order of needed permissions is changed on latest security version or …

…at least not always consistent now

Signed-off-by: Amit Galitzky <[email protected]>

src/test/java/org/opensearch/ad/rest/SecureADRestIT.java

@@ -405,10 +405,13 @@ public void testCreateAnomalyDetectorWithCustomResultIndex() throws IOException
         AnomalyDetector detector = cloneDetector(anomalyDetector, resultIndex);
         // User goat has no permission to create index
         Exception exception = expectThrows(IOException.class, () -> { createAnomalyDetector(detector, true, goatClient); });
+        System.out.println("error message: " + exception.getMessage());
         Assert
             .assertTrue(
                 "got " + exception.getMessage(),
-                exception.getMessage().contains("no permissions for [indices:admin/aliases, indices:admin/create]")
+                exception.getMessage().contains("indices:admin/aliases")
+                    && exception.getMessage().contains("indices:admin/create")
+                    && exception.getMessage().contains("no permissions for")
             );
 
         // User cat has permission to create index