UI] [React JS] Long User/group/role name overflowing from delete confirmation dialog box |
| RANGER-4294 |
Delete message alert box should have message specific to delete activity |
| RANGER-4295 |
[Ranger UI] [React JS] Option might require to clear all filter at once for resource policy side bars |
| RANGER-4296 |
[Ranger UI] [React JS] Dropdown option in the access audits must display "User" instead of "Users" |
| RANGER-4297 |
[Ranger UI] [React JS] Scroll to Newly added row functionality in listing tables is not working. |
| RANGER-4299 |
Zone resource validator handling of resources at different levels |
| RANGER-4301 |
Ranger Access Audit doesn't show callerContext in the audit as hover over button for HDFS audits |
| RANGER-4305 |
Two api requests for single export request triggered from Reports page |
| RANGER-4316 |
Path resource matcher handling of resource ending with separator |
| RANGER-4317 |
[Ranger UI] Error message displayed when resource lookup fails is not formatted properly |
| RANGER-4320 |
createPrincipalsIfAbsent parameter is not recognized by importPoliciesFromFile REST API |
| RANGER-4322 |
enable-atlas-plugin.sh fails due to missing commons-lang3 jar |
| RANGER-4328 |
matching scope SELF_OR_PREFIX doesn't handle few wildcard cases |
| RANGER-4329 |
Tagsync fails to start due to missing jars |
| RANGER-4331 |
Fixes for search filter on Audits tabs |
| RANGER-4332 |
AuditBatchQueue.log() should block instead of throwing 'Queue full' exception |
| RANGER-4339 |
[Ranger React UI] Spelling of delegate admin has to be corrected in policy form |
| RANGER-4341 |
Logout api call through idle timeout gets aborted |
| RANGER-4342 |
RangerJSONAuditWriter creates new log file for writing ranger audits as JSON every time there is an Error/Exception |
| RANGER-4343 |
Atlas default policy is showing 2 "admin" users in policy items |
| RANGER-4349 |
AtlasTagSource is hardcoded to commit offset to ATLAS_ENTITIES |
| RANGER-4356 |
Ranger CSV Report extract may fail with Null pointer exception |
| RANGER-4358 |
Keep the usersync details popup names same as the backbone js names |
| RANGER-4360 |
Error page 'Go back' button not redirecting to the right page |
| RANGER-4367 |
[Ranger React UI] User with access on Key manager tab not able to view the "Encryption" tab on the React UI |
| RANGER-4368 |
Audit filter in Tag base service display wrong value for resources |
| RANGER-4369 |
[Ranger React UI] Options for permissions pop up for knox policies are not the same in Backbone UI and React JS |
| RANGER-4370 |
[Ranger UI] [React JS]"Select All permissions for all components." checkbox missing in tag based policy permission popup |
| RANGER-4373 |
Deleting a role which is already present in policy is giving incorrect message. |
| RANGER-4374 |
Getting page not found when wrong password is send in 'Old Password' |
| RANGER-4376 |
Need to show Tag Policies for user when it has permission in "Tag Based Policies" module |
| RANGER-4377 |
Fix to use "public/v2/api/zone-headers" api to get list of zones in Access Logs and Report pages |
| RANGER-4381 |
[Ranger React UI] Difference in user lookup API request in permissions module page between React UI and BackBone UI |
| RANGER-4383 |
In Audit, Plugin Status tab if the record of respective service is in second page then Service Type filter for that service would show no result |
| RANGER-4390 |
ORC audit fails with null pointer exception when filequeue buffer size and orc buffer size are not equal |
| RANGER-4392 |
Tag based policy with boolean expression is not working |
| RANGER-4399 |
Need to fix zone drop-down option in policy listing for user not having 'Security Zone' module permission |
| RANGER-4400 |
RangerKafkaAuditHandler broken and multiple authorizations audited |
| RANGER-4402 |
Active role version is not updated while plugin download |
| RANGER-4407 |
Add server side validation for service audit filter |
| RANGER-4419 |
In Tag-based policy from Ranger Admin UI, Allow Conditions permissions item is not showing services permissions which have enableDenyAndExceptionsInPolicies flag false. |
| RANGER-4422 |
Searching for users/groups with Sync source filter on the users/groups page leads to error on Oracle DB |
| RANGER-4437 |
incorrect error log from ResourceMatcher.isMatch() |
| RANGER-4438 |
Read JAVA_OPTS in ranger db setup python script |
| RANGER-4439 |
Duplicate resource IDs are create while updating security zone |
| RANGER-4467 |
User Agent info not logged under "Login sessions" when login fails |
| RANGER-4472 |
getResourceACL() API updates |
| RANGER-4475 |
Security-Zone summary API ranger Admin should have access for all zones |
| RANGER-4477 |
RangerOzoneAuthorizer doesn't set the resource owner |
| RANGER-4478 |
Incorrect trie updates when processing deltas |
| RANGER-4486 |
ZoneV2 partial update allows duplicate principals and tagServices |
| RANGER-4493 |
Keep the UI behaviour for tag based and resource based services filtering for zone without any service |
| RANGER-4502 |
Getting Error to load backbone.js latest UI. |
| RANGER-4513 |
Policy listing page experiences an unexpected reset to Access tab when attempting to filter the service and zone dropdown options |
| RANGER-4542 |
Need to add support of search by zoneNamePartial and sort by zoneName,createTime query params in zone-summary api |
| RANGER-4544 |
Implement best coding practices for policy resources |
| RANGER-4556 |
policy creation without resource is being allowed through rest api |
| RANGER-4584 |
Default EXPIRES_ON policy is not loading while editing |
| RANGER-4600 |
Add improvement for /xaudit/access_audit API based on user role |
| RANGER-4601 |
/xaudit/access_audit/count API does not return the proper value |
| RANGER-4605 |
/assets/resources/count does not return proper count if policies are greater than 200 |
| RANGER-4606 |
/assets/assets/count API does not return the proper count if the number of services is greater than 200 |
| RANGER-4610 |
API calls for zones and services on initial landing in ZoneListing page is being called twice |
| RANGER-4611 |
Security zone form not populate resources value properly while creating and editing zone. |
| RANGER-4612 |
Fix to use correct service for resource lookup API in security zone |
| RANGER-4615 |
Keep the LDAP usersync details popup names same as the backbone js names |
| RANGER-4625 |
Need to add required dependencies for plugin-yarn |
| RANGER-4628 |
Need to add Validations for Security-Zone partial update API |
| RANGER-4632 |
Security Zone policies version increases by +2 when we update its policy |
| RANGER-4636 |
/public/api/repository/count does not return the proper value if the number of repositories is greater than 200 |
| RANGER-4645 |
Unit test failures in TestSecurityZoneDBStore |
| RANGER-4653 |
[Ranger React UI] Add inline assertions for displayName length in service creation / update form |
| RANGER-4655 |
Execute and read permissions granted to a user in different HDFS policies does not take effect. |
| RANGER-4660 |
While creating service, ranger logs show error if service name does not have underscore ('_') in it. |
| RANGER-4663 |
Though tag service is selected while creating new service , it will get override with the new tag service created |
| RANGER-4666 |
getResourceACL() API does not account for tags assigned to ANCESTOR resource |
| RANGER-4668 |
Need to have new local storage item for column show hide functionality in plugin status table |
| RANGER-4673 |
Pagination on the Ranger Admin - Plugin Status page |
| RANGER-4675 |
Checkbox  selection issue when clicking on permission label  in tag-based permissions policy |
| RANGER-4680 |
Inconsistent resource lookup behaviour with newly created service |
| RANGER-4681 |
