Skip to content

Draft: preserve evaluated index expression and reuse for PIT search authorization #75805

Closed
albertzaharovits wants to merge 1 commit intoelastic:masterfrom
albertzaharovits:security_aliases_and_pit
Closed

Draft: preserve evaluated index expression and reuse for PIT search authorization #75805
albertzaharovits wants to merge 1 commit intoelastic:masterfrom
albertzaharovits:security_aliases_and_pit

Conversation

@albertzaharovits
Copy link
Copy Markdown
Contributor

This is a draft implementation to change Security for PITs.
This has a lot of problems, but it is an example that shows how to bypass regular authorization for searches with PITs, and to defer it after the reader context has been resolved, using the evaluated index expression at the time of the PIT creation.

@albertzaharovits
Copy link
Copy Markdown
Contributor Author

I don't think anybody cares about this anymore, hence closing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

:Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC v8.0.0-rc2

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants