User Profile - Detailed errors in hasPrivileges response#89224
Conversation
This PR adds a new `errors` field in the ProfilehasPrivileges response to report detailed errors encountered, including missing UIDs. It also removes the existing `errors_uids` field since this is redundant after the change.
|
Pinging @elastic/es-security (Team:Security) |
|
Hi @ywangd, I've created a changelog YAML for you. |
| // Only compare the keys (profile uids) of the errors, actual error types do not matter | ||
| return hasPrivilegeUids.equals(that.hasPrivilegeUids) && errors.keySet().equals(that.errors.keySet()); |
There was a problem hiding this comment.
There is no good way to compare Exception objects. Since equals and hashCode are only used in tests (ProfileHasPrivilegesResponseTests), I took a simple approach to just compare the erroneous profile uids.
|
@azasypkin This is the PR for adding detailed errors to the ProfileHasPrivileges API response. @elastic/clients-team This PR drops an existing |
|
@elasticmachine run elasticsearch-ci/part-2-fips |
azasypkin
left a comment
There was a problem hiding this comment.
LGTM from the Kibana side, thanks!
|
@elasticmachine update branch |
|
@elasticmachine run elasticsearch-ci/part-2 |
|
Failure is unrelated and tracked at #89431 |
|
@elasticmachine run elasticsearch-ci/part-1-fips |
* upstream/main: (265 commits) Disable openid connect tests due to missing fixture (elastic#89478) Add periodic job for single processor node testing Updates to changelog processing after docs redesign (elastic#89463) Better support for multi cluster for run task (elastic#89442) Mute failing tests (elastic#89465) [ML] Performance improvements related to ECS Grok pattern usage (elastic#89424) Add source fallback support for date and date_nanos mapped types (elastic#89440) Reuse Info in lifecycle step (elastic#89419) feature: support metrics for multi value fields (elastic#88818) Upgrade OpenTelemetry API and remove workaround (elastic#89438) Remove LegacyClusterTaskResultActionListener (elastic#89459) Add YAML spec docs about matching errors (elastic#89370) Remove redundant cluster upgrade tests for auth tokens (elastic#89417) Return 400 error for GetUserPrivileges call with API keys (elastic#89333) User Profile - Detailed errors in hasPrivileges response (elastic#89224) Rollover min_* conditions docs and highlight (elastic#89434) REST tests for percentiles_bucket agg (elastic#88029) REST tests for cumulative pipeline aggs (elastic#88966) Clean-up file watcher keys. (elastic#89429) fix a typo in Security.java (elastic#89248) ... # Conflicts: # server/src/main/java/org/elasticsearch/index/mapper/NumberFieldMapper.java
This PR adds a new
errorsfield in the ProfilehasPrivileges responseto report detailed errors encountered, including missing UIDs. It also
removes the existing
errors_uidsfield since this is redundant afterthe change.