Audit logs for Mask & Row policy does not show policy condition under policy item |
| RANGER-4688 |
Display query information for show roles/databases/schemas/grant role commands on Ranger Admin UI |
| RANGER-4689 |
Fix Ranger Javapatch failure even if service-defs do not exist in ranger DB |
| RANGER-4690 |
Access Audits - Resource policy version used for mask policy leading to Error page |
| RANGER-4695 |
API to find zones for a resource doesn't handle deleted service |
| RANGER-4698 |
[Ranger React UI] Audit UI improvements with respect to values overflowing into other columns |
| RANGER-4699 |
Update the execution of setServiceDef call in App.jsx |
| RANGER-4700 |
Audit logs for Masking policy is missing data mask type entry |
| RANGER-4711 |
Show grant on table command is not audited by ranger |
| RANGER-4717 |
Skip showing 'Page not found' for wrong value is provided to a api parameter in Login Session Tab |
| RANGER-4718 |
Skip showing 'Page not found' page for INVALID_INPUT_DATA validation in User Profile |
| RANGER-4719 |
Policy condition expressions are split by the Ranger UI on commas |
| RANGER-4720 |
Ranger Admin server gives empty response when user with user-role tries to update lastname or email address |
| RANGER-4722 |
HDFS authorization logic for directory hierarchy rooted at "/" is incorrect |
| RANGER-4723 |
USE fails even when the user has permission on some tables in the database |
| RANGER-4724 |
ImportServiceTags api fails when the response json from tags/download/{serviceName} is used |
| RANGER-4727 |
When tagDef delete fails, error message is not returned |
| RANGER-4737 |
The inactivityTimeout is getting reset when user updates its profile from UserProfile page |
| RANGER-4747 |
[docker]: Exception handling in create-ranger-services.py |
| RANGER-4762 |
REST endpoints do not prevent duplicate values for a resource resulting in multiple policies for a resource |
| RANGER-4767 |
Deleted policies are still taking effect if all policies for a security zone are deleted |
| RANGER-4774 |
Ranger react UI some modules shown hardcoded time zone string "Indian Standard Time" |
| RANGER-4782 |
Implement best coding practices for validating service configs |
| RANGER-4784 |
Tag-Based - default policy is not created for tag added to security zone |
| RANGER-4786 |
Ranger override policy is not working |
| RANGER-4804 |
Encountering a '404 Not Found' page when assigning two or more groups to a user during editing |
| RANGER-4806 |
With java 17 the audit spool exception is seen if solr is not reachable. |
| RANGER-4818 |
[usersync] Users undergoing role reset to ROLE_USER from ROLE_SYS_ADMIN |
| RANGER-4822 |
Policy creation/updation fails when validity period is added |
| RANGER-4823 |
Incorrect processing of downloaded policies in plugin when policy-deltas are enabled |
| RANGER-4830 |
Ranger KMS startup failure in database initialization |
| RANGER-4834 |
Remove "Switch to latest UI" option from Ranger Admin Backbone classic UI |
| RANGER-4836 |
Ranger Usersync failing due to java.lang.NoClassDefFoundError |
| RANGER-4837 |
Intermittent test failures in org.apache.ranger.audit.TestAuditQueue |
| RANGER-4851 |
Upon editing an User we are seeing some discrepancy in its Audit Admin logs |
| RANGER-4852 |
De-duplicated tags do not work correctly when tag-deltas are enabled. |
| RANGER-4853 |
Some code changes are missing during commit merge to ranger-2.5 branch |
| RANGER-4854 |
Policy Import from UI is failing. |
| RANGER-4862 |
HBase plugin initialization failure in HBase 2.6.0 |
| RANGER-4864 |
Upon performing Policy Import some of Audit Admin logs are improper |
| RANGER-4867 |
Role deletion shows "Data Not Found (400)." page when it is associated with some another role |
| RANGER-4868 |
ranger-mem-sizing fails with NoClassDefFoundError: com/google/gson/GsonBuilder |
| RANGER-4874 |
Ranger UI inaccessible after login |