Release 9.2.4.1¶

Apache Ranger - Hive Lookup Resource Handling Update¶

The handling of Hive Lookup Resource functionality has been improved:

• Lookup support disabled for new installations to reduce unnecessary dependencies.
• Enhanced error logging when Hive Metastore libraries are unavailable.

Control Flag Added for File Location Authorization in EMR Trino¶

Introduced a new flag that allows Privacera Manager to enable or disable file location authorization property, providing better control and flexibility.

Refined STS Token Expiry Validation¶

• Enhanced the STS token expiry check logic to use UTC-based time comparison, ensuring consistent validation across different server timezone configurations.

Use OpenSslCachingX509KeyManagerFactory for OPENSSL Provider¶

• Updated to use the OpenSslCachingX509KeyManagerFactory when the Dataserver is running with the OPENSSL SSL provider.

Unity Catalog Resource Loader Error Handling Improvements¶

Improved resource loading stability by allowing the loader to continue processing even when some resources fail, preventing incomplete loads and false deletions.

Optimized Resource Scanning with Manage/Ignore Filter for Ondemand Events in Databricks SQL Analytics Connector¶

Added a manage/ignore resource filtering condition to the Databricks SQL Analytics connector for on-demand events. This optimises resource scanning by ensuring that only relevant resources are included in the JDBC query.

Resolved user deletion and user membership removal issue on user email case updated in Databricks Sql Connector¶

Fixed issue causing users deletion and users getting removed from groups in DBX-Sql when user email case is updated on the portal.

Unity Catalog Table Permission Sync Optimized¶

Improved how the Unity Catalog connector handles table-level SELECT permissions, preventing false deltas and keeping resources consistently in sync.

Reduced JDBC Calls During Policy Creation¶

Optimized the Unity Catalog connector to avoid repeated DESCRIBE CATALOG JDBC calls when creating masking or RLF policies.

Known Issue: Policy Version Not Recorded in Apply Logs for SELECT Permissions in Unity Catalog Connector¶

In release 9.2.4.1, the policy version is not being recorded in apply logs when SELECT permissions are applied through the Unity Catalog connector.

Impact: This affects logging functionality but does not impact policy enforcement itself (i.e., policies are still correctly applied).

Resolution: This issue will be fixed in the upcoming 9.2.5.1 release.

Monitoring & Post-Install Enhancements¶

The cron job for post-install, which previously ran every 24 hours, has been removed. The post-install job will now run only during the PrivaceraManager post-install step, ensuring the latest Grafana dashboards are uploaded gracefully.

Security Updates¶

We addressed several security vulnerabilities found in third-party dependencies. These fixes include updates for CVE-flagged issues identified during our security scans, ensuring improved protection and platform reliability.

[PrivaceraCloud only] Improved Data Catalog Page¶

This update introduces improvements to the Data Catalog page for better usability. Additionally, we have expanded automated test coverage to improve overall stability and reliability