Allow refreshing a shard by system

Author: kingherc

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/SystemPrivilege.java

@@ -45,7 +45,7 @@ public final class SystemPrivilege extends Privilege {
         CompletionPersistentTaskAction.INSTANCE.name(), // needed for ShardFollowTaskCleaner
         "indices:data/write/*", // needed for SystemIndexMigrator
         "indices:data/read/*", // needed for SystemIndexMigrator
-        "indices:admin/refresh", // needed for SystemIndexMigrator
+        "indices:admin/refresh*", // needed for SystemIndexMigrator and EnsureDocsSearchableAction
         "indices:admin/aliases", // needed for SystemIndexMigrator
         TransportCreateIndexAction.TYPE.name() + "*", // needed for SystemIndexMigrator
         TransportAddIndexBlockAction.TYPE.name() + "*", // needed for SystemIndexMigrator