Skip to content

[8.1] Ignore app priv failures when resolving superuser (#85519)#85588

Merged
elasticsearchmachine merged 1 commit intoelastic:8.1from
tvernum:backport/8.1/pr-85519
Apr 1, 2022
Merged

[8.1] Ignore app priv failures when resolving superuser (#85519)#85588
elasticsearchmachine merged 1 commit intoelastic:8.1from
tvernum:backport/8.1/pr-85519

Conversation

@tvernum
Copy link
Copy Markdown
Contributor

@tvernum tvernum commented Apr 1, 2022

Backports the following commits to 8.1:

In elastic#81400 we changed `superuser` to no longer have _every_ privilege.
Consequently, we also removed the special case code that existed that
would ignore all other roles for any user that had superuser role.

However, we added some special handling so that failing to resolve those
other roles would not block superuser access - when a user has superuser
role, any failures in role resolution will be effectively ignored, and
the user will be given the superuser role only.

However, this failure handling did not account for the loading of
application privileges. If application privileges needed to be loaded,
but failed, this could prevent resolution of the superuser role.

This change extends the failure handling to encompass the full
resolution of roles, and fallback to superuser only, whenever other
roles or application privileges are unavailable

Relates: elastic#85312
@tvernum tvernum added auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport labels Apr 1, 2022
@elasticsearchmachine elasticsearchmachine merged commit b690154 into elastic:8.1 Apr 1, 2022
@tvernum tvernum deleted the backport/8.1/pr-85519 branch April 1, 2022 02:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport v8.1.3

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants