Join GitHub today
GitHub is home to over 36 million developers working together to host and review code, manage projects, and build software together.Sign up
Introduce Application Privileges with support for Kibana RBAC #32309
This commit introduces "Application Privileges" to the X-Pack security model.
Application Privileges are managed within Elasticsearch, and can be tested with the _has_privileges API, but do not grant access to any actions or resources within Elasticsearch.
Access to manage application privileges is handled in a new way that grants permission to specific application names only. This lays the foundation for more OLS on cluster privileges, which is implemented by allowing a cluster permission to inspect not just the action being executed, but also the request to which the action is applied.
Specifically, this adds
Jul 24, 2018
This PR introduces:
Do we need both variants can we get by with just the plural accepting multiple privileges in one go? This would be the first API that has two different endpoints for the put operation.
Total nit, it doesn't matter in my code generator but it could potentially in others. Just be a shame to break our consistency here. #32879 addresses this though