commit 0fdc48f4b9e0c192ecee2d805ae22a94d865f8ae Author: Jenkins Date: Wed Nov 16 09:09:55 2016 -0800 Branching for 5.9.1 on Wed Nov 16 09:08:26 PST 2016 JOB_NAME : 'Cut-Release-Branches' BUILD_NUMBER : '441' CODE_BRANCH : '' OLD_CDH_BRANCH : 'cdh5_5.9.x' Pushed to remote origin git@github.sf.cloudera.com:CDH/sentry.git (push) commit 85b2e2114d45607d0fd5d7e4c054ea0835f02f62 Author: Sravya Tirukkovalur Date: Thu Oct 27 12:21:37 2016 -0700 SENTRY-1313: Database prefix is not honoured when executing grant statement (Sravya Tirukkovalur, Reviewed by: Hao Hao and Alexander Kolbasov) Change-Id: I7c39724cd8b8f89d96499fdaed70fffad75728aa Reviewed-on: http://gerrit.sjc.cloudera.com:8080/16984 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit a568cf5a278f1e960f2d28d848b6a1ef8bb4eec7 Author: Sravya Tirukkovalur Date: Mon Jun 6 14:19:55 2016 -0700 SENTRY-858: Add a test case for - Database prefix is not honoured when executing grant statement ( Rahul Sharma, Reviewed by: Sravya Tirukkovalur) Change-Id: I5ad9dc38c3ace4454ea2e51772824a8693c32656 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/16980 Reviewed-by: Alexander Kolbasov Tested-by: Jenkins User Reviewed-on: http://gerrit.sjc.cloudera.com:8080/16983 Reviewed-by: Sravya Tirukkovalur commit 7b82e01908a1d59ac8ba1a8f5d1223dfd51c0a0b Author: lili Date: Tue Oct 11 07:24:25 2016 -0700 CDH-45819: Disable solr test - post-commit jobs kept failing because of solr test, so here we disable solr test in the 'skipOnlySlowTests' mvn profile, which will be only used in post-commit job. - Solr team is working on the solr test failure. Here is the jira: CDH-45122. We will enable solr test when CDH-45122 is resolved. Change-Id: I26a9723400d705174f4eff7db42c1cbd475e780e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/16491 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur Reviewed-on: http://gerrit.sjc.cloudera.com:8080/16749 Reviewed-by: Sijie Yu commit 7651247e09c42e9707750ce293f333b9331e7f48 Author: Anne Yu Date: Thu Sep 8 14:44:25 2016 -0700 SENTRY-1464: fix Sentry e2e test failure in org.apache.sentry.tests.e2e.dbprovider.TestDbUriPermissions.testAlterPartitionLocationPrivileges; and print out key queries for triaging test failures on jenkins job's outputs. (Anne Yu, reviewed by Hao Hao). Conflicts: sentry-tests/sentry-tests-hive-v2/src/test/java/org/apache/sentry/tests/e2e/hive/TestMetadataPermissions.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/AbstractTestWithStaticConfiguration.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestOperationsPart2.java Change-Id: I74125532501388d82729d9dca4574dd97d7393cb Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15951 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 2b1525b5336fa825aa63b8d59bf280b7199913a2 Author: Ashish Singh Date: Mon Aug 29 10:44:30 2016 -0700 SENTRY-1453: Enable passing sentry client cache configs from kafka conf Change-Id: Iefa37bdc528ac3e6fb175d9c036708b9a35cdab2 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15315 Tested-by: Jenkins User Reviewed-by: Ashish Singh (cherry picked from commit 2c982b30fef36f91846120470d3d89e70421e089) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15539 commit 33eea80d63a4527268ae26ac81aa67dfffd1aaa6 Author: Ashish Singh Date: Tue Aug 23 18:45:52 2016 -0700 SENTRY-1450: Have privilege converter set by Kafka binding Change-Id: I68f0ac0c19920ee96a6506e615b7ed7dc070730c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15165 Reviewed-by: Hao Hao Tested-by: Ashish Singh (cherry picked from commit 65753fa81101a9597307ba01312997bb6819e4a5) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15173 (cherry picked from commit 06bc48f7b9139898792c507e266520a4a00cfa78) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15507 Tested-by: Jenkins User Reviewed-by: Ashish Singh commit 0987fc0ce1ab11d059c57aea3894e98c94a01c58 Author: hahao Date: Mon Aug 29 21:16:21 2016 -0700 CDH-43704: [Unit Test Failure] Fix TestHDFSIntegration.testMissingScheme failure caused by upstream backport. Change-Id: I89f8703a7fc588290fb23b58eb600b0c458939f9 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15368 Reviewed-by: Hao Hao Tested-by: Jenkins User (cherry picked from commit 6c09dcd5d1af2d4f62f1237307f833e3eeba23f1) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15427 commit 03b8931ce28c8e25860443b9acb7b76602b6a37a Author: Anne Yu Date: Fri Aug 26 17:04:19 2016 -0700 CDH-43609: backport and fix conflicts in SENTRY-1429, SENTRY-1454: fix flaky TestHDFSIntegration, refactor this huge test class, improve its cleanUp and setUp for temp HDFS dirs; divide test class into smoke test class and p2 test class; in post commit run, we will only run smoke tests. (Anne Yu and reviewed by Sravya Tirukkovalur and Hao Hao). Conflicts: pom.xml sentry-tests/sentry-tests-hive-v2/src/test/java/org/apache/sentry/tests/e2e/hdfs/TestHDFSIntegration.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hdfs/TestHDFSIntegration.java Change-Id: I250a4630895324509ec7d4c559c3112c37eef637 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15343 Tested-by: Jenkins User Reviewed-by: Hao Hao Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15366 commit 31315e1a65805f7e1095ded87ea6bedc589f27f7 Author: Hrishikesh Gadre Date: Wed Aug 17 13:13:58 2016 -0700 [CDH-34422] Solr HDFS Snapshots sentry integration Added sentry authorization for following collection (and core) admin actions CREATESNAPSHOT DELETESNAPSHOT LISTSNAPSHOTS Change-Id: I329845b2917d2fdead927354a0736cb56a992710 (cherry picked from commit 2a62560863c65e7b178abd76f5d806c6eb14a114) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15286 Reviewed-by: Sravya Tirukkovalur Tested-by: Jenkins User commit 1e2f78c352a809a5060a58a10fc9f5e33a64d97b Author: Anne Yu Date: Tue Aug 23 12:16:41 2016 -0700 SENTRY-1447: When s3 is configured as HDFS defaultFS and Hive Warehouse Dir, need to fix some e2e test failures. For example, TestDbHdfsMaxGroups.java. (Anne Yu, reviewed by Hao Hao). Change-Id: Idd4b8b9b0f418364714b54ec248c21c2b169f35e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/15224 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 147509cc2c7eb2a3d01b7398faa4f2ffc4fe8b6a Author: Jenkins Date: Thu Aug 18 13:41:08 2016 -0700 Updating Maven version to 5.9.1-SNAPSHOT commit 9997a8231b67321c07fa0eaf7710c6164e5a52c6 Author: Jenkins Date: Thu Aug 18 11:54:12 2016 -0700 Branch for CDH5.9.x commit b496eb500620c99db6a32684b874314efd1f1119 Author: Hrishikesh Gadre Date: Sun Jul 24 14:24:07 2016 -0700 [CDH-42556] Sentry/Audit log integration for Solr backup/restore functionality Change-Id: I6e8af664ca7071337eb9e30b8d909a90f45b6f6f Reviewed-on: http://gerrit.sjc.cloudera.com:8080/14422 Tested-by: Jenkins User Reviewed-by: Greg Chanan commit 7a3e0106ada8947a797f9549cc51dcb80c8df57b Author: Ashish Singh Date: Thu Jul 21 10:54:46 2016 -0700 SENTRY-1416: kafka-sentry tool's service name's default is different from KafkaSentryAuthorizer's default service name Change-Id: Ide237bd08c8b64bd6629f0764dce05c6fe68cf4c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/14386 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 99346975c79fd0d364be8fba7f25465c7408bc4d Author: Rahul Sharma Date: Tue Jul 12 13:11:41 2016 -0700 CDH-42200: BACKPORTING SENTRY 1076(ssl for sentry web ui) Change-Id: Ie8aa5d038ebe3aa556043ae8148d30a4f2c249cb added new files for sentry web ui Change-Id: I43f3def10dd407fc50b52e9b6c69a12c42256f75 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/14208 Tested-by: Jenkins User Reviewed-by: Colin McCabe Reviewed-by: Hao Hao commit de55ece81a21ccb06458c5dfd16ed8791923e5cd Author: Rahul Sharma Date: Mon Jul 11 17:14:55 2016 -0700 CDH-42178 - Backport SENTRY-1378 Change-Id: I9b310b930501fff990d1d233db0a913860928bc9 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/14145 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 30dc6a4c3d2491e4878f88a5e89a63af38d211af Author: Anne Yu Date: Mon Jul 11 11:19:54 2016 -0700 CDH-34077: backport SENTRY-1334 [column level privileges] test and add test for CTAS and Create View AS SELECT (cross databases cases) (Ke Jia, reviewed by Anne Yu) Change-Id: I5d76370c10b20fd91831684a04becb477175a71e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/14136 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit f5368212e63377dfddfdf3981ff701a609594388 Author: Sravya Tirukkovalur Date: Thu Jun 30 14:29:05 2016 -0700 SENTRY-1376: Fix alter property case correctly - Deletes ACLS on the table (Sravya Tirukkovalur, Reviewed by: Hao Hao) Change-Id: I6ea6aba2aad688519a8ca60b1ec93ee8a4abcf90 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13920 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit b2bc3e1595c587ad86740e191f21866a4e7ff873 Author: Vadim Spector Date: Thu Jun 23 17:39:59 2016 -0700 SENTRY-1311: Improve usability of URI privileges by supporting mixed use of URIs with and without scheme Change-Id: I65b75b7af228bfbc5c9b410b10e0c4f140bf9684 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13760 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 56b5413969e5e90d29bb1f6f2c9825f5b8be6d14 Author: hahao Date: Tue Jun 21 13:23:50 2016 -0700 SENTRY-1345: ACLS on table folder disappear after insert for unpartitioned tables (Sravya Tirukkovalur, Reviewed by: Hao Hao and Anne Yu) Change-Id: I716000e5e49714169e87c8d3ffcef9ae3da8a796 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13711 Reviewed-by: Hao Hao Tested-by: Jenkins User commit a3532d495bb0f8fa30dbc78d6a2434da3cf5b0d3 Author: Anne Yu Date: Mon Jun 20 17:16:41 2016 -0700 SENTRY-1346: add a test case into hdfs acl e2e suite to test a db.tbl wit out partition, can take more than certain number groups. (Anne Yu, reviewed by Haohao). Change-Id: I492990cdfc830a77062184cb9c05638bee19e305 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13707 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 39f14b805564a7e4d08861a5744fd2c1f14b0390 Author: Colin Ma Date: Thu Jun 2 10:29:41 2016 +0800 SENTRY-1299: Add a test case to verify SentryStore#verifySentryStoreSchema works(Colin Ma, reviewed by Dapeng Sun) Conflicts: sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/persistent/SentryStore.java sentry-provider/sentry-provider-db/src/test/java/org/apache/sentry/provider/db/service/persistent/TestSentryStore.java Change-Id: I779c778e42c5f1d17b76c322cddf3c7023347015 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13669 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 6ecdeb61eca4b780b55fae3ac30d79ea6459a562 Author: Sravya Tirukkovalur Date: Fri Jun 10 10:43:14 2016 -0700 CDH-39672 : SENTRY-1320: truncate table db_name.table_name fails (Vihang Karajgaonkar, Reviewed by: Sravya Tirukkovalur) Change-Id: I32be718e9a25ac30aaedc0f3773853dc9d1cc27e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13560 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 95591bfa36ee53a7aa3fc6d4ac00a99c0efa8e0c