Cloudera Docs

Database and Java patches in Ranger for Cloudera releases

Learn about the Java and SQL (database) patches that must be applied to ensure Ranger functions correctly, when upgrading Ranger across Cloudera on premises service packs or cumulative hotfixes (CHFs).

Certain Cloudera on premises releases may include Java patches update the Ranger application logic, while SQL patches modify the underlying Ranger database schema or data. Whether these patches are required depends on your specific upgrade path.

To determine if your upgrade includes Java or SQL patches, refer to the patch manifest maintained in the Ranger product repository for each release. This manifest lists all applicable patches per version, allowing you to verify which patches — if any — are introduced between your current Cloudera and the target Cloudera. Always review this information before performing a service pack upgrade to ensure all required post-upgrade steps, including database schema updates, are completed.

Ranger Java patches

Branch Name Java Files Number of Files
remotes/origin/CDH-7.3.2.x

  • PatchSetAccessTypeCategory_J10061.java

  • PatchForUpdatingAtlasSvcDefAndTagPolicies_J10063.java

  • TrxLogV2MigrationUtil.java

 3
remotes/origin/CDH-7.3.1.x

  • PatchForAtlasPolicyUpdateForEntityRead_J10064.java

 1
remotes/origin/CDH-7.1.9.1000

  • PatchForTrinoSvcDefUpdate_J10062.java

 1
remotes/origin/CDH-7.1.9.x

  • PatchForUpdatingServiceDefJson_J10058.java

  • PatchForRemovalOfUnusedRangerDbTables_J10059.java

  • PatchForAllServiceDefForPolicyConditionUpdate_J10060.java

 3
remotes/origin/CDH-7.1.8.x

  • PatchForHdfsAddChainedPluginProvider_J10038.java

  • PatchForHdfsRemoveChainedPluginProvider_J10039.java

  • PatchAtlasForClassificationResource_J10047.java

  • PatchForOzoneServiceDefConfigUpdate_J10051.java

  • PatchPreSql_057_ForUpdateToUniqueGUID_J10052.java

  • PatchPreSql_058_ForUpdateToUniqueResoureceSignature_J10053.java

  • PatchForSyncSourceUpdate_J10054.java

  • PatchForSolrSvcDefAndPoliciesUpdate_J10055.java

  • PatchForExternalUserStatusUpdate_J10056.java

  • PatchForOzoneServiceDefUpdate_J10057.java

  • SolrStorageMigrationUtility.java

 11
remotes/origin/CDH-7.1.7.x

  • PatchForHiveServiceDefUpdate_J10048.java

  • PatchForAllServiceDefUpdateForDefaultAuditFilters_J10049.java

  • PatchForDefaultAuidtFilters_J10050.java

 3
remotes/origin/CDH-7.1.6.x

  • PatchForHBaseDefaultPolicyUpdate_J10045.java

  • PatchForMigratingOldRegimePolicyJson_J10046.java

 2
remotes/origin/CDH-7.1.5.x

  • PatchForKafkaServiceDefUpdate_J10033.java

  • PatchForAtlasToAddEntityLabelAndBusinessMetadata_J10034.java

  • PatchForHBaseServiceDefUpdate_J10035.java

  • PatchForXGlobalState_J10036.java

  • PatchForMigratingRangerServiceResource_J10037.java

  • PatchForAtlasToAddTypeRead_J10040.java

  • PatchForOzoneServiceDefUpdate_J10041.java

  • PatchForHiveServiceUpdate_J10042.java

  • PatchForAtlasAdminAudits_J10043.java

  • PatchForOzoneDefaultPoliciesUpdate_J10044.java

  • UpdateUserAndGroupNamesInJson.java

 11
remotes/origin/CDH-7.0.2.x

  • PatchPasswordEncryption_J10001.java

  • PatchMigration_J10002.java

  • PatchPermissionModel_J10003.java

  • PatchForServiceVersionInfo_J10004.java

  • PatchTagModulePermission_J10005.java

  • PatchForHiveServiceDefUpdate_J10006.java

  • PatchForHiveServiceDefUpdate_J10007.java

  • PatchForTagServiceDefUpdate_J10008.java

  • PatchForHiveServiceDefUpdate_J10009.java

  • PatchForHiveServiceDefUpdate_J10010.java

  • PatchForNifiResourceUpdateExclude_J10011.java

  • PatchForAllServiceDefUpdateForResourceSpecificAccesses_J10012.java

  • PatchForAtlasServiceDefUpdate_J10013.java

  • PatchGrantAuditPermissionToKeyRoleUser_J10014.java

  • PatchForKafkaServiceDefUpdate_J10015.java

  • PatchForAtlasResourceAndAccessTypeUpdate_J10016.java

  • PatchForHiveServiceDefUpdate_J10017.java

  • PatchForUpdatingPolicyJson_J10019.java

  • PatchForUpdatingTagsJson_J10020.java

  • PatchForKafkaServiceDefUpdate_J10025.java

