Skip to content

Commit 30af121

Browse files
merge read_cross_cluster privileges into read
1 parent 6932440 commit 30af121

File tree

1 file changed

+4
-1
lines changed
  • x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege

1 file changed

+4
-1
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/IndexPrivilege.java

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,8 +83,11 @@ public final class IndexPrivilege extends Privilege {
8383
private static final Automaton ALL_AUTOMATON = patterns("indices:*", "internal:transport/proxy/indices:*");
8484
private static final Automaton READ_AUTOMATON = patterns(
8585
"indices:data/read/*",
86+
"internal:transport/proxy/indices:data/read/*",
8687
ResolveIndexAction.NAME,
87-
TransportResolveClusterAction.NAME
88+
TransportResolveClusterAction.NAME,
89+
TransportClusterSearchShardsAction.TYPE.name(),
90+
TransportSearchShardsAction.TYPE.name()
8891
);
8992
private static final Automaton READ_FAILURE_STORE_AUTOMATON = patterns("indices:data/read/*", ResolveIndexAction.NAME);
9093
private static final Automaton READ_CROSS_CLUSTER_AUTOMATON = patterns(

0 commit comments

Comments
 (0)