
Release Notes - Sentry - Version 1.6.0

** Sub-task
    * [SENTRY-537] - Refactor AbstractTestWithHiveServer to cut down some test cases runtime
    * [SENTRY-600] - Extend SentryClient by SentryClientInvocationHandler
    * [SENTRY-601] - Create connection pool factory
    * [SENTRY-621] - Add new thrift interface for import/export in sentry
    * [SENTRY-622] - Update SentryService for import/export feature
    * [SENTRY-623] - Create processor to deal with the file format for import/export feature
    * [SENTRY-631] - Run full tests locally: mvn verify to see if it can pass nowadays
    * [SENTRY-644] - Sentry Sqoop binding framework for role-based authorization
    * [SENTRY-645] - Add sqoop authorizable model for sentry authorization
    * [SENTRY-646] - Add Sqoop policy engine  for sentry authorization
    * [SENTRY-656] - Update SentryStore for import/export feature
    * [SENTRY-657] - Update SentryConfigTool for import/export feature
    * [SENTRY-661] - Ensure Sqoop Sentry authorizaiton works with sentry service
    * [SENTRY-681] - Update the versions on trunk after branching
    * [SENTRY-697] - Test parallel cache loading with large metastore
    * [SENTRY-828] - Cleanup the unnecessary ProviderBackend
    * [SENTRY-863] - Create release branch for 1.6.0
    * [SENTRY-864] - Update the version to 1.7.0-incubating-SNAPSHOT on trunk after branch-1.6.0 created
    * [SENTRY-865] - Update changelog.txt, notice.txt, etc... for 1.5.0 release
    * [SENTRY-866] - Update sentry website after 1.6.0 release
    * [SENTRY-867] - Remove SNAPSHOT tag of branch-1.6.0
    * [SENTRY-868] - Create rc for 1.6.0

** Bug
    * [SENTRY-227] - Fix for "Unsupported entity type DUMMYPARTITION"
    * [SENTRY-296] - Sentry Service Client does not allow for connection pooling
    * [SENTRY-453] - Hadoop and hive tars are downloaded even if download-hadoop profile not used.
    * [SENTRY-467] - Fix minor failures in cluster-hadoop profile
    * [SENTRY-508] - Improve runtime of 'Sentry Hive Tests' (currently it is >30m)
    * [SENTRY-546] - Permissions on external tables does not always translate to HDFS acls
    * [SENTRY-596] - The jar files of sentry binary and source code should publish to maven central
    * [SENTRY-605] - For locations using HDFS synchronization, users should not be allowed access to HDFS files if column-level restrictions are present
    * [SENTRY-611] - The SecureCoreAdminHandler.getCollectionFromCoreName will throw null-point exception when Solr running in non-solrCloud mode.
    * [SENTRY-670] - Fix the Sentry build to remove snapshot and non apache dependencies
    * [SENTRY-676] - Address Sentry HA issues in secure cluster
    * [SENTRY-678] - Sentry-Solr Binding may not load group mapping service correctly
    * [SENTRY-683] - HDFS service client should ensure the kerberos ticket validity before new service connection
    * [SENTRY-687] - Handle authorization for 'select <expr>' hive queries
    * [SENTRY-698] - Uncaught OutOfMemoryError
    * [SENTRY-699] - Memory leak when running Sentry w/ HiveServer2
    * [SENTRY-702] - Hive binding should support RELOAD command
    * [SENTRY-703] - Calls to add_partition fail when passed a Partition object with a null location
    * [SENTRY-714] - Support TCompactProtocol for Sentry RPC
    * [SENTRY-717] - Fix the UDF whitelist format for functions row_number and unbase64
    * [SENTRY-721] - HDFS Cascading permissions not applied to child file ACLs if a direct grant exists
    * [SENTRY-736] - Add a new constructor to HadoopGroupMappingService
    * [SENTRY-739] - when user doesn't have admin privileges, show grant throw exception, better improve error message
    * [SENTRY-744] - DB provider client should support grantServerPrivilege() method without action for backward compatibility
    * [SENTRY-746] - After revoke select from view, select fails with a confusing error message
    * [SENTRY-750] - Use the Sqoop Server principal as the requester when removing the Sqoop resource
    * [SENTRY-752] - Sentry service audit log file name format should be consistent
    * [SENTRY-763] - Remove multiple .gitignore files
    * [SENTRY-766] - Fixed the broken builds link on the sentry site web page
    * [SENTRY-770] - When use sentry to configuration hive,to ensure safety of data access.The functions(row_number and unbase64) can't be used.The Problem caused by a sentry bug. I have already found a way to solve the problem,except to modify the sentry source code.
    * [SENTRY-777] - SentryServiceIntegrationBase#after() should be run under client subject
    * [SENTRY-780] - HDFS Plugin should not execute path callbacks for views
    * [SENTRY-788] - Fix mysql and postgres scripts of generalized model
    * [SENTRY-789] - Jenkins should support test branch with special character
    * [SENTRY-790] - Remove MetaStoreClient interface
    * [SENTRY-791] - java.lang.AbstractMethodError when using HDFS sync
    * [SENTRY-792] - Throw underlying exception if SentryService start fails
    * [SENTRY-794] - TestHDFSIntegrationWithHA#testEnd2End fails
    * [SENTRY-796] - Fix log levels in SentryAuthorizationInfo
    * [SENTRY-797] - TestHDFSIntegration#testEndToEnd is flaky
    * [SENTRY-799] - Fix sentry unit test error: TestDbEndToEnd.testBasic: Table t1 already exists
    * [SENTRY-800] - Oracle: first run A1.Scope invalid identifier
    * [SENTRY-801] - Update README: Does not compile with JDK8
    * [SENTRY-802] - SentryService: Log error if you processor cannot be registered.
    * [SENTRY-803] - TestLinkEndToEnd.testUpdateDtestUpdateDeleteLinkeleteLink test failure: SentryAlreadyExistsException: Role: role4
    * [SENTRY-805] - Reclassify CoreAdminHandler Actions
    * [SENTRY-806] - Fix unit test failure: TestMetastoreEndToEnd.testPartionInsert, java.lang.RuntimeException: Cannot make directory: hdfs://localhost:60362/tmp/hive-jenkins/hive_2015-07-09_21-50-34_878_9035087593722312500-1
    * [SENTRY-808] - Change default protocol version to V2
    * [SENTRY-810] - CTAS without location is not verified properly
    * [SENTRY-819] - select on all columns is not same as select on table
    * [SENTRY-822] - OutOfMemory in hive e2e test
    * [SENTRY-823] - Clean up roles properly in TestHDFSIntegration
    * [SENTRY-825] - SecureAdminHandler no longer pulls collection name for create correctly
    * [SENTRY-827] - Server Scope always grants ALL
    * [SENTRY-829] - Fix all sentry hive test failure in TestDbCrossDbOps class: create database/table, grant select on table to role, but drop database then recreate it, privileges are removed.
    * [SENTRY-830] - Enable setMetastoreListener in the tests so that we can debug flaky test failures from local testing enviroment
    * [SENTRY-834] - Fix hive e2e real cluster failures in TestDbConnections, TestDbExportImportPrivileges, TestDbJDBCInterface
    * [SENTRY-836] - Refactor test TestDatabaseProvider.java: make each test case independent from other tests, not assume any external states/data
    * [SENTRY-839] - posexplode() missing from HIVE_UDF_WHITE_LIST
    * [SENTRY-841] - Revoke on SERVER scope breaks Client API, allows any string to be passed in
    * [SENTRY-842] - Fix typos in pom.xml
    * [SENTRY-847] - [column level privilege] if grant column level privilege to user, show columns in table shouldn't require extra table level privilege
    * [SENTRY-850] - Fix dbprovider test failures when run on a real cluster or setMetastoreListener = true, when db/tab gets recreated their associated privileges will be deleted.
    * [SENTRY-856] - [unit test] Sentry unit tests failures when it run at new Jenkins nodes
    * [SENTRY-860] - Fix intermittent test failure for TestPrivilegesAtFunctionScope.testFuncPrivileges1

