| Release Notes - Sentry - Version v1.2.0 |
| |
| ** Bug |
| * [SENTRY-15] - log4j.properties file under sentry-tests references the old access package |
| * [SENTRY-1] - use default on HiveServer2 fails with invalid privileges exception |
| * [SENTRY-2] - Code cleanup in various poms |
| * [ACCESS-8] - Log warning if authorization is not used with strong authentication |
| * [ACCESS-49] - Modify test cases to restrict LOAD from specific locations |
| * [ACCESS-140] - malformatted policy is permitted conditionally |
| * [ACCESS-164] - policy file doesn't check non-exist entity mapping |
| * [ACCESS-174] - access only throw first error message in HiveServer2 log, and ignore the rest |
| * [ACCESS-180] - per DB policy file usability issues |
| * [ACCESS-197] - Child authorizeable objects are not inheriting permissions from parent |
| * [ACCESS-201] - Bad error message in HiveAuthzBinding |
| * [ACCESS-203] - Update trunk version to 1.1 and update dependencies |
| * [ACCESS-230] - CREATE TABLE AS works even if user does not have DB-level access |
| * [ACCESS-231] - ALTER TABLE SET TBLPROPERTIES allows updates to tables even when the user doesn't have the right privileges |
| * [ACCESS-232] - The per-db policy fies can't be accessed if they are not in the same file system as the global policy file. |
| * [ACCESS-233] - The URI permission checks should append path separator before checking the parent path |
| * [ACCESS-235] - Format unqualified URI as DFS uri by default |
| |
| |
| ** Improvement |
| * [SENTRY-5] - Normalize the usernames used in the end to end tests |
| * [ACCESS-100] - ResourceAuthzProvider should ensure the subject name is non-null before doing the group lookup |
| * [ACCESS-157] - Access hard codes hive authentication method none |
| * [ACCESS-211] - Add maven profile for compiling access with upstream Apache hadoop/hive |
| * [ACCESS-221] - Restrict the URI access granted from a per-database policy file |
| |
| |
| |
| ** Task |
| * [ACCESS-16] - Implement the test cases in the test plan |
| * [ACCESS-34] - Analyze Path Security |
| * [ACCESS-115] - Format all files using a consistent code style formatter for the project |
| * [ACCESS-122] - Remove context.close() mid-test |
| * [ACCESS-123] - Fix confusing communication mechanism to request if ANY access is exists |
| * [ACCESS-125] - TestUserManagement major issues |
| * [ACCESS-127] - TestSandboxOps Major issues |
| * [ACCESS-130] - TestMovingToProduction major issues |
| * [ACCESS-136] - TestCrossDbOps major issues |
| * [ACCESS-145] - TestMetadataObjectRetrieval major issues |
| * [ACCESS-147] - TestPrivilegeAtTransform major issues |
| * [ACCESS-149] - TestPrivilegesAtDatabaseScope major issues |
| * [ACCESS-152] - TestPrivilegesAtTableScope minor issues |
| * [ACCESS-166] - Policy Engine should do expanded validation of policy file |
| * [ACCESS-194] - Explore options for metastore access restriction |
| * [ACCESS-195] - Support username mapping at access level |
| |
| ** Sub-task |
| * [ACCESS-101] - Implement more test cases regarding subquery |
| * [ACCESS-209] - be able to run e2e test in cluster mode |
| * [ACCESS-225] - Update master branch version to 1.2.0-SNAPSHOT |
