Installing shield and watcher plugins fail with AccessDeniedException

[opsline-radek]

Installing shield and watcher plugins cause AccessDeniedException as the installer tries to move /usr/share/elasticsearch/plugins/shield/bin into /usr/share/elasticsearch/bin/shield directory. ES files are owned by root and the plugin installation is running as ES user.

ES version: 2.1
OS: CentOS
install type: package

Shouldn't plugins be installed as root as well?

[martinb3]

Thank you for reporting this @opsline-radek. It depends on how ES was installed:

Running as root
If Elasticsearch was installed using the deb or rpm package then run bin/plugin as root so it can write to the appropriate files on disk. Otherwise run bin/plugin as the user that owns all of the Elasticsearch files.

via https://www.elastic.co/guide/en/elasticsearch/plugins/2.1/plugin-management.html.

[opsline-radek]

The point is that there is no option to install plugins as root.

[martinb3]

I agree, and I've labeled it as a bug. I've got a working fix but I'm doing more testing before I will push the fixes; please bear with us.

[martinb3]

I've added some tests for shield and watcher, as well. This should fix the issue, and I plan to do a release today. Thank you!