-
Notifications
You must be signed in to change notification settings - Fork 358
[Feature] Update SecurityIndexAccessEvaluator to support new index permission #2553
Copy link
Copy link
Closed
Labels
triagedIssues labeled as 'Triaged' have been reviewed and are deemed actionable.Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
Description
New permission for read/write access on system indexes
A new permissions should be created a starting point is 'system:admin/system_index', where 'system:' is a new convention. The new permission name should be used where {NEW PERMISSION R/W SYSTEM INDEX} is seen in the rest of this document
Updates to SecurityIndexAccessEvaluator
SecurityIndexAccessEvaluator is responsible for accepting/rejecting modifications to the system index. This class will be modified so the evaluate(...) method includes the permissions from the current user has '{NEW PERMISSION R/W SYSTEM INDEX}' permissions for each index in the request. If allowed on all the system indexes in the request, then preemptively return, otherwise use the conventional evaluation flow.
Along with this should be a new integration test that verify:
- The new permissions applies to the indexes that match its index pattern, no other system indexes.
- The new permissions allows for read and write operations on the permitted index(es)
- (Should already exist, if not add) Make sure that '*' allowed actions doesn't automatically give '{NEW PERMISSION R/W SYSTEM INDEX}' access
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
triagedIssues labeled as 'Triaged' have been reviewed and are deemed actionable.Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
Type
Projects
Status
Done