| RANGER-1644 | Change the default Crypt Algo to use stronger cryptographic algo. |
| RANGER-1738 | RangerYarnAuthorizer not compatible with Hadoop-3.0.0 |
| RANGER-1951 | build problems with the saveVersion.py script |
| RANGER-1955 | Wrong quoting in Ranger SQL install scripts |
| RANGER-2112 | Ranger KMS broken with JDK 8 update 171 |
| RANGER-2114 | Internal Exception: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column ‘content’ at row 1 |
| RANGER-2152 | Incorrect debugging information in RangerPluginClassLoader.java |
| RANGER-2155 | Ranger Tagsync fails to Authenticate to Atlas when Tag Source set to AtlasRest in Kerberos environment |
| RANGER-2160 | ‘Email Address’ search is not working properly along with other filter in user listing page,userRoles filters also needs to be improved. |
| RANGER-2165 | Address JPA Cache issue when policies Create, Update and Delete are done via REST API in Apache Ranger admin |
| RANGER-2166 | A ClassNotFound exception is thrown with atlasrest as a tag source |
| RANGER-2180 | Handle token replacement correctly when token is not defined in the request context |
| RANGER-2182 | Handle upgrade scenario since atlas-service def is added with new resources for relationship |
| RANGER-2183 | Use INodeAttribute information to authorize HDFS access |
| RANGER-2186 | Increment service-specific policy and tag versions after update transaction is committed |
| RANGER-2187 | External Group search fails on Ranger UI when installed with postgres |
| RANGER-2189 | Atlas service default policies should allow relationship operations for all |
| RANGER-2193 | Form validation during testconnection should be consistent with service creation/editing |
| RANGER-2195 | TagPolicy not working due to failure in updating tag policy version |
| RANGER-2196 | Ensure that any explicit threads used by Ranger are marked as daemon threads |
| RANGER-2197 | Delegate Admin is not able to create policy |
| RANGER-2201 | Log no ranger audits when entityId value is not null or empty string |
| RANGER-2204 | Ranger Admin‘s admin log event for changing Audit Logging of a policy doesn’t show the actual changes |
| RANGER-2213 | Tomcat Security Vulnerability Alert. The version of the tomcat for ranger should upgrade to 7.0.90. |
| RANGER-2215 | Can't copy and paste multiple paths into Ranger Admin UI for HDFS create policy |
| RANGER-2220 | Admin UI loads slowly because of many small JavaScript files |
| RANGER-2224 | ‘drop temporary function ’ command should be handled by ‘global’ resource and ‘Temorary UDF Admin’ permission. |
| RANGER-2229 | Perform graceful terminate with retries before doing forceful kill for usersync and tagsync |
| RANGER-2234 | Cannot add or update a child row,a foreign key constraint fails when installing ranger-admin |
| RANGER-2235 | Modify the login session detail page as a modal. |
| RANGER-2238 | String comparison should not use ‘==’ in ServiceUtil.java |
| RANGER-2241 | Fix release build scripts to conform to latest Apache release guidelines - Part 2 - Remove sha1 and mds |
| RANGER-2242 | JiSQL utility is failing Oracle UDF |
| RANGER-2244 | Tomcat Security Vulnerability Alert. The version of the tomcat for ranger should upgrade to 7.0.91 or later. |
| RANGER-2245 | Exclude Jetty libraries |
| RANGER-2247 | Ranger Plugin for HDFS throws StringIndexOutOfBounds exception when policy resource is "" |
| RANGER-2248 | Sorting does not work in AbstractPredicateUtil.java |
| RANGER-2250 | Service configs fields are not showing for atlas service form page |
| RANGER-2252 | Permission “Kafka Admin” should not be part of Topic resource in Ranger Kafka resource definition |
| RANGER-2262 | Improvement of export to excel from report listing page for Oracle database. |
| RANGER-2263 | Remove unnecessary explicit dependency for apache commons compress jar in Ranger |
| RANGER-2264 | Kafka default policies for new resources are not showing up in UI when upgrade is done from older version |
| RANGER-2269 | Implement best coding practices for validating user input |
| RANGER-2270 | Restrict tag module access to unprivileged users |
| RANGER-2272 | Ensure that case of resource-definition names and access-type names in Ranger policy is the same as in service-definition after successful validation |
| RANGER-2273 | Allow service admin and delegated admin user to view list of users and groups though they have ‘USER’ role |
| RANGER-2275 | Make db_setup retry delay configurable |