** Improvement
    * [SENTRY-530] - Add thrift protocol version check
    * [SENTRY-590] - Client factory for generic authorization model
    * [SENTRY-626] - Test case improvement
    * [SENTRY-647] - Add e2e tests for Sqoop Sentry integration
    * [SENTRY-695] - Sentry service should read the hadoop group mapping properties from core-site
    * [SENTRY-696] - Improve Metastoreplugin Cache Initialization time
    * [SENTRY-720] - Patch related files should be excluded from version control
    * [SENTRY-723] - Clean unused methods in HiveAuthzBindingHook
    * [SENTRY-740] - Move the class PolicyFileConstants and KeyValue to provider-common
    * [SENTRY-755] - HDFS access of data files should be disabled for user with privileges only on some columns
    * [SENTRY-767] - SENTRY jenkins support test the patch for branch
    * [SENTRY-774] - *.rej files should be added to rat ignore list
    * [SENTRY-776] - Sentry client should support cache based kerberos ticket for secure zookeeper connection
    * [SENTRY-821] - Add thrift protocol version check for generic model
    * [SENTRY-843] - Add the link of wiki page in README.md
    * [SENTRY-874] - Handle HMS updates correctly while full update is being built

** New Feature
    * [SENTRY-197] - Create tool to dump and load of entire Sentry service
    * [SENTRY-612] - Sqoop2 integration with sentry
    * [SENTRY-778] - CredentialProvider for Sentry DB password
    * [SENTRY-804] - Add Audit Log Support for Solr Sentry Handlers

** Task
    * [SENTRY-684] - Upgrade to Apache Curator 2.7.1
    * [SENTRY-692] - Add schema creation scripts for 1.6.0 version
    * [SENTRY-757] - Add documentation for import/export feature
    * [SENTRY-758] - Add test cases for partition columns with column level privileges
    * [SENTRY-771] - Add documentation for Delegated GRANT and REVOKE
    * [SENTRY-772] - Add documentation for Sentry Webserver Authentication and Authorization
    * [SENTRY-779] - Add documentation for Sentry Client Connection Pool
    * [SENTRY-818] - Add document for “Sqoop2 integration with Sentry”
    * [SENTRY-857] - Apache Sentry 1.6.0 Release

** Test
    * [SENTRY-485] - Add test coverage for auditing in E2E, secure environment
    * [SENTRY-741] - Add a test case for hive query which creates dummy partition
    * [SENTRY-824] - Enable column level privileges e2e tests on real cluster runs