  • PatchAssignSecurityZonePersmissionToAdmin_J10026.java

  • PatchForHiveServiceDefUpdate_J10027.java

  • PatchForTagServiceDefUpdate_J10028.java

  • PatchForHiveServiceDefUpdate_J10030.java

  • BaseLoader.java

  • ChangePasswordUtil.java

  • ChangeUserNameUtil.java

  • DbToSolrMigrationUtil.java

  • MetricUtil.java

  • RoleBasedUserSearchUtil.java

 30

Ranger SQL patches

Branch Name SQL Files Number of Files
remotes/origin/cdh_main

  • 077-drop-audit-columns-from-policy-ref-tables.sql

  • 078-create-view-for-audit-admin-metrics.sql

  • 079-create-view-for-policy-export-audit-metrics.sql

 3
remotes/origin/CDH-7.3.2.x

  • 067-create-gds-tables.sql

  • 068-create-view-principal.sql

  • 069-add-gz_json_x_security_zone.sql

  • 070-add-gds-perm.sql

  • 071-alter-x_service_version_info.sql

  • 072-alter-x_access_type_def.sql

  • 073-create-x_trx_log_v2.sql

  • 074-create-index-for-x_trx_log.sql

  • 075-add-validity_schedule-labels-keywords-in-x_gds_dataset.sql

  • 076-create-index-for-x_trx_log_v2.sql

 10
remotes/origin/CDH-7.2.18.x

  • 066-create-sz-role-ref-table.sql

 1
remotes/origin/CDH-7.1.9.x

  • 061-update-schema-for-x-service-def.sql

  • 062-remove-unused-ranger-tables-v1.sql

  • 063-create-audit-metrics-schema.sql

  • 064-create-view-for-audit-metrics-graph.sql

 4
remotes/origin/CDH-7.1.8.x

  • 055-add-syncSource-col-in-x_user-x_portal_user-x_group.sql

  • 056-add-policyguid-in-x_policy_change_log.sql

  • 057-add-unique-constraint-on-x_policy-table-guid-service-column.sql

  • 058-add-unique-constraint-on-x_policy-table-service-resourcesign-column.sql

  • 059-update-x-portal-user-table.sql

  • 060-change-syncsrc-col-datatype-x_user-x_portal_user-x_group.sql

 6
remotes/origin/CDH-7.1.7.2000

  • 065-add-uk-on-x_rms_service_resource-resource_signature.sql

 1
remotes/origin/CDH-7.1.7.x

  • 051-create-index-for-service-resource.sql

  • 052-add-unique-constraint-on-change-logs.sql

  • 054-add-version-in-x_service_version_info.sql

 3
remotes/origin/CDH-7.1.5.x

  • 044-add-role-version-in-serviceVersionInfo.sql

  • 045-add-displayName-col-in-x_service_def_and_x_service.sql

  • 046-insert-statename-in-x-ranger-global-state.sql

  • 047-sortorder-column-size.sql

  • 048-alter-sync-source-info-in-x-ugsync-audit-info.sql

  • 049-create-rms-schema.sql

  • 050-create-index-for-resource-signature.sql

 7
remotes/origin/CDH-7.0.2.x

  • 001-groupsource.sql

  • 002-policyname.sql

  • 003-knoxrepo.sql

  • 004-assetconfigsize.sql

  • 005-xtrxlogcolumnsize.sql

  • 006-createdefaultpublicgroup.sql

  • 007-updateBlankPolicyName.sql

  • 008-removeTrailingSlash.sql

  • 009-updated_schema.sql

  • 010-users-and-groups-visibility.sql

  • 011-auditcolumnssize.sql

  • 012-createusersyncuser.sql

  • 013-permissionmodel.sql

  • 014-createkeyadmin.sql

  • 015-auditlogaggregation.sql

  • 016-updated-schema-for-tag-based-policy.sql

  • 017-add-new-column-to-store-tags.sql

  • 018-createtagsyncuser.sql

  • 019-create-indexes.sql

  • 020-datamask-policy.sql

  • 021-update-tag-for-owner.sql

  • 022-split-service-table.sql

  • 023-add-unique-constraint-on-table-x_user.sql

  • 024-sortorder-column-size.sql

  • 025-create-schema-for-plugin-info.sql

  • 026-add-column-in-x_policy_export_audit.sql

  • 027-sortorder-column-size.sql

  • 028-delete-xgroup-duplicate-references.sql

  • 029-add-unique-constraint-on-table-x_group.sql

  • 030-policy-labels-schema.sql

  • 031-create-schema-for-usersync-audit-info.sql

  • 032-add-options-to-policy-and-tag-for-time-based-processing.sql

  • 033-add-unique-constraint-on-table-x_policy.sql

  • 034-x_data_histContentSize.sql

  • 035-update-schema-for-x-policy.sql

  • 036-denormalize-tag-tables.sql

  • 037-create-security-zone-schema.sql

  • 038-add-policy-change-log-table.sql

  • 039-add-column-version-in-x_policy_export_audit.sql

  • 040-modify-unique-constraint-on-policy-table.sql

  • 041-create-role-schema.sql

  • 042-add-index-on-xdatahist-table.sql

  • 043-add-tag-change-log-table.sql

 43