Author: Ashish K Singh Date: Fri May 13 10:59:42 2016 +0800 SENTRY-1208: Make HOST implied in privileges if not specified explicitly. (Ashish K Singh, reviewed by Dapeng Sun) Change-Id: I7df01dc7e3209f21107c63979167ec0b7ccc2772 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13507 Tested-by: Jenkins User Reviewed-by: Hao Hao commit e8aadc60f40117528189086be4e527d1ae57676e Author: Sravya Tirukkovalur Date: Thu Jun 2 15:06:00 2016 -0700 CDH-40034: Upgrade libthrift due to security vulnerability and use cdh thrift version (Sravya Tirukkovalur) Change-Id: I2edbc9185e34b5b8447cd54b3fead7f2245b88fb Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13454 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 569f32fd05a13d7680eb4e52fe66b42b58a8fb1d Author: Sravya Tirukkovalur Date: Mon May 2 12:10:18 2016 -0700 SENTRY-1201: Sentry ignores database prefix for MSCK statement (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) Change-Id: Id6ebd465a31a2306a11cb2a878b972b649ecf6c0 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13437 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 2a003760c27295b5926b181577636ae02d095727 Author: Sravya Tirukkovalur Date: Tue May 31 17:35:34 2016 -0700 CDH-39955: Sentry-1231: Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION ''/uri" (Follow up) Change-Id: Iccc71b71cb040737e089e4762339d11dbca309bf Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13422 Tested-by: Jenkins User Reviewed-by: Hao Hao Reviewed-by: Sravya Tirukkovalur commit dfa56b254f4bc5c1444facf19a9100b6746428f7 Author: Sravya Tirukkovalur Date: Fri May 27 15:29:44 2016 -0700 [CDH-39955] Sentry-1231: Sentry doesn't secure index location uri, when do "CREATE INDEX LOCATION ''/uri" Change-Id: I30731e565a75ecad71392f549847f6e2d4281d1f Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13386 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 80d65a06e98de1d53e0de2c04377268e019daf17 Author: hahao Date: Tue May 24 13:14:49 2016 -0700 SENTRY-1292: Reorder DBModelAction EnumSet (Hao Hao, Reviewed by: Lenni Kuff) Change-Id: Id491beab4a37d3112cab9adb2ee32fad92ca3026 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13240 Reviewed-by: Hao Hao Tested-by: Jenkins User commit 64526e54433a6d105f6b6dedbf92332fd2010060 Author: hahao Date: Tue May 24 11:14:30 2016 -0700 SENTRY-1293: Avoid converting string permission to Privilege object (Hao Hao, Reviewed by: Lenni Kuff) Change-Id: I7aba74fc9789b33945bc6326075accbe6c17d900 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13225 Reviewed-by: Hao Hao Tested-by: Jenkins User commit bbdb680ce4db321cdb9fe141931cf4c4008afdf9 Author: Anne Yu Date: Fri May 20 16:00:50 2016 -0700 SENTRY-1230: Add filesystem tests to test Sentry with user data storage on S3. The tests can also be run on other types of fileSystems (ms azure, hdfs). Just ensure pass correct parameters. (Anne Yu, reviewed by Haohao) For example, -Dsentry.e2etest.DFSType=S3DFS -Dsentry.e2etest.storage.uri=s3a://sentry-s3 -Dfs.s3a.access.key=a -Dfs.s3a.secret.key=s export HIVE_CONF_DIR=/etc/hive/conf/hite-site.xml Conflicts: sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/AbstractTestWithStaticConfiguration.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/fs/DFS.java Change-Id: I3e81a48de7351df9b8beb4185ae338775b16189f Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13209 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit cbc14a41ca47f3eabafe7083bf2834aa6a6e93ea Author: Sravya Tirukkovalur Date: Fri May 20 14:24:14 2016 -0700 SENTRY-1265: Sentry service should not require a TGT as it is not talking to other kerberos services as a client ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff, Hao Hao) Change-Id: Ia3e3bda0f7131da89d93a7729dc814aec0b8852d Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13177 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 49f97ecfa5fa8dc067825beb5734b855f0d4691b Author: Gregory Chanan Date: Wed May 18 16:34:18 2016 -0700 SENTRY-1269: Converter vs Convertor is inconsistent (Gregory Chanan, Reviewed By: Sravya Tirukkovalur) Change-Id: I17436d6af584d1b5c88429c1bf0f9ac594b49f24 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13137 Reviewed-by: Sravya Tirukkovalur Tested-by: Jenkins User commit 945988164840cccaa8aa7786965558d8f779a576 Author: hahao Date: Mon May 16 19:03:35 2016 -0700 SENTRY-1252: grantServerPrivilege and revokeServerPrivilege should treat "*" and "ALL" as synonyms when action is not explicitly specified (Hao Hao, Reviewed by: Anne Yu) Change-Id: I62e54dbb793d32a07684f748be88022f21faccde Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13044 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 13a2a417be971c25a7089891fdde69cbd2cc6109 Author: Colin Ma Date: Fri Mar 11 15:27:55 2016 +0800 SENTRY-1119: Allow data engines to specify the ActionFactory from configuration(Bhooshan Mogal via Colin Ma, reviewed by Colin Ma, Sravya Tirukkovalur) Change-Id: I0815faccb951255cbc648c28196e8bfdcaab4bbd Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12909 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 9a5183487bed5454a19b454e12e0fc061ef9f56f Author: Ashish Singh Date: Sun May 15 10:33:01 2016 -0700 SENTRY-1229: Add caching to SentryGenericProviderBackend Change-Id: I9c55c4a81c928cc144fdae66ef99adc2771a74d1 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13018 Tested-by: Jenkins User Reviewed-by: Greg Chanan commit 045c20b36628c1d7f4d1718598e0cbb7f1abaefc Author: Gregory Chanan Date: Wed May 11 22:42:04 2016 -0700 CDH-40299: Change sentry generic audit format to use navigator schema Change-Id: I61a7fb4b50f9575b78230fc36818ea9e3b0b8185 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12992 Tested-by: Jenkins User Reviewed-by: Greg Chanan commit 23256a15e130557035ca891fd58bdc3e584a7ebe Author: Gregory Chanan Date: Tue May 17 14:48:56 2016 -0700 SENTRY-1266: Add ConfigTool tests to skipSlowAndNotThreadSafeTests blacklist Change-Id: I890f6f433244e68dfcabef58bf7ac77dcbce2b60 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/13064 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 2d7f0760539a5cd4d05b0bd40a2f10ea7e4b6d12 Author: Gregory Chanan Date: Wed May 4 19:09:09 2016 -0700 CDH-40179: Backport SENTRY-1233: Logging improvements to SentryConfigToolSolr Conflict due to ProviderConstants vs SentryConstants location Conflicts: sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/generic/tools/SentryConfigToolSolr.java Change-Id: I474a5f160fcfdacd2076ab28e916bb829f8244cf Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12935 Reviewed-by: Vamsee Yarlagadda Tested-by: Jenkins User commit 667c670c27c60dadb36f6792c35007c30dd42dc7 Author: Gregory Chanan Date: Mon May 2 14:37:33 2016 -0700 SENTRY-1228: SimpleFileProviderBackend error message missing spaces (Gregory Chanan, Reviewed by: Vamsee Yarlagadda) Change-Id: I87a1d13322f873b3ab2960bc77a6942c062fa326 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12791 Tested-by: Jenkins User Reviewed-by: Vamsee Yarlagadda commit 577a5ae5424abd2272a86b79faa58d863a418953 Author: Ashish Singh Date: Wed May 11 17:28:36 2016 -0700 SENTRY-1253: SentryShellKafka is incorrectly setting component as KAFKA Change-Id: Ia77302823f5d6e66b43994149aa0e099d8dcec60 commit d4348e084e8d601c3191d9f405fede9fba40e36d Author: Jenkins Date: Mon May 16 14:01:05 2016 -0700 Update to 5.9.0-SNAPSHOT on Mon May 16 14:00:09 PDT 2016 JOB_NAME : 'Cut-Release-Branches' BUILD_NUMBER : '333' CODE_BRANCH : '' OLD_CDH_BRANCH : 'cdh5' Pushed to remote origin git@github.sf.cloudera.com:CDH/sentry.git (push) commit 58faf7d9563a0a810cd71b54e5d8eebb6f77bdc3 Author: Colin Ma Date: Fri Apr 29 09:55:23 2016 +0800 SENTRY-1214: Make Kafka resources/ Kafka Model case sensitive(Ashish K Singh via Colin Ma) Change-Id: I196a4c85ccd98dcfe695b3cc128692c33590ac1e commit 4bfe0be4d94b268961e4a2fa12e99df8efe1197f Author: Colin Ma Date: Tue Apr 26 09:51:19 2016 +0800 SENTRY-1215: Sentry's db provider makes privileges case insensitive.(Ashish K Singh via Colin Ma) commit dfd3400ebe2d1882c27f9aef5361e5731b473809 Author: Ashish K Singh Date: Tue May 3 16:08:24 2016 +0800 SENTRY-1070: Rename kafka.superusers -> super.users based on kafka docs (Ashish K Singh via Dapeng Sun) commit a85bc7120c94a9d72748969e59d7db93803f8341 Author: hahao Date: Fri Apr 15 17:35:19 2016 -0700 SENTRY-1188: Fixes to get kerberos auth work. (Ashish K Singh, Reviewed by: Hao Hao) commit cd9bfd62b2f0b959506bce55ce4ca026ccca6751 Author: hahao Date: Fri Apr 15 17:30:31 2016 -0700 SENTRY-1162: Add shell for Sentry Kafka integration (Ashish K Singh, Reviewed by:Hao Hao) Change-Id: Ideffc8faabded070c4b5b45c8a7cd9a2c0c6e750 commit 5673ab670b711307335b145667e9dac16723d4ab Author: hahao Date: Thu May 5 13:26:54 2016 -0700 SENTRY-1234: JDO exception for list_sentry_privileges_by_authorizable (Hao Hao, Reviewed by: Anne Yu) Change-Id: Ifb1d9810577bf687ba83be8d0807aee64550742a Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12864 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 12f8ccd2d22220a9890c16e1c15fa3eb7d62203e Author: Anne Yu Date: Thu Apr 21 11:29:37 2016 -0700 SENTRY-583: Add boundary condition test coverage to HDFS synchronization test suite around max #of groups. (Anne Yu, reviewed by Haohao) Conflicts: sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/AbstractTestWithStaticConfiguration.java Change-Id: I88bf7711c6a675112f287ae98aacd5c2c1b53d17 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12822 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 2f60810475c01bc5b328ee026ae62125f36b1fd4 Author: Anne Yu Date: Tue Apr 26 14:21:58 2016 -0700 CDH-39637: testFuncPrivileges1 takes more than 180s to finish so keep failing the test suites. Will fix this one then enable it. Change-Id: I9605a7a05c8c831c5b8690ee859f6317b3d2bfa1 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12706 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 853680e46f79fd34eb4e5ded983cc57c3e7dbebc Author: Colin Ma Date: Fri Apr 22 15:14:41 2016 +0800 SENTRY-1190: IMPORT TABLE silently fails if Sentry is enabled(Reuben Kuhnert via Colin Ma) Change-Id: I598e1690302edec44e4872441f030e74a4fd18d6 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12649 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 49da665025290986c9ae9e2f56633f6650440f90 Author: Anne Yu Date: Tue Apr 26 11:49:54 2016 -0700 CDH-39637: still get time out issues in the sentry hive e2e tests, disabled duplicate e2e.dbprovider tests from post-commit job since e2e.hive tests are the same set of tests. Change-Id: I3602010e5e4e1667dc0eeb0c350b8ed249ca71d5 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12703 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 57c7f1960343bab158252cf97460b201d1f0be40 Author: Anne Yu Date: Tue Apr 26 00:46:53 2016 -0700 CDH-39637: since post commit job includes all tests, need to fix all the test failures and not stabilized hive e2e tests. Fixed backport failures from SENTRY-1216. Change-Id: I54d0b84e80455cca8eeb83ac449075c6115f692d Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12683 Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 2ec65fed0229c5eeba49febcf6c7923eca77257f Author: Anne Yu Date: Mon Apr 25 15:04:09 2016 -0700 CDH-39637: SENTRY-1216: disable sentry ha tests for now; add time out for each test class/method; fix trainsient junit time out issue. (Anne Yu, reviewed by HaoHao). Conflicts: sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/dbprovider/TestDbConnections.