| RANGER-2276 | Email Address should be verified when Add New User in Ranger Admin |
| RANGER-2277 | Kylin repository config missing “Common Name for Certificate” |
| RANGER-2278 | Unable to delete user if he has references in new ref tables. |
| RANGER-2280 | The emptyText of User Sync and Plugin Status should be reasonable |
| RANGER-2282 | The error message for changing password is incorrect in User Profile page. |
| RANGER-2283 | User is getting total count of groups even if he is assigned to one group due to which pagination is breaking |
| RANGER-2284 | Unable to build image using docker |
| RANGER-2288 | Sqoop repository config missing “Common Name for Certificate” |
| RANGER-2289 | Unable to get Audit Admin tab page. |
| RANGER-2292 | Test case fix for RANGER-2276 |
| RANGER-2294 | Front-end and back-end email address regular expression should be the same |
| RANGER-2297 | getContentSummary validation failure |
| RANGER-2298 | Modify JAVA_VERSION_REQUIRED to 1.8 in install.properties |
| RANGER-2299 | Modify the permissions of the kms install.properties file to 700 |
| RANGER-2304 | Need to add property dfs.permissions.ContentSummary.subAccess when enabling Ranger HDFS plugin manually |
| RANGER-2305 | When Audit spooling to local filesystem is enabled, log files of the component have show a wrong error message |
| RANGER-2306 | Knox Plugin doesn't pass X-Forwarded-for remote address to Ranger |
| RANGER-2307 | Native code can segfault or return misleading error messages |
| RANGER-2311 | After the user profile is updated, the page still displays the original information. |
| RANGER-2313 | tagsync fails to authenticate with ranger in kerberized cluster when using ranger-tagsync-update.sh script |
| RANGER-2316 | Incorrect path in Quick Start Guide |
| RANGER-2318 | Incorrect git url on the homepage |
| RANGER-2321 | Docker build fails due to PhantomJS dependency |
| RANGER-2326 | zoneName field is getting added with type “boolean” in Ranger Solr schema |
| RANGER-2327 | Update Ranger db schema to use common sequence name |
| RANGER-2328 | Time-based policies do not work correctly if access time is not set in the authorization request |
| RANGER-2333 | Logs does not get generated for Zone Description field available on Security Zone page. |
| RANGER-2334 | Audits: filter out service audit logs and additional users logs from user audit logs |
| RANGER-2335 | Overlapping of ‘include’ toggle button on policy create/edit page. |
| RANGER-2336 | Ranger HBase plugin should pack guava lib as a dependency. |
| RANGER-2337 | Context-Enrichers need to clean up completely when the policy-engine is destroyed |
| RANGER-2339 | UI changes for User role users should also have access to Security Zone |
| RANGER-2342 | Exclude jackson jaxrs library from ranger-admin packaging |
| RANGER-2343 | Evaluate tag policies in the same security zone as accessed resource |
| RANGER-2344 | Ranger HBase Test failure due to Mini HBase cluster start up issue. |
| RANGER-2347 | Restrict capabilities of security zone administrator and auditor |
| RANGER-2350 | Ranger UI: Clicking on zone edit Breadcrumb redirect to 404 page not found |
| RANGER-2352 | Ranger installation is failing for Oracle and Postgres DB |
| RANGER-2355 | Reports page: policy listing to have column of Zone name |
| RANGER-2356 | External user's email address can be edited |
| RANGER-2359 | Show zone association with tag based service. |
| RANGER-2367 | Hive “show grants” when Ranger is authorizer should show permission details from Ranger |
| RANGER-2371 | Security Zone policies do not work correctly when incremental policy updates are enabled |
| RANGER-2372 | Remove non-existing URL entries from spring config file |
| RANGER-2373 | User creation POST and PUT response not showing groupIdList and groupNameList with expected data |
| RANGER-2375 | RangerAuthContext is not correctly initialized |
| RANGER-2376 | Ranger Plugin ClassLoader Doesn't Restore Thread ClassLoader |
| RANGER-2381 | Failed to refresh policies when servicename contains space |
| RANGER-2383 | Incorrect response when trying to delete user attached to a security zone |
| RANGER-2384 | Get All Zones API is returning response in raw format,proper response object is required. |
| RANGER-2396 | Inconsistency in policy operations in a disabled Ranger service |
| RANGER-2397 | HiveServer2 fails to start with Hive Plugin for Ranger |
| RANGER-2399 | User's listing page hits users API call twice from UI |
| RANGER-2400 | policy name needs to be unique within security zone and service |
| RANGER-2401 | Ranger Secuity Zone needs to be added in audit type filter in admin audit |
| RANGER-2403 | proper error should be thrown when service part of zone being deleted |
| RANGER-2404 | Delegate-admin permission granted by policy needs to be effective only within the zone to which the policy belongs |
| RANGER-2405 | Evaluation of Ranger policies targeted to valid but partial resources |
| RANGER-2406 | rangerusersync open too many session for ldap sync |
| RANGER-2409 | Policy level condition sample matcher initialization issue |
| RANGER-2411 | Restrict Admin role user to create Zone for KMS service |
| RANGER-2412 | Policy Condition Evaluators existing and newly created should work in both policy level and policy item level |
| RANGER-2413 | Python script to update rangertagsync config properties |
| RANGER-2415 | Value of isExcludes flag needs to be considered when matching accessed resource to Ranger policy |
| RANGER-2417 | Set Atlas Entity owner to RangerAccessResource ownerUser attribute for Atlas Ranger Plugin |
| RANGER-2419 | Improve sql script to skip statements when atlas service def is not supported |
| RANGER-2421 | Solr audit fails in Atlas plugin |
| RANGER-2423 | Ranger KnoxSSO authentication in Ranger HA environment |
| RANGER-2430 | Zoneadmin User is able to create policy for those services which is not associated to zone |
| RANGER-2434 | Remove dependency from com.google.common.base.Objects or MoreObjects |
| RANGER-2437 | Update grant/revoke error message to provide more information about the principal type |
| RANGER-2438 | Legacy PublicAPI REST API to get all policies fails |
| RANGER-2439 | Unable to view policy details from access audits when policy has policy condition at policy level |
| RANGER-2444 | Admin logs are not getting generated when “policy level” policy condition is updated |
| RANGER-2445 | Import of Tag based policies for zone |
| RANGER-2449 | if service part of zone is not present then null pointer exception is thrown |
| RANGER-2451 | Atlas plugin is not working when security zone is created for Atlas service in Ranger Admin. |
| RANGER-2453 | Tag data-masking policy should allow only one tag as resource |
| RANGER-2455 | When service created inside a zone landing page that service gets created in unzonned landing page. |
| RANGER-2456 | Upgrade of Ranger Admin to the current version fails in PatchForKafkaServiceDefUpdate_J10025 |
| RANGER-2459 | [E] ranger_core_db_mysql.sql file import failed! |
| RANGER-2463 | Ranger admin authorization audits fails intermittently to fetch from Solr |
| RANGER-2469 | java.lang.IllegalArgumentException: More than one fragment with the name during Ranger start after RANGER-2464 |
| RANGER-2473 | Upgrade of Ranger Admin to the current version fails in PatchForAtlasResourceAndAccessTypeUpdate_J10016 |
| RANGER-2474 | Policy version and details in access audits wrong when deny condition added to policy |
| RANGER-2478 | Exception in thread “main” java.lang.NoClassDefFoundError: com/google/common/base/Preconditions |
| RANGER-2479 | Change test connection preferred SQL statement for Oracle DB Flavor |
| RANGER-2480 | Hive URL Policy doesn't match if recursive flag is on for the url resource |
| RANGER-2485 | Security zone filter is causing Ranger audit access request waiting for longer |
| RANGER-2487 | Resource policy names with a characters that are typically HTML escaped mutate and grow as they are saved. |
| RANGER-2493 | Ranger takes long time to delete a service with many policies |
| RANGER-2500 | Zone Policies not getting imported when ‘updateIfExists=true’ is passed through curl. |
| RANGER-2502 | Presto plugin insert bug |
| RANGER-2509 | Add validation message for Importing non JSON file on import action. |
| RANGER-2511 | default tag based service is getting created for the tag based service |
| RANGER-2513 | Unable to delete user if he has references in new ref tables. |
| RANGER-2514 | Search field validation prompt is inconsistent with field names in audit page |
| RANGER-2516 | Update Ranger default policies to provide entity-read access to public group |
| RANGER-2518 | Allow service creator to delete the service |
| RANGER-2519 | Import policy may fail if a policy exists with same guid in another service |
| RANGER-2520 | Prevent Roles to be saved in Ranger Role Management page when user or groups are not added to the role |