Skip to content

Commit b05f82b

Browse files
committed
Assert in config cluser privs
1 parent 747597e commit b05f82b

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/ConfigurableClusterPrivileges.java

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -414,10 +414,10 @@ public ManageRolesPrivilege(List<ManageRolesIndexPermissionGroup> manageRolesInd
414414
this.requestPredicateSupplier = (restrictedIndices) -> {
415415
IndicesPermission.Builder indicesPermissionBuilder = new IndicesPermission.Builder(restrictedIndices);
416416
for (ManageRolesIndexPermissionGroup indexPatternPrivilege : manageRolesIndexPermissionGroups) {
417-
Set<IndexPrivilege> splitBySelector = IndexPrivilege.resolveBySelectorAccess(
418-
Set.of(indexPatternPrivilege.privileges())
419-
);
420-
for (IndexPrivilege indexPrivilege : splitBySelector) {
417+
Set<IndexPrivilege> privileges = IndexPrivilege.resolveBySelectorAccess(Set.of(indexPatternPrivilege.privileges()));
418+
assert privileges.stream().allMatch(p -> p.getSelectorPredicate() != IndexComponentSelectorPredicate.FAILURES)
419+
: "not support for failures store access yet";
420+
for (IndexPrivilege indexPrivilege : privileges) {
421421
indicesPermissionBuilder.addGroup(
422422
indexPrivilege,
423423
FieldPermissions.DEFAULT,

0 commit comments

Comments
 (0)