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hdfs/TestHDFSIntegration.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hdfs/TestHDFSIntegrationWithHA.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/AbstractTestWithStaticConfiguration.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestOperationsPart2.java sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestPrivilegesAtTableScopePart1.java Change-Id: If0991016828bb13c031df12f45c8ba87a62d4c8f Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12679 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 89d556e6a9a3a3c21abcfe04f993a698a7c9aaf2 Author: hahao Date: Mon Apr 25 21:12:57 2016 -0700 SENTRY-1217: NPE for list_sentry_privileges_by_authorizable when activeRoleSet is not set (Hao Hao, Reviewed by: Lenni Kuff) Change-Id: I8a59320d737209234fe6105a7ba734fd1df45566 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12680 Reviewed-by: Hao Hao Tested-by: Jenkins User commit 8096dd223f1cc1986ab0fcc685cbbb5677e7219a Author: hahao Date: Mon Apr 25 14:21:16 2016 -0700 CDH-39652: [unit test] fix TestHDFSIntegration.testURIsWithoutSchemeandAuthority for post commit failure Change-Id: I4363c58a3de1447732a3ce816a689066504614fb Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12675 Reviewed-by: Sijie Yu Tested-by: Sijie Yu Tested-by: Jenkins User commit 056de6f346def9c0dd4224eff06a1c31ecd34123 Author: Gregory Chanan Date: Thu Apr 21 17:54:48 2016 -0700 SENTRY-1212: Small authorization and compatibility checking bugs in Sentry conversion tool Change-Id: Ifabe170ccf96c1508fb1751947ebbd2d34d44dc0 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12625 Tested-by: Jenkins User Reviewed-by: Vamsee Yarlagadda commit a66c43fb4ed5c447dacb170cf75dbd5f7a21f49b Author: hahao Date: Sun Apr 24 15:47:58 2016 -0700 SENTRY-1153: Ensure AccessURI work with S3 (Hao Hao, Reviewed by: Sravya Tirukkovalur) Change-Id: Id4e30028abc9c2189c2d8034d8c38685ed658f9b Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12642 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 4eab5c7b659d0d176a23d1f7bf8b27adde05368e Author: Sravya Tirukkovalur Date: Mon Feb 22 13:14:26 2016 -0800 SENTRY-1035: Generic service does not handle group name casing correctly (Sravya Tirukkovalur, Reviewed by: Hao Hao and Lenni Kuff) Change-Id: I4479b18676b6e8f5ac044a7e74927092db36a9a8 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11241 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 9bea0d4ff469f8fe17fcc303e80b1b4297623414 Author: hahao Date: Fri Apr 22 21:47:41 2016 -0700 SENTRY-1175: Improve usability of URI privileges when granting URIs (Hao Hao, Reviewed by: Sravya Tirukkovalur) Change-Id: I9f6f62b999afdc9d2e734b61065a1bf44d710bf1 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12634 Tested-by: Jenkins User Reviewed-by: Hao Hao commit e47a0f535daf7e95a25678c3a7d9d89c3f46c958 Author: hahao Date: Fri Apr 22 23:41:49 2016 -0700 CDH-39342: [Unit tests] Some TestHDFSIntegrationWithHA tests fail on CDH5.8 Change-Id: Iff513f8532600eedf6f20a0f875947d85092c885 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12631 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit ce74da0eb357ebbab7fdfa7eb10166f8c23589ba Author: lili Date: Tue Mar 15 17:24:33 2016 -0700 Backport SENTRY-922: INSERT OVERWRITE DIRECTORY permission not working correctly Change-Id: Ice0ef1e38dedaac0745c792b1d12484f319b5a2c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11767 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu Reviewed-by: Sravya Tirukkovalur Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11891 Reviewed-by: Hao Hao commit 714b5d54baa0dab4d417c56094dac8b81fad4218 Author: Anne Yu Date: Mon Apr 18 19:36:39 2016 -0700 CDH-38257: add full tests back into post-commit job. If any failures, will notify through email. Change-Id: Ibc7c5f7c77eba87255f87b08625393dc2356e06c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12535 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 02e10ba5dd69f63a985d20b9a756925459da7c29 Author: Anne Yu Date: Thu Apr 21 17:30:19 2016 -0700 CDH-39068: fix [Unit Test Failure] CDH5.8.0 - TestAuthorize.testProduceConsumeCycle by adding missing resources files. Change-Id: Ie437a021eda25236574068600e2c5ac8904b102c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12597 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 17e2590a9c49409fbc02db666c60a9c5127fee5d Author: Gregory Chanan Date: Tue Apr 5 18:18:27 2016 -0700 CDH-35554: Backport SENTRY-480: Create import tool that will load policy file about Solr into the DB store (Gregory Chanan, guoquanshen, reviewed by Vamsee Yarlagadda) Change-Id: Ia8fcef6e4cba60abb5c43904b0a6c9036d2cfe31 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12441 Tested-by: Jenkins User Reviewed-by: Vamsee Yarlagadda commit 74ba3e93898d19a5d2358a5adad0ab69fec117a3 Author: Anne Yu Date: Fri Apr 15 11:00:13 2016 -0700 CDH-39344: Fix unit test surefire version to inherit from cdh pom. Change-Id: I89ec8c7df2d1cfef35d98c91219ee7008c783648 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12476 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 93072d7c55cef7d7bf267e9bb66cd177aaa94ba4 Author: Anne Yu Date: Wed Apr 13 14:24:19 2016 -0700 CDH-38257: backport SENTRY-1108: Improve surefire execution to run tests concurrently. Could be used a test run profile for pre-commit job. (Anne Yu, reviewed by HaoHao) and integrate test run into pre-commit job. Change-Id: I561e7e324e3797c25ab26ddd22b35945bfa7837c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12433 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 3b475cd968ed17c001d39e677e809196781f988c Author: Sravya Tirukkovalur Date: Wed Apr 6 12:06:46 2016 -0700 SENTRY-1184: Clean up HMSPaths.renameAuthzObject ( Sravya Tirukkovalur, Reviewed by: Hao Hao) Change-Id: Ic0236cd6afa9cd169645683e897749c4df307fe7 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12417 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 36197e646d03d2f8c67a9b917357fbc98d61bd1e Author: hahao Date: Mon Apr 4 15:18:33 2016 -0700 SENTRY-1169: MetastorePlugin#renameAuthzObject log message prints oldpathname as newpathname (Sravya Tirukkovalur, Reviewed by: Hao Hao) Change-Id: Ifabdd2387774a277940c8d8598fb006298d57415 (cherry picked from commit fd047665bc7b92c282ac2d569ec52d763d6d00ff) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12400 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit bf86e55f2e5390fc41a46846789e24e59abf7295 Author: Anne Yu Date: Tue Mar 29 16:29:50 2016 -0700 SENTRY-1164: fix testCaseSensitivity test failure on a real cluster and also a minor improvements to testConcurrentClients to run locally. (Anne Yu, reviewed by Haohao). Conflicts: sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/AbstractTestWithStaticConfiguration.java Change-Id: I7cda4dc9d3084e80059189e566d52b03feee8503 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/12259 Tested-by: Jenkins User Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit c32989d6174cc5184fadc32fa2ab956febc8c991 Author: Sun Dapeng Date: Tue Mar 22 18:40:15 2016 +0800 SENTRY-1157: Fix Unit Tests TestAclsCrud&TestAuthorize failed (Dapeng Sun, reviewed by Colin Ma) commit ce1194ee905f19a40bdfe33a2791661b33f1ab6c Author: hahao Date: Wed Mar 9 23:24:15 2016 -0800 SENTRY-1014: Add end-to-end tests for Kafka (Ashish K Singh, Reviewed by: Hao Hao, Anne Yu and Dapeng Sun) Change-Id: If08cdd4f84813d5b64b79b15a5619a16ad2ed7f0 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11946 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 7bcceff6dfc18e67f4f8a5ecd8b00d30ff45f1b8 Author: hahao Date: Sat Mar 5 15:42:45 2016 -0800 SENTRY-1057: Add implementations for acls' CRUD (Ashish K Singh, reviewed by: Dapeng Sun and Hao Hao) Change-Id: Id652c82b4a0518295fd32a6a10121799dcaa6baa Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11945 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit fefc68815c1e1c370c40ff58813652834967a0e3 Author: hahao Date: Mon Mar 7 13:51:03 2016 -0800 SENTRY-1113: Fix test failures due to missing files. Change-Id: Ib22222f41e6433cd1531ead43bac7ba2e68adc62 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11939 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 9e10e412c8af4bdb6349b1de270a1dbd8ba43e89 Author: hahao Date: Wed Mar 2 10:55:05 2016 -0800 SENTRY-1030: Restrict Kafka Cluster authorizable to only have "kafka-cluster" as authorizable's name. (Ashish K Singh, reviewed by: Dapeng Sun and Hao Hao) Change-Id: I0be60422a85ba783a825a71cd677820dbbc388fa Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11936 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit b1e173cf5cad0d54cffd8f4343d1c0932c126ddf Author: hahao Date: Wed Mar 2 10:21:13 2016 -0800 SENTRY-1098: Make Kafka dependency as provided (Ashish K Singh, reviewed by: Dapeng Sun and Hao Hao) Change-Id: I64c3d4178a71037de860a61de32db8380445666b Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11935 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 248ae74676c5e901d8f215a19579184d6ea81948 Author: hahao Date: Wed Mar 2 10:44:28 2016 -0800 SENTRY-1056: Get service name from Kafka's server properties. (Ashish K Singh, reviewed by: Dapeng Sun and Hao Hao) Change-Id: Ibb0abb9c01d50c05dc178e31d08295c0b3efb9b1 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11934 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit f38c18e06ecf3ea4946e89512b76593ad494f352 Author: Anne Yu Date: Tue Feb 16 15:02:55 2016 -0800 SENTRY-1029: Address review comments for Kafka model that came after patch got committed. (Ashish K Singh, reviewed by Hao Hao, via Anne Yu) Change-Id: I4b87bb646a580de7f55289e7d92e6623609c3c62 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11933 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit e6d83d027acaf93a0bbedf5eb3dde72407a155ed Author: Anne Yu Date: Tue Feb 9 16:59:58 2016 -0800 SENTRY-1011: Add Kafka binding (Ashish K Singh, reviewed by HaoHao and Dapeng Sun, via Anne Yu) Change-Id: I535475407b990d126483b3aaa36fe55426234672 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11943 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 3eeabf8b89263125419917d363a9ff0095d11f0d Author: Sun Dapeng Date: Mon Feb 1 09:19:21 2016 +0800 SENTRY-1013: Add policy engine for Kafka (Ashish K Singh via Dapeng Sun) Change-Id: I157bd09d6c053866e2c655383eeedee0fbc8fd50 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11931 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 6aa38b8bd098adffcabdd162074b0cf0b60fefb4 Author: Sun Dapeng Date: Tue Jan 26 09:11:07 2016 +0800 SENTRY-1012: Add core model for Kafka (Ashish K Singh via Dapeng Sun) Change-Id: I92c8612c4b0e4f6cd359ddabe1ac6717ba4e218a Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11930 Tested-by: Jenkins User Reviewed-by: Sravya Tirukkovalur commit 78ddb9481d3725915d06d017815f98622c036c48 Author: Gregory Chanan Date: Tue Mar 8 15:47:15 2016 -0800 SENTRY-1122: Allow Solr Audit Log to Read Impersonator Info (Gregory Chanan, Reviewed by: Vamsee Yarlagadda) Trivial conflict due to lack SENTRY-1021: Add PMD to Sentry tests Conflicts: sentry-solr/solr-sentry-handlers/src/test/java/org/apache/solr/sentry/SentryTestBase.java Change-Id: Ia0ec61eef5787a588784eac4f74f29ff1cfb9684 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11662 Tested-by: Jenkins User Reviewed-by: Hao Hao commit 133f2f5bd3e870d13369233eca3956c852c98ae1 Author: lili Date: Fri Mar 11 15:23:56 2016 -0800 CDH-38268: Backport SENTRY-1112 Change default value of "sentry.hive.server" to empty string Change-Id: I6776ea775f652d3708ae174ffd1c87aa0125c5e4 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11684 Reviewed-by: Hao Hao Tested-by: Jenkins User Reviewed-by: Li Li commit c7795aff357a95d92bd6833f1644a4d716d36c4e Author: Anne Yu Date: Tue Mar 1 18:17:44 2016 -0800 CDH-37908: backport SENTRY-1099 JDK8 autoboxing compilation failure for SecureRealTimeGetComponent.java (Colm O hEigeartaigh, via Anne Yu) Change-Id: I8a42dbf546b3e226c13bc5970641366ed721a2f3 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11545 Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit d71b18519579216e6d823074abe22b1587b0af77 Author: Gregory Chanan Date: Mon Feb 29 16:28:28 2016 -0800 CDH-37849: Update unit tests to account for CDH-36881: Disable automatic permission revoke Change-Id: I329851d3f97d9cdb9da679d9052c8bda4030895b Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11505 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit c94786c99b227e8d3f5386602c927c9af80685e3 Author: Gregory Chanan Date: Mon Feb 29 16:16:53 2016 -0800 CDH-37376: [Solr Unit Test Failure] Fix TestSecureAnalysisHandlers, SecureAdminHandlersTest, SecureInfoHandlerTest, TestSolrAdminOperations Change-Id: I5c9f83be6aff43c4fa2b8593a6328ce02e78c267 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11504 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit aaea51bf8f06cd92ee1848a23f80228051c5b34d Author: Sravya Tirukkovalur Date: Wed Feb 24 15:32:31 2016 -0800 SENTRY-1095: Insert into requires URI privilege on partition location under table. (Sravya Tirukkovalur, Reviewed by: Hao Hao) Change-Id: Iddd43e74cadf2badcd3ff3b0c0345a5d8e55eb06 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11372 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 095ed0cc884030d6549a6125ea4dc0ae3d3b58bc Author: Anne Yu Date: Mon Feb 22 17:22:48 2016 -0800 CDH-37444: backport SENTRY-1096 Fix TestDbOperations#testCaseSensitivity failure on a real cluster. (Anne Yu, reviewed by Hao Hao). Change-Id: I3a1c5d9176b4acb707cb6215c18eb479285b25e1 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11375 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit d01adc25782ba00e05b1c213c226dbeebad015d7 Author: hahao Date: Tue Feb 23 13:45:27 2016 -0800 CDH-37504: [Unit Test Failure] TestHDFSIntegration.testMissingScheme. Change-Id: I4a4c818ce3e016a03a665d96e657c61cf12019d9 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11312 Tested-by: jenkins Reviewed-by: Lenni Kuff (cherry picked from commit 9e7d0968f4c819ae5737bbf46f1f32007920de4a) (cherry picked from commit 0c1010c9cab6fb926f6d2aafc9c15eb207581d64) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11351 Reviewed-by: Hao Hao commit 492275ee9a66c9cc1557fca5b17b65219db9091b Author: Gregory Chanan Date: Thu Feb 18 16:20:52 2016 -0800 SENTRY-989: RealTimeGet with explicit ids can bypass document level authorization (Gregory Chanan, reviewed by Hao Hao) Change-Id: Idcb2bdea8f4bb5e5b78cf41aa9ff0505a3de4a6a Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11252 Tested-by: jenkins Reviewed-by: Hao Hao commit 2ab0387b6ecc48ae252728636fe56e8209668f3c Author: Anne Yu Date: Wed Feb 17 13:10:51 2016 -0800 SENTRY-1066: fix Sentry oracle upgrade script failed with ORA-0955 duplicate name issue by drop implicit index explicitly. (Anne Yu, reviewed by Lenni Kuff and Colin Ma) Change-Id: I1ebfda4a427851eac7a222f57db155257e90ada1 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11246 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 4a1b9454228543982108e0ddafb9b493e2a799c4 Author: Gregory Chanan Date: Tue Feb 16 17:38:45 2016 -0800 SENTRY-1055: Sentry service solr constants refer to clusters rather than services (Gregory Chanan, reviewed by Hao Hao) Change-Id: I74b1d855425f09a756079b83b205dbf2fc7a0ed6 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11044 Tested-by: jenkins Reviewed-by: Hao Hao commit 809198c04b68ac194dbe5d8a2f912b67066297b3 Author: hahao Date: Wed Feb 17 17:19:23 2016 -0800 CDH-37345: [Unit Test Failure] CDH5.7.0 - org.apache.sentry.tests.e2e.hive.TestOperations.testCaseSensitivity. Change-Id: I97cb08b7ad3673a7b0734dc78239ef478e9e6845 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11106 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur (cherry picked from commit 9acf783b4f7a11a8e16accaf23fae4f696a067ed) (cherry picked from commit 7e6ddd60693142aecbf7390df83a4d9c2ab42a98) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11142 Reviewed-by: Hao Hao commit 23cd0dc8d6784a47d4cec1cffa882100596ea343 Author: hahao Date: Thu Feb 11 18:21:50 2016 -0800 CDH-35712: Fix [Null Dereference] in [workspace/foritfy-sentry-02/sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/SentryHiveAuthorizationTaskFactoryImpl.java] Change-Id: I4870de3e69bb697606e3a363d17f868d2ebc31cd Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10939 Tested-by: jenkins Reviewed-by: Lenni Kuff commit 2a58f388438c0a41c12f8479497e42e1bcf92974 Author: Sravya Tirukkovalur Date: Fri Feb 12 17:41:35 2016 -0800 SENTRY-1064: Fix TestDbOperations#testCaseSensitivity ( Anne Yu, Reviewed by: Sravya Tirukkovalur) Change-Id: Iaf20b21494de63f636d9e5cf32e686b93b775181 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/11034 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit ff649f224296cdf137a917ab71c9500489db29c3 Author: Jenkins Date: Fri Feb 12 20:27:44 2016 -0800 Updating Maven version to 5.8.0-SNAPSHOT commit e065a3d40d4f68ee6d7ea7e197f28dc540b8ff83 Author: Sravya Tirukkovalur Date: Wed Feb 10 16:00:43 2016 -0800 SENTRY-1054: Updated Apache Shiro dependency ( Hao Hao, Reviewed by: Lenni Kuff) Change-Id: I4971191f73e7c2b25bd53aa784cc43f8d2b4b756 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10916 Reviewed-by: Hao Hao Tested-by: jenkins commit 111c651f73f21a4ecf3aa2b1eb43f7af5dedc816 Author: Anne Yu Date: Wed Feb 10 16:37:59 2016 -0800 SENTRY-1060: Improve the SentryAuthFilter error message when authentication failure (Hao Hao via Anne Yu) Change-Id: I55c308896944b01fd473927cf05418beccbfb611 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10915 Tested-by: jenkins Reviewed-by: Hao Hao commit 7dc62675e32805c984606d5feab963ab36e77f65 Author: Sravya Tirukkovalur Date: Wed Feb 10 16:04:36 2016 -0800 SENTRY-993: list_sentry_privileges_by_authorizable() gone in API v2 ( Hao Hao, Reviewed by: Colin Ma and Lenni Kuff) Change-Id: If47467956f59959d41ff6a17a068baac7bc8a3c6 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10914 Reviewed-by: Sravya Tirukkovalur Tested-by: jenkins commit 3aac0828358d44666d569866e9e469b2d728aa3f Author: Sravya Tirukkovalur Date: Wed Feb 10 15:33:23 2016 -0800 Revert "SENTRY-832: Clean dependences of sentry-provider-db (Dapeng Sun, reviewed by Colin Ma)" This reverts commit fc400e2fc620d0791570f9279b8959ec11d6905a. Change-Id: I082402e43f997d33059ad40c394fdb1ab9b2edd8 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10912 Reviewed-by: Hao Hao Reviewed-by: Sravya Tirukkovalur Tested-by: jenkins commit 762e7f735e9285428f74618ebba7057c82522ab1 Author: Anne Yu Date: Tue Feb 9 11:25:07 2016 -0800 CDH-30883: backport SENTRY-1050 Improve clearAll method to avoid throwing exceptions because can't delete objects managed by external processes. (Anne Yu via Hao Hao) Change-Id: I57e3ea5968c187f43d7a4886ecd3875b2dfa1745 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10857 Tested-by: jenkins Reviewed-by: Hao Hao commit 97a65578b3070f3c85c5acbd03857dff01430070 Author: Gregory Chanan Date: Thu Feb 4 16:23:50 2016 -0800 SENTRY-1052: Sentry shell should use kerberos requestor and give better error messages for kerberos failures Conflict due to not including hive shell. Conflicts: sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/tools/SentryShellHive.java Change-Id: I624defb009719b1a03b8a6c90553dd09b3f3be95 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10816 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit c8b58a3dfaa4fb8ed36a46e33119e023c1552fc6 Author: Sravya Tirukkovalur Date: Mon Feb 1 19:16:30 2016 -0800 SENTRY-1044: Tables with non-hdfs locations breaks HMS startup ( Harsh J, Reviewed by: Sravya Tirukkovalur) Change-Id: I56233e434466b2c03e3a759cafda95c9d46a2e44 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10809 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 13719edeea6f2e9a30be9b3dd335b661dc18235d Author: Lenni Kuff Date: Fri Dec 18 17:32:47 2015 -0800 SENTRY-968: Uri check needs to be case sensitive (Li Li via Lenni Kuff) Change-Id: I60c0dddb0f0e47f7ea29be1e59ebcd506a486014 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10802 Tested-by: jenkins Reviewed-by: Hao Hao commit fc400e2fc620d0791570f9279b8959ec11d6905a Author: Sun Dapeng Date: Thu Dec 31 09:03:20 2015 +0800 SENTRY-832: Clean dependences of sentry-provider-db (Dapeng Sun, reviewed by Colin Ma) Change-Id: I195f18c7f0c1d6c83e66320c3aae878fa7ed5507 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10803 Tested-by: jenkins Reviewed-by: Hao Hao commit 87236f87fc62324522b180452c4378132b201adc Author: Lenni Kuff Date: Wed Dec 9 00:35:13 2015 -0800 CDH-36958: backport SENTRY-972 Include sentry-tests-hive hadoop test script in maven project (Colm O hEigeartaigh via Lenni Kuff) Change-Id: I8f7e7c99be0acc9c136fe0a4263b6224df163a12 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10800 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 1d3bc47c78fe3ff5bbe990f54e2c9943eceeef2e Author: Gregory Chanan Date: Wed Feb 3 14:48:04 2016 -0800 CDH-36832: Support Config Model Object in SentryShellSolr Change-Id: Ia5e8f4bce87b789b6fb00854358347cb989550fe Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10706 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 1d9134219ce7ce7f845c05bd3d7e47b9b2c0ce20 Author: Gregory Chanan Date: Wed Feb 3 15:44:08 2016 -0800 CDH-36881: Disable automatic permission revoke on collection/config deletion Change-Id: I14a3061ef91c59eafc1ca9968884694d964e1990 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10707 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 85a11e63d28cbf8dd950f83f2e7fcfdab9fc5958 Author: Gregory Chanan Date: Tue Feb 2 17:39:46 2016 -0800 SENTRY-1047: Use existing validators in SentryShellSolr (Gregory Chanan, reviewed by Lenni Kuff) Conflict due to lack of SENTRY-1036, which touches a lot of files, probably not worth backporting at this point. Conflicts: sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/generic/tools/SolrTSentryPrivilegeConvertor.java Change-Id: Ia9df41992cc76a3a50aad1fcc68040cb2ab9e948 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10699 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 7a7456cdda9d7ef13bfb17d3f2e1803b0b7d214c Author: Anne Yu Date: Fri Jan 15 14:49:12 2016 -0800 SENTRY-906: Add concurrency sentry client tests. (Anne Yu, reviewed by Hao Hao) (to run it: -Dsentry.scaletest.oncluster=true, -Dsentry.host=${SENTRY_HOST}, -Dhive.server2.thrift.bind.host=${HS2_HOST}) Change-Id: Ic66d59746ce7b415a14d33ca8392f579680325fd Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10741 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit ab94f99a29be2fdfed46fa30537755f9d267a95e Author: Lenni Kuff Date: Wed Jan 20 23:29:51 2016 -0800 CDH-36911: backport SENTRY-1015 Improve Sentry + Hive error message when user has insufficient privileges (Hao Hao via Lenni Kuff) Change-Id: Ic10a06bade1fd3a00519a5abeba1a278ceae2c8e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10740 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 4b6053ac73649a104101469f6241ed9b668bfc1a Author: Gregory Chanan Date: Wed Jan 27 13:08:08 2016 -0800 SENTRY-1032: Rename shell command group/role shell commands and implement with solr shell (Gregory Chanan, reviewed by: Sravya Tirukkovalur) Conflicts because we did not backport the Hive shell, simply removed the changes. Conflicts: sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/tools/command/hive/GrantRoleToGroupsCmd.java sentry-provider/sentry-provider-db/src/test/java/org/apache/sentry/provider/db/tools/TestSentryShellHive.java Change-Id: Id88bcc0fc83ca8c2afbf24b11601904c27f8ad12 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10700 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 35482803569c4fedaaa780b909b0f64dfc2e2214 Author: Lenni Kuff Date: Fri Jan 29 23:21:42 2016 -0800 CDH-35908: backport SENTRY-1007 Sentry column-level performance for wide tables (Dapeng Sun via Lenni Kuff) Change-Id: I2299d0d45f33d082ee35a7e6a5e81a1587e5042b Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10694 Tested-by: jenkins Reviewed-by: Sijie Yu Tested-by: Sijie Yu commit 15d7c5480bc81a8cae49ce4b35c053c541c4c2a7 Author: Gregory Chanan Date: Mon Feb 1 11:53:38 2016 -0800 SENTRY-1038: More strict checking of SOLR actions in shell (Gregory Chanan, reviewed By Lenni Kuff, Colin Ma) Change-Id: Ieb5cd8ec5f7640bdebcd3e65764eb7acd9312309 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10678 Reviewed-by: Hao Hao Tested-by: jenkins commit 0bee82cad9dc662d2a5f439ef1ad3f16fd10ba53 Author: Gregory Chanan Date: Sat Jan 30 19:29:29 2016 -0800 SENTRY-1039: Sentry shell tests assume order of option group privileges (Gregory Chanan, reviewed by Lenni Kuff) Conflict due to not including the Hive shell and tests. Conflicts: sentry-provider/sentry-provider-db/src/test/java/org/apache/sentry/provider/db/tools/TestSentryShellHive.java Change-Id: Iaa0cc825c3c8667fbe468b851ef87d22b18be671 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10665 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit e6df9e3146884dae1568c35486e5beda57213dcc Author: Gregory Chanan Date: Thu Jan 28 16:35:05 2016 -0800 SENTRY-1037: Set "hadoop.security.authentication" to "kerberos" in the Generic Client (Gregory Chanan, reviewed by Sravya Tirukkovalur) Change-Id: I9ad1f0f6f2629c6b17f91fa2f988e504ca51e3df Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10617 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 64128241273c2d26de9c923c5dd00cc2a9742193 Author: lili Date: Sat Jan 30 14:42:44 2016 -0800 SENTRY-826: TRUNCATE on empty partitioned table in Hive fails (Li Li via Lenni Kuff) Change-Id: I052269f18b0ed6214dcf093dc7caa37fd134dcd5 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10624 Tested-by: jenkins Reviewed-by: Hao Hao commit 05e31f44b325bf498bca64d4b519bcac171934bd Author: hahao Date: Thu Jan 28 18:52:44 2016 -0800 CDH-36685: [Unit test failure] CDH5.7.x - org.apache.sentry.hdfs.TestHMSPathsFullDump.testThrftSerialization Change-Id: I8562ee8f883b718f20d4920039e235878e9c7511 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10598 Reviewed-by: Hao Hao Tested-by: jenkins commit 6464bbba94337989deb78aa652bc8c2a9319df4c Author: Lenni Kuff Date: Thu Jan 28 11:15:28 2016 -0800 SENTRY-1002: PathsUpdate.parsePath(path) will throw an NPE when parsing relative paths (Hao Hao via Lenni Kuff) Change-Id: I8882078abeed37c17734b04d09f6fb2b298861b9 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10595 Reviewed-by: Hao Hao Tested-by: jenkins commit 2515049e39831d523320c5d3130abdba1890c5c9 Author: Lenni Kuff Date: Thu Jan 21 12:40:52 2016 -0800 SENTRY-1008: Path should be not be updated if the create/drop table/partition event fails (Hao Hao via Lenni Kuff) Change-Id: I0b83686612ea10ea7c678f70c16ca975fc7c338e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10591 Reviewed-by: Hao Hao Tested-by: jenkins commit d7508811f485f9e0024ab921c8c4f093bff2f68c Author: lili Date: Thu Jan 28 17:55:24 2016 -0800 SENTRY-965: Solr /terms request handler broken because of components declaration (Gregory Chanan, reviewed by Lenni Kuff) Change-Id: Iae442e358e50b7c79108c0687144c2a358ca76e3 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10590 Tested-by: jenkins Reviewed-by: Hao Hao commit 38e429d31b43f8b84c7c231cfcc88f596ddffd80 Author: lili Date: Thu Jan 28 17:10:41 2016 -0800 SENTRY-945: Avoid logging all DataNucleus queries when debug logging is enabled (Li Li via Lenni Kuff) Change-Id: Ie9e4d2ad4ba217d8abf9e9b550d1535cc89c8a30 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10588 Reviewed-by: Hao Hao Tested-by: jenkins commit cbd6c6c7df9b1bdf7e6f404e31800cf80c135378 Author: lili Date: Thu Jan 28 15:16:22 2016 -0800 SENTRY-510: Metrics collection for Sentry HDFS plugin (Li Li via Lenni Kuff) Change-Id: I531203232ca9d45d8cf712967d2cf47b4637f97d Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10587 Tested-by: jenkins Reviewed-by: Hao Hao commit 75bd6faa67dabad4bbc32b4fb6b22a3819388bdb Author: lili Date: Thu Jan 28 14:40:37 2016 -0800 SENTRY-902: SimpleDBProviderBackend should retry the authrization process properly (Yibing Shi via Colin Ma, Reviewed by Colin Ma, Sravya Tirukkovalur) Change-Id: I7ad8ea0dec177a2179247d1928bb7691b3d4425f Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10584 Tested-by: jenkins Reviewed-by: Hao Hao commit b5b9d881ab3c114f4fad36baae0173476f82f257 Author: Gregory Chanan Date: Wed Jan 20 15:34:10 2016 -0800 SENTRY-995: Simple Solr Shell (Gregory Chanan, reviewed by Colin Ma, Sravya Tirukkovalur) Change-Id: I994fe04b57b30babd41a9b489ec5615f8b080638 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10547 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 035d336ff3d0af2378b66b6cf78dc3fdbae0c9c0 Author: Sravya Tirukkovalur Date: Wed Oct 21 13:53:02 2015 -0700 SENTRY-904: Set max message size for thrift messages ( Li Li, Reviewed by: Sravya Tirukkovalur) Change-Id: I70f704c12fb649c5c93027f0aee537f92afc23db Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10516 Tested-by: jenkins Reviewed-by: Li Li commit 9f93303b6dce798a3b81ece9daa53e51b1bbbb07 Author: Lenni Kuff Date: Thu Jan 21 12:35:37 2016 -0800 SENTRY-991: Roles of Sentry Permission needs to be case insensitive (Hao Hao via Lenni Kuff) Change-Id: Id1d883e897a1f1f2345a5c8d7566ce45ebf45706 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10508 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 6266455269a15247a87447ed550b058c5749d0f8 Author: hahao Date: Tue Jan 26 13:59:19 2016 -0800 CDH-36549: [Unit test failure] CDH5.7.x - org.apache.sentry.provider.db.generic.service.thrift.TestAuditLogForSentryGenericService.testAuditLogForGenericModel. Change-Id: Ieac3b0f6d672d0eeb94d17958a6bdfc06da93926 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10512 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit f3f2ba94f91105516099ad2083e83b22cdfc8a53 Author: hahao Date: Tue Jan 26 13:29:58 2016 -0800 CDH-36182: [Unit test failure] CDH5.7.x JDK8 org.apache.sentry.tests.e2e.hive.TestServerConfiguration Change-Id: I0c8d0c930b244804c763e0b6215e3b7cad7a1630 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10504 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 1044d2cc4c77048888389a186fd09a3c12ba8bd8 Author: Colin Ma Date: Tue Jun 2 12:33:09 2015 +0800 SENTRY-740: Move the class PolicyFileConstants and KeyValue to provider-common (Colin Ma, reviewed by Dapeng Sun) Also need to update SearchModelActions, which is not upstream Conflicts: sentry-policy/sentry-policy-sqoop/src/main/java/org/apache/sentry/policy/sqoop/SqoopModelAuthorizables.java sentry-policy/sentry-policy-sqoop/src/main/java/org/apache/sentry/policy/sqoop/SqoopWildcardPrivilege.java sentry-policy/sentry-policy-sqoop/src/test/java/org/apache/sentry/policy/sqoop/TestSqoopWildcardPrivilege.java Change-Id: Idb852edbf949a442136650f1cdb3f7401dfba87c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10447 Tested-by: jenkins Reviewed-by: Hao Hao commit 2235af28f37675bd5bdb9e2280bb928969e0ca08 Author: Colin Ma Date: Mon Jan 4 14:56:50 2016 +0800 CDH-36543: Backport non-hive specific parts of SENTRY-749: Create simple shell for sentry Change-Id: I6ad3db42cbb72024eddb1fb5ca6040d1c1e471c7 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10454 Tested-by: jenkins Reviewed-by: Hao Hao commit 05f3ce97b26fbace57ca50170d5a9cfa0f693060 Author: Anne Yu Date: Mon Jan 25 13:32:01 2016 -0800 SENTRY-1003: Support "reload" by updating the classpath of Sentry function aux jar path during runtime. (Dapeng Sun via Anne Yu) Resolved Conflicts: sentry-binding/sentry-binding-hive/src/main/java/org/apache/sentry/binding/hive/HiveAuthzBindingHook.java Change-Id: I5e91f4c80f0112ced124d9f39ec2cfa15c2d1aec Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10450 Tested-by: jenkins Reviewed-by: Hao Hao commit c6c2ef694cfae0c6bf7bf01e5905749e143f8cfe Author: Colin Ma Date: Tue Sep 29 15:30:34 2015 +0800 SENTRY-812: Generate audit trail for Sentry generic model when authorization metadata change (Colin Ma, Reviewed by: Dapeng Sun) Change-Id: Ic4a093040c6d1186c619a66adf59cd15362aa655 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10441 