-
Notifications
You must be signed in to change notification settings - Fork 25.8k
Removing Application Privileges #31730
Copy link
Copy link
Closed
Labels
:Security/AuthorizationRoles, Privileges, DLS/FLS, RBAC/ABACRoles, Privileges, DLS/FLS, RBAC/ABAC
Description
When executing the following two POSTs to /_xpack/security/privilege, the second POST isn't removing the no longer specified privilege:
POST /_xpack/security/privilege
{
"kibana":{
"all":{"application":"kibana","name":"all","actions":["action:*"],"metadata":{}},
"read":{"application":"kibana","name":"read","actions":["action:saved_objects/config/get"],"metadata":{}}
}
}
POST /_xpack/security/privilege
{
"kibana":{
"read":{"application":"kibana","name":"read","actions":["action:saved_objects/config/get"],"metadata":{}}
}
}
Is this how we want this to behave? Is there some way to have the operation overwrite all of the privileges for the specified application?
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
:Security/AuthorizationRoles, Privileges, DLS/FLS, RBAC/ABACRoles, Privileges, DLS/FLS, RBAC/ABAC
Type
Fields
Give feedbackNo fields configured for issues without a type.