Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CCR] Add create_follow_index privilege #33555

Closed
martijnvg opened this issue Sep 10, 2018 · 1 comment
Closed

[CCR] Add create_follow_index privilege #33555

martijnvg opened this issue Sep 10, 2018 · 1 comment
Assignees
@martijnvg
Labels
>bug :Distributed Indexing/CCR Issues around the Cross Cluster State Replication features

Comments

@martijnvg
Copy link
Member

Currently if the user executing the create and follow api has manager_ccr cluster privilege then it is allowed the create a follow index even if the user does not have the create_index index privilege. This unexpected as creating an index is seen as an index level privilege.

Instead we should introduce a create_follow_index index privilege that the user will need to have in order for the create and follow api to create the follow index.
@martijnvg martijnvg added >bug :Distributed Indexing/CCR Issues around the Cross Cluster State Replication features labels Sep 10, 2018
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-distributed

@martijnvg martijnvg self-assigned this Sep 10, 2018
@elasticmachine elasticmachine mentioned this issue Sep 10, 2018
Closed
29 tasks
martijnvg added a commit to martijnvg/elasticsearch that referenced this issue Sep 10, 2018
@martijnvg
[CCR] Add create_follow_index privilege
1194f64 
This is a new index privilege that the user needs to have in the follow cluster.
This privilege is required in addition to the `manage_ccr` cluster privilege in
order to execute the create and follow api.

Closes elastic#33555
@martijnvg martijnvg mentioned this issue Sep 10, 2018
Merged
martijnvg added a commit that referenced this issue Sep 10, 2018
@martijnvg
[CCR] Add create_follow_index privilege (#33559)
c4adcee 
This is a new index privilege that the user needs to have in the follow cluster.
This privilege is required in addition to the `manage_ccr` cluster privilege in
order to execute the create and follow api.

Closes #33555
martijnvg added a commit that referenced this issue Sep 10, 2018
@martijnvg
[CCR] Add create_follow_index privilege (#33559)
b7ef3eb 
This is a new index privilege that the user needs to have in the follow cluster.
This privilege is required in addition to the `manage_ccr` cluster privilege in
order to execute the create and follow api.

Closes #33555
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@martijnvg martijnvg

Labels
>bug :Distributed Indexing/CCR Issues around the Cross Cluster State Replication features
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@martijnvg @elasticmachine