Tested-by: jenkins Reviewed-by: Hao Hao commit fd8013a6fcb6c31056aca6e96b7116ff7a4d54eb Author: Sun Dapeng Date: Thu Aug 20 13:47:38 2015 +0800 SENTRY-590: Client factory for generic authorization model (Dapeng Sun, Reviewed by: Guoquan Shen) Change-Id: I9974d95b38b4bd865f768df32fa4bd6313009f07 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10438 Tested-by: jenkins Reviewed-by: Hao Hao commit 0ec7960c2c92aa962768e64a54a11485a1d5ffdc Author: Sun Dapeng Date: Mon Jun 29 15:52:00 2015 +0800 SENTRY-777: SentryServiceIntegrationBase#after() should be run under client subject (Dapeng Sun, reviewed by Guoquan Shen) Change-Id: I966d50e46d8ed02fede3aa3eff230a308d20381d Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9990 Tested-by: jenkins Reviewed-by: Hao Hao commit 84f61a13dd9cf9980bf9902ff447d2aa4346ca5c Author: Anne Yu Date: Thu Jan 21 14:24:15 2016 -0800 Sentry-1009: Improve TestDatabaseProvider to validate test object names instead of validating vague numbers. (Anne Yu, reviewed by Lenni Kuff>) Change-Id: Ib19c4069d086db9e93d439b1d8e4d87ef59bc500 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10437 Tested-by: jenkins Reviewed-by: Hao Hao commit 63cfde465c4d1993de65b16663b39fa27577f462 Author: Sravya Tirukkovalur Date: Fri Jan 22 11:54:34 2016 -0800 SENTRY-1018: HiveServer is not properly shutdown cause BindException in TestServerConfiguration ( Hao Hao, Reviewed by: Sravya Tirukkovalur and Anne Yu) Change-Id: I2824f1158c1dee71a239ee667bbbcf6a53e7068d Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10403 Reviewed-by: Hao Hao Tested-by: jenkins commit 9a503b53568d6d608d828ea0cd1a835e7685ab0b Author: lili Date: Mon Jan 11 21:40:35 2016 -0800 SENTRY-828: Cleanup the unnecessary ProviderBackend (Colin Ma, Reviewed by: Guoquan Shen) Change-Id: I168ae63ae33dd9302c476e0623e4b348a2a3ccde Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10196 Tested-by: jenkins Reviewed-by: Lenni Kuff Reviewed-by: Li Li commit cb5b2a8138c5e4d5e61f12f9446d2504b3e081e0 Author: lili Date: Mon Jan 11 15:12:23 2016 -0800 SENTRY-678: Sentry-Solr Binding may not load group mapping service correctly (Gregory Chanan, Reviewed by: Prasad Mujumdar) Change-Id: Ibaebd638b4a30a80ed40322a0db2a5c85a10e652 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10182 Tested-by: jenkins Reviewed-by: Hao Hao commit 984b17f2fda5b952e2a9894382c43d34b3d46b57 Author: Lenni Kuff Date: Wed Jan 6 11:38:32 2016 -0800 SENTRY-994: SentryAuthorizationInfoX should override isSentryManaged (Sravya Tirukkovalur via Lenni Kuff) Change-Id: Idf57ab092b74dce3a4972c6aaacef528ecb5a2bd Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10127 Reviewed-by: Hao Hao Tested-by: jenkins (cherry picked from commit 8aef5e975fde2212d8111b8bcf8fa6bf7ca06e51) Reviewed-on: http://gerrit.sjc.cloudera.com:8080/10129 commit 52e4e9463cb1f4b6f686c85ad3ec08cabc956ff5 Author: Sravya Tirukkovalur Date: Thu Dec 17 15:01:10 2015 -0800 SENTRY-988: It's better to let SentryAuthorization setter path always fall through and update HDFS (Yongjun Zhang, Reviewed by: Sravya Tirukkovalur) Change-Id: I6f868ad1b3f72ff0e8bdc06e945b56b406dbf062 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9998 Reviewed-by: Hao Hao Tested-by: Hao Hao commit cab1a1e7d2ab03621f3fa37a1017b4f9623f68e5 Author: Sravya Tirukkovalur Date: Mon Nov 9 14:07:02 2015 -0800 SENTRY-944: Setting HDFS rules on Sentry managed hdfs paths should not affect original hdfs rules ( Hao Hao, Reviewed by: Sravya Tirukkovalur) Change-Id: I4ba79be7a4c47524542ccb1cf8c3753ca9ba1bae Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9997 Reviewed-by: Hao Hao Tested-by: Hao Hao commit bbaa7291b4fc04a1d26db613f7f49a0491960bbe Author: Sun Dapeng Date: Thu Jul 30 09:14:51 2015 +0800 SENTRY-821: Add thrift protocol version check for generic model (Dapeng Sun, reviewed by Guoquan Shen) Change-Id: I868e61e7a7affdc141b63892de1fed87a413ea13 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9992 Tested-by: jenkins Reviewed-by: Hao Hao commit 08935f1059d5557bcdb6c283a160be281c4ea33e Author: Lenni Kuff Date: Thu Dec 3 13:04:22 2015 -0800 SENTRY-835: Drop table leaves a connection open when using metastorelistener (Hao Hao via Lenni Kuff) Change-Id: If7a018d5f4d129dae7944cf87cd0d4d5fd103b7e Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9815 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit c5036d45037651817e8caef36b5d996aa0612649 Author: Sun Dapeng Date: Tue Jun 23 14:28:00 2015 +0800 SENTRY-774: *.rej files should be added to rat ignore list (Dapeng Sun, reviewed by Guoquan Shen) Change-Id: Idecc3590898ea558801ecafef17cefbf91717c22 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9989 Reviewed-by: Hao Hao Tested-by: jenkins commit f486b4b22a56ed9e407300613387fad5d67b9325 Author: Colin Ma Date: Wed Apr 15 08:50:51 2015 +0800 SENTRY-537: Refactor AbstractTestWithHiveServer to cut down some test cases runtime (Colin Ma, reviewed by Dapeng Sun) Change-Id: I6763cfd4d677d4db003e7f9e2e74bdc81ab48ca2 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9960 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur commit 71277daf522b97c46043490f16ca2edec052980e Author: Sravya Tirukkovalur Date: Wed Dec 16 22:42:41 2015 -0800 SENTRY-953: External Partitions which are referenced by more than one table can cause some unexpected behavior with Sentry HDFS sync ( Hao Hao, Reviewed by: Sravya Tirukkovalur) Change-Id: Ibcda4929bb008f518e4fd2bc4abb95406423488c Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9903 Reviewed-by: Hao Hao Tested-by: Hao Hao commit d7fa1361d0c96c4b81a49d97487193dc07e16b99 Author: Lenni Kuff Date: Sun Dec 13 00:12:17 2015 -0800 SENTRY-957: Exceptions in MetastoreCacheInitializer should probably not prevent HMS from starting up (Hao Hao via Lenni Kuff) Change-Id: I13207ed65366b2b22a6f21de5dc9888b50f96091 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9902 Reviewed-by: Hao Hao Tested-by: Hao Hao commit f6af484ca60d47d390df2d7e8a4aa8e1f23fe6fc Author: Sun Dapeng Date: Fri Dec 11 09:52:50 2015 +0800 SENTRY-932: TestColumnEndToEnd error check should non-case sensitive (Dapeng Sun, reviewed by Anne Yu) Change-Id: I038cf35af1ae4d8ba47064769a448bbaba8a922b Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9908 Reviewed-by: Hao Hao Tested-by: Hao Hao commit 7bd0ebc40e32381cbecdf81233a8c2795f636f76 Author: Sravya Tirukkovalur Date: Mon Nov 23 19:50:08 2015 -0800 SENTRY-960: Blacklist reflect,java_method using hive.server2.builtin.udf.blacklist ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff) Change-Id: I5fcd930cb272a9f9272e5ce45c35792d617370aa Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9513 Tested-by: jenkins Reviewed-by: Sravya Tirukkovalur Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9901 Reviewed-by: Hao Hao commit 58cb426535bb4e6db9dc4b7e13f952b2468acfd9 Author: hahao Date: Mon Nov 30 18:02:00 2015 -0800 CLOUDERA-BUILD: CDH-31396: Update post_commit hook scripts to disable tests. Change-Id: I06c1069851ed81e4e5d0fed5d6b2d1cf1fc85101 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9618 Tested-by: jenkins Reviewed-by: Hao Hao commit efc35feca6d9cdc16b6c4d91459a5de4797c4253 Author: Lenni Kuff Date: Tue Nov 24 22:16:52 2015 -0800 SENTRY-565: Improve performance of filtering Hive SHOW commands (Colin Ma via Lenni Kuff) Change-Id: I4c8875338b4a67ab66c8f29ac5916bb8679f2f04 Reviewed-on: http://gerrit.sjc.cloudera.com:8080/9542 Tested-by: jenkins Reviewed-by: Hao Hao commit 41ed11d1492120abaf3e94c5adfc0987bae55fa6 Author: Lenni Kuff Date: Wed Oct 7 22:01:30 2015 -0700 CLOUDERA-BUILD: CDH-31396: Update pre_commit/post_commit hook scripts Change-Id: I4be3aa9cbc7848c4dbabc63d67ebb15e9f37e34b commit cfa828cb81b46e46c1fbe279f47dd86ab25c600f Author: Sravya Tirukkovalur Date: Thu Nov 5 15:49:02 2015 -0800 [CDH-34392] Backport for SENTRY-742: Add describe, show/compute stats tests for column level privileges ( Anne yu, Reviewed by: Sravya Tirukkovalur) commit d8a8577fcdc703583afd103320a440a8dd43bd42 Author: Sravya Tirukkovalur Date: Mon Nov 9 14:26:32 2015 -0800 [CDH-28317] Backport for SENTRY-955: Add more meta data operation tests for column level privilege ( Sravya Tirukkovalur, Reviewed by: Anne Yu, Hao Hao) commit bfe9637d09eb7ccd2f53952f9907eb34007bb5ee Author: Sravya Tirukkovalur Date: Fri Nov 6 10:27:28 2015 -0800 SENTRY-742: Add describe, show/compute stats tests for column level privileges ( Anne yu, Reviewed by: Sravya Tirukkovalur) commit d524ed9233890e62f254796262e4566194082e05 Author: Sravya Tirukkovalur Date: Thu Oct 29 18:33:32 2015 -0700 SENTRY-936: getGroup and getUser should always return orginal hdfs values for paths in prefix which are not sentry managed (Sravya Tirukkovalur, Reviewed by Lenni Kuff) commit 00493d6f8018f252a4405e30b76e896b899d781c Author: Sravya Tirukkovalur Date: Thu Oct 29 18:33:01 2015 -0700 [CLOUDERA-BUILD] CDH-33782: Enable TestSentryAuthorizationProvider ( Sravya Tirukkovalur) commit 9f146fe13cb458285917bf09e900d83fe73dc8af Author: Sravya Tirukkovalur Date: Fri Oct 23 15:47:56 2015 -0700 [CDH-26849]: SENTRY-748: Improve test coverage of Sentry + Hive using complex views ( Anne Yu, Reviewed by: Sravya Tirukkovalur) commit 660b7686143e6be93bfcf446d9b006daa222a277 Author: Gregory Chanan Date: Wed Oct 14 14:40:01 2015 -0700 CDH-32929: Sentry-Solr ConfigSet API protection of LIST command Change-Id: Ie9da7a677d537ab01d826dccc2ffb546b693cfae commit 19202d0cc11720f9f276acc5c3f443d958ce3a1f Author: Lenni Kuff Date: Tue Oct 13 11:42:09 2015 -0700 CLOUDERA-BUILD: CDH-32829: Revert "SENTRY-769: [Improve error handling] Make sure groups in list_sentry_privileges_for_provider is not empty ( Colin Ma, Reviewed by: Sravya Tirukkovalur)" This reverts commit 1bc01f6288a73b241229667978d563cef123aa07. commit 1bc01f6288a73b241229667978d563cef123aa07 Author: Sravya Tirukkovalur Date: Sun Oct 11 22:31:10 2015 -0700 SENTRY-769: [Improve error handling] Make sure groups in list_sentry_privileges_for_provider is not empty ( Colin Ma, Reviewed by: Sravya Tirukkovalur) commit 48dc6c2c6b5e0c9e0ff73696caf3789e11c5c9bb Author: Sravya Tirukkovalur Date: Fri Oct 9 16:17:37 2015 -0700 SENTRY-888: Exceptions in Callable tasks in MetaStoreCacheInitializer are being dropped ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 97f67edee39a819ae1cdd288dcd6eef77edb2148 Author: Sravya Tirukkovalur Date: Fri Oct 9 14:18:31 2015 -0700 [CLOUDERA-BUILD] CDH-32617: Update based Sentry HDFS plugin based on HDFS-7454 (Sravya Tirukkovalur, Reviewed by: Lenni Kuff, Andrew Wang) commit c60592881e1c262438d4bf13304b2b6ab41f3881 Author: Sun Dapeng Date: Fri Sep 25 15:06:29 2015 +0800 SENTRY-900: User could access sentry metric info by curl without authorization (Dapeng Sun, reviewed by Colin Ma) commit 022a65be18d7bc2f839a6bd56a831839fbf28469 Author: Sravya Tirukkovalur Date: Mon Oct 5 12:04:28 2015 -0700 [CLOUDERA-BUILD] CDH-32496: Ignore new connection pool tests with HA (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit c0555cdebfbae53a3044cf7252626b2515b7546f Author: Sun Dapeng Date: Tue Apr 21 16:17:43 2015 +0800 SENTRY-296: Sentry Service Client does not allow for connection pooling (Dapeng Sun and Colin Ma, reviewed by Prasad Mujumdar) commit 9d5cc3bbcd3db4bf04e44a81acd6505fdfa054ca Author: Sravya Tirukkovalur Date: Thu Sep 24 14:47:12 2015 -0500 SENTRY-893: Synchronize calls in SentryClient and create sentry client once per request in SimpleDBProvider ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 5fd881b1802e2ba5abf9321f6502e3208d238d62 Author: Sravya Tirukkovalur Date: Tue Sep 22 09:31:25 2015 -0500 SENTRY-892: parsePath should handle empty paths well ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff and Colin Ma) commit f67cb89fbd60143bce3d46520422bcce5f9c3b60 Author: Sravya Tirukkovalur Date: Thu Sep 17 15:47:24 2015 -0700 [CLOUDERA-BUILD] CDH-30406: Revert the use of fine grained privileges in HiveAuthzPrivilegesMap ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 8ded43223f0ddfa685a4ce04652fcca7b571bf40 Author: Sravya Tirukkovalur Date: Thu Sep 17 17:15:04 2015 -0700 [CLOUDERA-BUILD] CDH-31671:Fix e2e failure: TestDbOperations.testAllOnTable (Sravya Tirukkovalur, Reviewed by: Lenni Kuff, Anne Yu) - This is only relevant for CDH as we reverted fine grained privileges. commit e288a4388da69454691c1ce9c25aa96d99be0dad Author: Sravya Tirukkovalur Date: Fri Sep 11 13:59:13 2015 -0700 SENTRY-885: DB name should be case insensitive in HDFS sync plugin ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 2d5f857c37606009d90bb1c03173942781760764 Author: Lenni Kuff Date: Tue Sep 15 00:42:48 2015 -0700 SENTRY-886: HDFSIntegration test testAccessToTableDirectory should wait for cache refresh before verification (Sravya Tirukkovalur via Lenni Kuff) commit 4eb430b1d30b26a7a59e613adc155e46357f40e5 Author: Sravya Tirukkovalur Date: Mon Sep 14 17:15:56 2015 -0700 SENTRY-881: Allow some metadata operations with column-level privileges ( Lenni Kuff, Reviewed by: Sravya Tirukkovalur) commit a9e5db02467c24aeab01a0abbd8ab2cc3f0b2f3e Author: Lenni Kuff Date: Sun Sep 13 00:48:57 2015 -0700 SENTRY-884: Give execute permission by default to paths managed by sentry (Sravya Tirukkovalur via Lenni Kuff) commit 9e7f63a5b5ca3f17335ee4c77dd95f05f05171d5 Author: Sun Dapeng Date: Sun Sep 6 09:15:49 2015 +0800 SENTRY-841: Revoke on SERVER scope breaks Client API, allows any string to be passed in (Ryan P via Dapeng Sun, Reviewed by Colin Ma) commit bcf00cbb857e1feaaca26e4ee775a8e5a8e184a5 Author: Colin Ma Date: Mon Aug 31 08:25:57 2015 +0800 SENTRY-746: After revoke select from view, select fails with a confusing error message(Colin Ma, reviewed by: Dapeng Sun) commit b7a56b1d31464f635bca7df7f8748ecb13fb0adf Author: Guoquan Shen Date: Fri Aug 28 18:06:25 2015 +0800 SENTRY-847: [column level privilege] if grant column level privilege to user, show columns in table shouldn't require extra table level privilege (Guoquan Shen, Reviewed by: Colin Ma) commit 3ccfca8e3156515a5517f0050275c67be8c6fadd Author: Colin Ma Date: Wed Aug 26 13:30:14 2015 +0800 SENTRY-739: when user doesn't have admin privileges, show grant throw exception, better improve error message (Colin Ma, Reviewed by: Anne Yu) commit 2094e8e9d45e313b310ef1e5d72c649bf16124e1 Author: Lenni Kuff Date: Sat Aug 22 13:22:23 2015 -0700 SENTRY-839: posexplode() missing from HIVE_UDF_WHITE_LIST (Li Li via Lenni Kuff) commit cb036d4c4c445308610c90784a798d13aa4aa340 Author: Lenni Kuff Date: Wed Sep 9 16:19:19 2015 -0700 SENTRY-878: collect_list missing from HIVE_UDF_WHITE_LIST (Li Li via Lenni Kuff) commit 98f1bd307011e17ecac2e9f6609182bffe7cc34a Author: Colin Ma Date: Mon Aug 31 08:31:09 2015 +0800 CDH-29860: backport fix for SENTRY-860, fix intermittent test failure for TestPrivilegesAtFunctionScope.testFuncPrivileges1 (Anne Yu Via Colin Ma) commit 413c81da2c4722c1f5280879dd113f90de17df97 Author: Jenkins Date: Fri Sep 4 15:15:58 2015 -0700 Updating Maven version to 5.7.0-SNAPSHOT commit 3c300ef5734339a3be3d5fd80b118e6c2b9da206 Author: Gregory Chanan Date: Sat Aug 29 22:43:53 2015 -0700 CDH-30981: Sentry support for ConfigSetsHandler commit b16e5d1aef00edd0efaf37821fe93c325e9346a1 Author: Sravya Tirukkovalur Date: Tue Aug 18 13:38:12 2015 -0700 SENTRY-850: Fix dbprovider test failures when run on a real cluster or setMetastoreListener = true, when db/tab gets recreated their associated privileges will be deleted. ( Anne Yu, Reviewed By: Sravya Tirukkovalur) commit 358090c2e1b073377084aa3f7aa4f6b91d643a97 Author: Sravya Tirukkovalur Date: Mon Aug 17 13:22:06 2015 -0700 CDH-28502: Disable fine Sentry fine grain DDL authorization for Hive in CDH 5.5 (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 29d3eb13ddc4ae2ab5992f006a3e2046c26e630a Author: Sravya Tirukkovalur Date: Mon Aug 17 13:18:53 2015 -0700 Revert "[CLOUDERA-BUILD] CDH-28502: Disable fine Sentry fine grain DDL authorization for Hive in CDH 5.5 (Sravya Tirukkovalur, Reviewed by: Lenni Kuff)" This reverts commit 7f80ac840b611084c2e7061f60a12e00956ad2cd. commit 04474a412b093127744e62b82feb69b0da14861c Author: Sravya Tirukkovalur Date: Thu Aug 13 14:04:27 2015 -0700 SENTRY-836 commit efe066d4cc74d672f8b8971b70d2e828160b7edb Author: Sravya Tirukkovalur Date: Thu Aug 13 12:02:14 2015 -0700 SENTRY-758: Add test cases for partition columns with column level privileges - Also added tests for select *, select col(*) and select col(1) commit 7767d2706a0137fe83d39682cccce0c9a5680ecc Author: Guoquan Shen Date: Wed Aug 12 08:44:29 2015 +0800 SENTRY-843: Add the link of wiki page in README.md ( Guoquan Shen, Reviewed by: Colin Ma) commit 85efaf22bcc5d4b44e485dec0f82bdf696acf6fa Author: Sun Dapeng Date: Tue Aug 11 16:07:01 2015 +0800 SENTRY-842: Fix typos in pom.xml (Dapeng Sun, reviewed by Guoquan Shen) commit 7f80ac840b611084c2e7061f60a12e00956ad2cd Author: Sravya Tirukkovalur Date: Thu Aug 13 09:55:23 2015 -0700 [CLOUDERA-BUILD] CDH-28502: Disable fine Sentry fine grain DDL authorization for Hive in CDH 5.5 (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 71ff51c320fec66da0c18be8ef72e53ce88bf1ab Author: Lenni Kuff Date: Sun Aug 9 07:35:04 2015 -0700 SENTRY-834: Fix hive e2e real cluster failures in TestDbConnections, TestDbExportImportPrivileges, TestDbJDBCInterface (Anne Yu via Lenni Kuff) (cherry-picked from upstream) commit ddb7ef82b20c6c923d2003558e48176a5f213b39 Author: Colin Ma Date: Mon Apr 20 09:58:00 2015 +0800 SENTRY-698: Uncaught OutOfMemoryError (Colin Ma, reviewed by Guoquan Shen) (cherry-picked from upstream) Resolved conflicts in: sentry-tests/sentry-tests-hive/src/test/java/org/apache/sentry/tests/e2e/hive/TestCrossDbOps.java commit 50225a1aba6c73fd51424d04db4fc376982b2a82 Author: Sravya Tirukkovalur Date: Sun Aug 9 13:37:52 2015 -0700 SENTRY-824: Enable column level privileges e2e tests on real cluster runs ( Sravya Tirukkovalur , Reviewed by: Colin Ma) commit 6d52f90c52827458d3d0fd4582c73469178d8114 Author: Sravya Tirukkovalur Date: Sun Aug 9 12:10:21 2015 -0700 SENTRY-780: HDFS Plugin should not execute path callbacks for views (Ryan Pridgeon via Sravya Tirukkovalur) commit 2177d4c8ada76b89cfd1ed60f01566d16ee6145f Author: Lenni Kuff Date: Wed Aug 5 00:52:35 2015 -0700 SENTRY-827: Server scope always grants ALL (Ryan P via Lenni Kuff) commit c9132a83d061deb8e8b76a8e5f69cd9b5484a6fb Author: Lenni Kuff Date: Wed Aug 5 00:57:50 2015 -0700 CDH-29641: (SENTRY-829) Fix Sentry Hive Test Failures in TestDbCrossDb class when running E2E (Anne Yu via Lenni Kuff) commit 6d126f2d162d4ac34eb9f8829e048c07e2a32deb Author: Lenni Kuff Date: Wed Aug 5 00:46:04 2015 -0700 SENTRY-810: CTAS without location is not verified properly (Ryan P via Lenni Kuff) commit 8da55b18dee3785734b1674ded15abb602e992ba Author: Vamsee Yarlagadda Date: Fri Jul 31 13:19:02 2015 -0700 SENTRY-825: SecureAdminHandler no longer pulls collection name for create correctly (Gregory Chanan, Reviewed by: Vamsee Yarlagadda) commit 6dc9d1f1dc69c45a27377c18c2f522373d634378 Author: Sravya Tirukkovalur Date: Mon Jul 27 13:22:55 2015 -0700 CLOUDERA-BUILD: CDH-29036: Rebase on sentry 1.5.1 - more pom changes commit bd9c811b2cf141fc12005de86c8637fd198f7da2 Author: Sravya Tirukkovalur Date: Mon Jul 27 10:31:40 2015 -0700 SENTRY-823: Clean up roles properly in TestHDFSIntegration commit 625549cdafec00b7495a427bc7d5bc3cdf5047c8 Author: Sun Dapeng Date: Mon Jul 27 09:26:18 2015 +0800 SENTRY-684: Upgrade to Apache Curator 2.7.1 (Dapeng Sun, reviewed by Guoquan Shen) commit efaf90d3dd22c57581bf00ef509566898278f7ea Author: Sravya Tirukkovalur Date: Fri Jul 24 17:26:03 2015 -0700 SENTRY-808: Change default protocol version to V2 (Sravya Tirukkovalur, Reviewed by:Lenni Kuff) commit d9ff713d1c1f50b36089f4b2774ca85b8cbfd10f Author: Sravya Tirukkovalur Date: Fri Jul 24 13:35:23 2015 -0700 SENTRY-755: HDFS access of data files should be disabled for user with privileges only on some columns (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit e2eb6617b05064f8a8eb7d7283049182a955e1ad Author: Sravya Tirukkovalur Date: Tue Jul 21 14:58:03 2015 -0700 SENTRY-790: Remove MetaStoreClient interface ( Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit f6bcbcff299551ba84e785505141913f0b859f28 Author: Guoquan Shen Date: Fri Jul 24 14:42:24 2015 +0800 SENTRY-801: Update README: Does not compile with JDK8 (Colin Ma via Guoquan Shen) commit 8dc38061d8e757d39177ecdbc52fb55e24b07b38 Author: Lenni Kuff Date: Thu Jul 23 12:54:57 2015 -0700 SENTRY-806: Fix unit test failure: TestMetastoreEndToEnd.testPartionInsert - java.lang.RuntimeException: Cannot make directory (Anne Yu via Lenni Kuff) commit ad3535ac1ca102c1a5369ce23a27dd73f0601dce Author: Colin Ma Date: Wed Jul 22 09:23:02 2015 +0800 SENTRY-485: Add test coverage for auditing in E2E, secure environment (Colin Ma, Reviewed by: Guoquan Shen) commit ec6f083bdc3936cf980bda2a2c67b01b844fc8c7 Author: Lenni Kuff Date: Thu Jul 23 13:02:32 2015 -0700 [CDH-29330] Backport unit test for SENTRY-799: Fix TestDbEndToEnd flaky test - drop table/dbs before creating (Anne Yu via Lenni Kuff) commit 6a8c18c3ee6e13dbc793897f285c68d8d42a3d13 Author: Sravya Tirukkovalur Date: Tue Jul 21 13:56:58 2015 -0700 SENTRY-530: Add thrift protocol version check ( Dapeng Sun, Reviewed by: Sravya Tirukkovalur) commit aaf40db78d94e139d5bcd9e06de0ea4e427724e8 Author: Sravya Tirukkovalur Date: Tue Jul 21 13:48:25 2015 -0700 SENTRY-741: Add a test case for hive query which creates dummy partition (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 4cc63c3ac889a234ad175e7035ce0f5f75f8c81f Author: Colin Ma Date: Tue Jul 21 09:42:50 2015 +0800 SENTRY-796: Fix log levels in SentryAuthorizationInfo (Colin Ma, Reviewed by: Dapeng Sun) commit 1183008aa8159ffc964941bbf483f20e4a84a5b5 Author: Vamsee Yarlagadda Date: Mon Jul 20 15:20:00 2015 -0700 SENTRY-804: Add Audit Log Support for Solr Sentry