Moar

Author: n1v0lg

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/ConfigurableClusterPrivileges.java

@@ -414,14 +414,16 @@ public ManageRolesPrivilege(List<ManageRolesIndexPermissionGroup> manageRolesInd
             this.requestPredicateSupplier = (restrictedIndices) -> {
                 IndicesPermission.Builder indicesPermissionBuilder = new IndicesPermission.Builder(restrictedIndices);
                 for (ManageRolesIndexPermissionGroup indexPatternPrivilege : manageRolesIndexPermissionGroups) {
-                    // TODO handle selectors
-                    indicesPermissionBuilder.addGroup(
-                        IndexPrivilege.getSingleSelector(Set.of(indexPatternPrivilege.privileges())),
-                        FieldPermissions.DEFAULT,
-                        null,
-                        false,
-                        indexPatternPrivilege.indexPatterns()
-                    );
+                    Set<IndexPrivilege> splitBySelector = IndexPrivilege.getSplitBySelector(Set.of(indexPatternPrivilege.privileges()));
+                    for (IndexPrivilege indexPrivilege : splitBySelector) {
+                        indicesPermissionBuilder.addGroup(
+                            indexPrivilege,
+                            FieldPermissions.DEFAULT,
+                            null,
+                            false,
+                            indexPatternPrivilege.indexPatterns()
+                        );
+                    }
                 }
                 final IndicesPermission indicesPermission = indicesPermissionBuilder.build();