Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.x] [EEM] Disable authorization checks on endpoints (#198695) #200565

Merged
merged 1 commit into from
Nov 18, 2024

Conversation

kibanamachine
Copy link
Contributor

Backport

This will backport the following commits from main to 8.x:

Questions ?

Please refer to the Backport tool documentation

Disable authorization checks on all entity manager endpoints.

Also makes two notable changes to the endpoints/EntityClient behaviour:
- previously the EntityClient accepted a `IScopedClusterClient` and
abstracted usage of asInternalUser/asCurrentUser in its methods which
may result in unwanted behavior for consumers. It now only accepts an
`ElasticsearchClient` that is preauthenticated by the consumers
- added permissions verifications to custom definition endpoints

---------

Co-authored-by: Kevin Lacabane <[email protected]>
Co-authored-by: kibanamachine <[email protected]>
(cherry picked from commit 94d7df3)
@kibanamachine kibanamachine merged commit a813573 into elastic:8.x Nov 18, 2024
34 checks passed
@elasticmachine
Copy link
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] Jest Tests #14 / useMonitorStatusData handles resize events and requests based on new data

Metrics [docs]

✅ unchanged

cc @miltonhultgren

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants