Add ESQL views privileges to kibana_system role#143455
Add ESQL views privileges to kibana_system role#143455mohamedhamed-ahmed merged 4 commits intoelastic:mainfrom
Conversation
|
Pinging @elastic/es-security (Team:Security) |
jeramysoucy
left a comment
There was a problem hiding this comment.
LGTM. Is there a reason this PR is labeled with external-contributer, or is that just an error?
...va/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
Outdated
Show resolved
Hide resolved
@jeramysoucy not sure TBH, the label was added automatically. |
jfreden
left a comment
There was a problem hiding this comment.
The manage index privilege already covers this, so this change shouldn't be needed.
manage is indices:admin/*, manage_view is indices:admin/esql/view* and the PUT, GET and DELETE operations are indices:admin/esql/view/put|get|delete.
jeramysoucy
left a comment
There was a problem hiding this comment.
Approving and noting that index pattern collision documentation needs to be updated here or wherever applicable regarding $.logs*
Could you create an issue or open a PR for this?
@jeramysoucy Thank you. Will sync on this with @mdbirnstiehl on the update of the docs and see if a ticket/PR is needed and do so 👍 |
* Add ESQL views privileges to kibana_system role * updated indices to match views
Summary
Related to Add views for wired streams
As part of the above ticket, we need to manage views on startup and thus the need for ESLQ views privileges on the
$.prefix forlogsto be able to do so.