Add privileges for connectors index creation (elastic#91026)

carlosdelest · Oct 20, 2022 · 775315b · 775315b
1 parent 4e2c7ff
commit 775315b
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 3 deletions.
diff --git a/docs/changelog/91026.yaml b/docs/changelog/91026.yaml
@@ -0,0 +1,5 @@
+pr: 91026
+summary: Add privileges for connectors index creation
+area: Authorization
+type: enhancement
+issues: []
diff --git a/...rc/javaRestTest/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountIT.java b/...rc/javaRestTest/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountIT.java
@@ -166,7 +166,8 @@ public class ServiceAccountIT extends ESRestTestCase {
                         "logs-app_search.search_relevance_suggestions-default",
                         "logs-crawler-default",
                         "logs-workplace_search.analytics-default",
-                        "logs-workplace_search.content_events-default"
+                        "logs-workplace_search.content_events-default",
+                        ".elastic-connectors*"
                     ],
                     "privileges": [
                         "manage",

diff --git a/.../src/main/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccounts.java b/.../src/main/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccounts.java
@@ -43,7 +43,8 @@ final class ElasticServiceAccounts {
                         "logs-app_search.search_relevance_suggestions-default",
                         "logs-crawler-default",
                         "logs-workplace_search.analytics-default",
-                        "logs-workplace_search.content_events-default"
+                        "logs-workplace_search.content_events-default",
+                        ".elastic-connectors*"
                     )
                     .privileges("manage", "read", "write")
                     .build() },

diff --git a/...test/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccountsTests.java b/...test/java/org/elasticsearch/xpack/security/authc/service/ElasticServiceAccountsTests.java
@@ -359,7 +359,8 @@ public void testElasticEnterpriseSearchServerAccount() {
             "logs-app_search.search_relevance_suggestions-default",
             "logs-crawler-default",
             "logs-workplace_search.analytics-default",
-            "logs-workplace_search.content_events-default"
+            "logs-workplace_search.content_events-default",
+            ".elastic-connectors*"
         ).forEach(index -> {
             final IndexAbstraction enterpriseSearchIndex = mockIndexAbstraction(index);
             assertThat(role.indices().allowedIndicesMatcher(AutoCreateAction.NAME).test(enterpriseSearchIndex), is(true));