Ranger
HDP 2.3.2 provides Ranger 0.5.0 and the following Apache patches:
RANGER-551 Policy Validation: If resource levels are not valid for any hierarchy then checks about missing mandatory levels should be skipped
BUG FIXES
RANGER-560 Policy validation: Provide user friendly error messages about validation failures
RANGER-580 HBase plugin: Plugin may not work after upgrade
RANGER-584 Service validation: Provide user friendly error messages about validation failures
RANGER-587 ranger-admin-site.xml not getting updated when ranger.authentication.method is changed
RANGER-588 Take care of Ranger KMS installation even if 'java' is not in PATH
RANGER-593 Service def validation: Provide user friendly error messages about validation failures
RANGER-594 Policy Validation: Change the logic to generate friendly error messages to be like used for Service and Service def
RANGER-598 Update Ranger config migration script to work with Ranger 0.5
RANGER-615 Audit to db: Truncate all string values of audit record so that writing of audit does not fail
RANGER-618 KMS gets slower in key creation once Database grows
RANGER-621 Solr service-def JSON has incorrect impliedGrants for solr_admin permission
RANGER-622 Hive plugin: Add jar via beeline throws NPE
RANGER-623 Enable plugin scripts should handle file permissions for certain umask value
RANGER-624 Windows installation broken after SQLAnywhere support
RANGER-625 Change db flavor input parameter value from SQLAnywhere to SQLA
RANGER-627 Processing done by Audit Shutdown hooks can confuse someone looking at logs to think that shutdown of a service is held up due to Ranger plugin
RANGER-628 Make filters for ranger-admin search binds configurable
RANGER-630 Data consistency across API and UI
RANGER-632 Policy validation error messages produced by the server are not seen by the user
RANGER-637 Make REFERRAL property in Ranger User sync configurable
RANGER-638 Ranger admin should redirect back to login page when session cookies expires
RANGER-639 Storm plugin - commons-lang is a required dependency and hence should be packaged as part of storm plugin
RANGER-641 Ranger kms start fails if java is not set and started using service keyword
RANGER-642 Update USERSEARCHFILTER for Ranger Authentication on Windows
RANGER-653 Move delegated admin check to mgr layer from service layer for XPermMap and XAuditMap
HDP 2.3.0 provided Ranger 0.5.0 and the following Apache patches:
RANGER-422 Add additional database columns to support aggregation
RANGER-423 Support audit log aggregation in Ranger Admin UI
RANGER-513 Policy validation: resource hierarchies check does not work with single-node hierarchies as in HDFS
RANGER-551 Policy Validation: If resource levels are not valid for any hierarchy then checks about missing mandatory levels should be skipped.
RANGER-564 Add incubating to the release name
BUG FIXES
RANGER-219 Autocomplete behavior of hive tables/columns
RANGER-524 HBase plugin: list command should prune the tables returned on user permissions
RANGER-529 Policy Validation: resources of a policy must match one of the resource hierarchies of the service def.
RANGER-533 HBase plugin: if user does not have family-level access to any family in a table then user may be incorrectly denied access done at table/family level during get or scan
RANGER-539 Rolling downgrade changes
RANGER-545 Fix js error for lower versions of FF (less than 30)
RANGER-548 Key rollover command fails
RANGER-550 Hive plugin: Add audit logging support for metadata queries that have filtering support from hive
RANGER-553 Default policy creation during service creation should handle service defs with multiple hierarchies, e.g. hive, properly
RANGER-554 Ranger KMS keys listing page does not support pagination
RANGER-555 Policy view page (from access audit page) gives 404 with Oracle DB
RANGER-558 HBase plugin: unless user has READ access at some level under the table/family being accessed (via scan/get) authorizer should throw an exception and audit
RANGER-565 Ranger Admin install fails (sometimes) with IO Error when DB used in Oracle
RANGER-566 Installation of Ranger on Oracle 12c with shared database needs to use private synonym instead of public synonym
RANGER-569 Enabling Ranger plugin for HBase should not modify hbase.rpc.protection value
RANGER-570 Knox plugin: after upgrading ranger from 0.4 to 0.5 the Knox plugin won't work because classes with old names are missing
RANGER-571 Storm plugin: after upgrading ranger from 0.4 to 0.5 the plugin won't work because classes with old names are missing
RANGER-575 Allow KMS policies to be assigned to all users
RANGER-576 Storm audit not showing access type in the Ranger Admin Audit UI
HDP CHANGES
RANGER-450 Failed to install Ranger component due to Ranger policyManager script failures