Handlers (Gregory Chanan, Reviewed by: Vamsee Yarlagadda) commit 0533ac631d8be0a25e976a88c926b949f77359a9 Author: Vamsee Yarlagadda Date: Mon Jul 20 11:06:07 2015 -0700 SENTRY-805: Reclassify CoreAdminHandler Actions (Gregory Chanan, Reviewed by: Vamsee Yarlagadda) commit 7b1b2f1a77b7e0686b3af6960bd5392528384c9b Author: Sravya Tirukkovalur Date: Fri Jul 17 11:18:18 2015 -0700 SENTRY-778: CredentialProvider for Sentry DB password ( Sravya Tirukkovalur, Reviewed by: Colin Ma) commit f9853b55e08ae9b5b26bb5303f18c5bef6096cd9 Author: Sravya Tirukkovalur Date: Mon Jul 13 12:19:46 2015 -0700 SENTRY-792: Throw underlying exception if SentryService start fails (Sravya Tirukkovalur, Reviewed by: Colin Ma) commit bd92b46903bc470c656e20d5d243a7f5172a1ed0 Author: Sravya Tirukkovalur Date: Mon Jul 13 11:38:07 2015 -0700 CDH-29374/ SENTRY-800: first run A1.Scope invalid identifier (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit 210d6f1701721c95025a2691f5798c3d7c3bf8f3 Author: Sravya Tirukkovalur Date: Fri Jul 10 17:13:03 2015 -0700 CDH-29336: sentry service error: org.apache.thrift.TException: Service name not found: SentryHDFSService (Sravya Tirukkovalur, Reviewed by:Lenni Kuff) commit d04e7b7a3f7c03ee9b14061b7a07668acc8b7e68 Author: Sravya Tirukkovalur Date: Fri Jul 10 10:11:22 2015 -0700 CDH-29326: HIVE-10895(ObjectStore) breaks Sentry build commit 9b4e9ae1c13684ec71e026a71a5e1e28fad86150 Author: Sravya Tirukkovalur Date: Thu Jul 9 15:07:18 2015 -0700 SENTRY-797: TestHDFSIntegration#testEngToEnd is flaky (Sravya Tirukkovalur, Reviewed by: Colin Ma) commit 95561a12565362a463bf8ff4061127c1ef85a9cf Author: Sravya Tirukkovalur Date: Tue Jul 7 11:24:45 2015 -0700 SENTRY-794: TestHDFSIntegrationWithHA#testEnd2End fails( Sravya Tirukkovalur, Reviewed by Lenni Kuff) commit 259355cfb57c965f2539a53fd0ae1c70b1f02bbd Author: Gregory Chanan Date: Tue Jul 7 15:34:48 2015 -0700 Revert "CDH-18734: Match sentry solr e2e configuration with solrctl shipped configuration" This reverts commit d209f7eaee8afc559f2e110cc456a245545f75ec. commit d9fb435276618091040b9e727950caff2a9a5605 Author: Sravya Tirukkovalur Date: Tue Jul 7 23:48:22 2015 -0700 SENTRY-791: java.lang.AbstractMethodError when using HDFS sync (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit f8f22ad8060fd4bff12bdba0351317084236da93 Author: Sravya Tirukkovalur Date: Thu Jul 2 15:23:18 2015 -0700 [CLOUDERA-BUILD] CDH-29077: Fix mysql and postgres scripts for CDH5.5 (SENTRY-788) (Sravya Tirukkovalur, Reviewed by: Lenni Kuff) commit e891aaaf15e0e3272e896452a7b028c6ac9d6ef9 Author: Sravya Tirukkovalur Date: Wed Jul 1 17:01:49 2015 -0700 CDH-29065: Move TestMetaStorePlugin.java to sentry-hdfs-service/ (Sravya Tirukkovalur) commit 80d0746a42250aef02505629d5931f2f9dc7ecfd Author: Sravya Tirukkovalur Date: Tue Jun 30 14:27:50 2015 -0700 [CLOUDERA-BUILD] CDH-28899: Hive MetaStore server NPE talking to Sentry HDFS Service - Maintain backward compatibility. Allow reading the configs from hive-site along with sentry-site, where sentry-site takes the precedence commit 65cf8a13a02b7e4733f731c5a99dabe8982331e4 Author: Sravya Tirukkovalur Date: Mon Jun 29 11:22:04 2015 -0700 SENTRY-776: Sentry client should support cache based kerberos ticket for secure zookeeper connection (Prasad Mujumdar via Sravya Tirukkovalur) commit 43441ba7626468ceb56f260eae529a15c746ac55 Author: Sravya Tirukkovalur Date: Tue Jun 23 11:22:25 2015 -0700 [CLOUDERA-BUILD] CDH-28798: Remove HDFS plugin stub to integrate CDH 5.5 Sentry plugin with CDH HDFS (Prasad Mujumdar via Sravya Tirukkovalur) commit 1bdf55df5fde60cf287e7c8f9e06f66f73778cf7 Author: Prasad Mujumdar Date: Fri Jun 12 16:24:29 2015 -0700 SENTRY-721: HDFS Cascading permissions not applied to child file ACLs if a direct grant exists (Prasad Mujumdar, reviewed by Arun Suresh and Lenni Kuff) commit 1100fce7acb43328f5a1dd3a0578d16ab23d6ad8 Author: Prasad Mujumdar Date: Wed Jun 10 15:07:19 2015 -0700 CLOUDERA-BUILD: CDH-28477: Sentry distirbution should include a shaded db provider jar with libthrift for Impala commit b2efbd8bed063b4122c7755ee7759ad8704deecf Author: Sravya Tirukkovalur Date: Thu Jun 4 12:13:48 2015 -0700 SENTRY-752: Sentry service audit log file name format should be consistent (Prasad Mujumdar via Sravya Tirukkovalur) commit 2871789a48f0ef797647e310ebaf5a6a12e8fb7f Author: Sravya Tirukkovalur Date: Thu May 28 15:54:17 2015 -0700 SENTRY-744: DB provider client should support grantServerPrivilege() method without action for backward compatibility ( Prasad Mujumdar, Reviewed by: Colin Ma) commit 9e2da3649415259805a8b3eab007c1aaef936579 Author: Sravya Tirukkovalur Date: Thu May 21 12:29:08 2015 -0700 SENTRY-695: Sentry service should read the hadoop group mapping properties from core-site ( Prasad Mujumdar via Sravya Tirukkovalur) commit 3749ce2b71e00bebb836019f6e6f0352709673a3 Author: Sravya Tirukkovalur Date: Wed May 20 12:40:20 2015 -0700 SENTRY-227: Fix for "Unsupported entity type DUMMYPARTITION" (Lars Francke via Sravya Tirukkovalur) commit 153c8f94e98d71fa23487690bcbb6a948c83d90d Author: Sun Dapeng Date: Tue May 12 15:32:07 2015 +0800 SENTRY-723: Clean unused methods in HiveAuthzBindingHook (Dapeng Sun, reviewed by Guoquan Shen) commit e2fe8a2109aa5ca89828ffe0fe43ffe272abf39d Author: Sun Dapeng Date: Fri May 8 11:12:54 2015 +0800 SENTRY-720: Patch related files should be excluded form version control (Dapeng Sun, reviewed by Colin Ma) commit 59e01c57f235e194fddaf84a124d0d9a5ab8b0de Author: Anne Yu Date: Mon May 11 14:42:11 2015 -0700 CDH-27581: Fix index name without adding extra dbname into a bracket. commit e89e1ef7ccf0d94dfd945cb8d0eaab464680e138 Author: Anne Yu Date: Wed May 13 09:52:25 2015 -0700 [KITCHEN-7358][CDH-27572] Increase permgen size to fix orphanged processes issue from unit tests. commit 5617bf449c1c8e0ab4151962bebaa96de384044a Author: Colin Ma Date: Thu May 7 15:02:20 2015 +0800 SENTRY-717: Fix the UDF whitelist format for functions row_number and unbase64 (Colin Ma, reviewed by Prasad Mujumdar) commit 9c0972df971abb52bc8c66bdd20ad880e6d85ea2 Author: Prasad Mujumdar Date: Thu Apr 30 00:37:46 2015 -0700 SENTRY-702: Hive binding should support RELOAD command (Dapeng Sun via Prasad Mujumdar) commit 73764186866ca05ee1c489579ef4175225117543 Author: Prasad Mujumdar Date: Wed May 6 14:44:38 2015 -0700 CLOUDERA-BUILD: CDH-27597: Fix upgrade scripts for Sentry 1.5 release commit cd6431ff2ea9193f7ae6257ce4a9b0934f3f823f Author: Prasad Mujumdar Date: Wed May 6 13:52:25 2015 -0700 CLOUDERA-BUILD: CDH-26790: Sentry upstream rebase to 1.5.0 commit c2c21ea2a0ee441faf42160e6c0fde148fab25e6 Author: Prasad Mujumdar Date: Tue May 5 23:08:19 2015 -0700 CLOUDERA-BUILD: CDH-26790: Sentry upstream rebase to 1.5.0 commit f30ea23d8b82be3b4725be487c76071f5ca619b0 Author: Prasad Mujumdar Date: Tue May 5 10:52:56 2015 -0700 CLOUDERA-BUILD: CDH-26790: Sentry upstream rebase to 1.5.0 commit a7c3351d501812640456c8cb058c9ca0be571943 Author: Prasad Mujumdar Date: Thu Apr 30 00:33:45 2015 -0700 CLOUDERA-BUILD: CDH-26790: Sentry upstream rebase to 1.5.0 commit e8e6dfd814823cb9d5ae63912393727e34dd5772 Author: Prasad Mujumdar Date: Tue Apr 28 09:31:32 2015 -0700 SENTRY-699: Memory leak when running Sentry w/ HiveServer2 (Prasad Mujumdar, reviewed by Colin Ma) commit 369466c53d5763ef4e69dd32535471da9d712ae9 Author: Prasad Mujumdar Date: Wed Apr 22 09:11:09 2015 -0700 SENTRY-703: Calls to add_partition fail when passed a Partition object with a null location (Prasad Mujumdar, reviewed by Dapeng Sun) commit b72499246f8cbefd5b7fa9a25f628e5fda2a4eaa Author: Prasad Mujumdar Date: Sat Apr 18 10:05:39 2015 -0700 SENTRY-696: Improve Metastoreplugin Cache Initialization time (Arun Suresh via Prasad Mujumdar) commit d930970a5d612237055d3d73e074c05e7ae48808 Author: Prasad Mujumdar Date: Wed Apr 1 15:06:07 2015 -0700 SENTRY-687: Handle authorization for 'select ' hive queries (Yibing Shi via Prasad Mujumdar) commit ca5e1bd6de0ccd9982c6328c32643905dd335535 Author: Gregory Chanan Date: Thu Mar 5 17:44:29 2015 -0800 CDH-25838: Allow sentry-binding to handle _HOST in principal specification commit 4649a1c4f73458308c3b8ab841e15a7b365ca8ed Author: Gregory Chanan Date: Wed Feb 25 16:48:44 2015 -0800 CDH-25395: Binding for Sentry - HBase Indexer integration commit 6cee093d4f9f85108d08289d6f163112cdff286e Author: Gregory Chanan Date: Thu Feb 26 18:25:52 2015 -0800 Revert "CDH-25395: Binding for Sentry - HBase Indexer integration" This reverts commit c6fae2b1de64d875222e91ee0dfd6fdc6296401d. commit a5bad9988156f198fcb7bd4e700b9ee58455dd72 Author: Gregory Chanan Date: Wed Feb 25 16:48:44 2015 -0800 CDH-25395: Binding for Sentry - HBase Indexer integration commit d187275bd62a87038e0198a5d1ea2cb920a9e625 Author: Lenni Kuff Date: Wed Feb 25 16:43:23 2015 -0800 CLOUDERA-BUILD: CDH-25543: NoClassDefFoundError: org/apache/hadoop/mapred/MRVersion commit a46cd2318977c03aff50927528dd8be8506df28c Author: Lenni Kuff Date: Wed Feb 25 10:23:56 2015 -0800 CLOUDERA-BUILD: CDH-25326: Sentry - Build all C5 components with -source/-target 1.7 (Lenni Kuff reviewed by Prasad Mujumdar) commit 4d7a10a20f708819c9223c60023879a5eb15e1c8 Author: Prasad Mujumdar Date: Thu Feb 19 00:58:43 2015 -0800 CLOUDERA-BUILD: CDH-25358: Add curator client dependency to CDH Sentry pom commit 7cc392cc43c54604134d340ba849d778abd03546 Author: Sravya Tirukkovalur Date: Mon Dec 8 17:26:27 2014 -0800 CLOUDERA-BUILD: CDH-23722: [Unit test failure] Workaround for CDH-23735 commit 3014d11f2073b1a82f03fe9e9371178b03114044 Author: Arun Suresh Date: Mon Nov 10 14:24:43 2014 -0800 CLOUDER-BUILD CDH-23090: Explicitly setting Hive local scratch direcotry for TestHDFSIntegration commit 4272631051c7ffb90c483fa4ff77cd6cbbead1a6 Author: Sravya Tirukkovalur Date: Wed Nov 5 11:27:46 2014 -0800 CLOUDERA-BUILD: CDH-23006: Unable to load FILE TestPrivilegesAtFunctionScope.testFuncPrivileges1 commit 94351fd8c12cb70d2f18a292cbc7b2214b5a852b Author: Sravya Tirukkovalur Date: Wed Nov 5 15:53:08 2014 -0800 CLOUDERA-BUILD: CDH-22889: Collection additional perf metrics for Sentry/HDFS integration (Prasad Mujumdar via Sravya Tirukkovalur) commit f181d79b2d7e8a7596b21c4dcb664734fbaedc10 Author: Lenni Kuff Date: Sat Nov 1 16:26:04 2014 -0700 CLOUDERA-BUILD: CDH-22914: Sentry Server fails to start during first run (Sravya Tirukkovalur via Lenni Kuff) commit 4b398ce6167c3c14aed876f572dc7ea48919a696 Author: Prasad Mujumdar Date: Mon Aug 25 11:47:48 2014 -0700 CDH-20967: Upgrade Sentry to version 1.4. Exclude cloudera specific build files from RAT check commit f2f2dc7540af95840c74e8f355ac40625027480c Author: Gregory Chanan Date: Mon Apr 21 13:11:00 2014 -0700 CDH-18734: Match sentry solr e2e configuration with solrctl shipped configuration commit 8f8f7efc5d8057cc770c2fbbca903364532153e2 Author: Sravya Tirukkovalur Date: Mon Jul 27 11:25:33 2015 -0700 CLOUDERA-BUILD CDH-29036: Rebase on Sentry 1.5.1, initial pom changes