Skip to content

Commit eaeaaf7

Browse files
committed
Add monitor cluster privilege to internal synonyms user
1 parent b419e4c commit eaeaaf7

File tree

1 file changed

+2
-1
lines changed
  • x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/user

1 file changed

+2
-1
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/user/InternalUsers.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,7 @@
3333
import org.elasticsearch.xpack.core.XPackPlugin;
3434
import org.elasticsearch.xpack.core.ilm.action.ILMActions;
3535
import org.elasticsearch.xpack.core.security.authz.RoleDescriptor;
36+
import org.elasticsearch.xpack.core.security.authz.privilege.ConfigurableClusterPrivilege;
3637
import org.elasticsearch.xpack.core.security.support.MetadataUtils;
3738

3839
import java.util.Arrays;
@@ -283,7 +284,7 @@ public class InternalUsers {
283284
UsernamesField.SYNONYMS_USER_NAME,
284285
new RoleDescriptor(
285286
UsernamesField.SYNONYMS_ROLE_NAME,
286-
null,
287+
new String[] {"monitor"},
287288
new RoleDescriptor.IndicesPrivileges[] {
288289
RoleDescriptor.IndicesPrivileges.builder().indices(".synonyms*").privileges("all").allowRestrictedIndices(true).build(),
289290
RoleDescriptor.IndicesPrivileges.builder().indices("*").privileges(TransportReloadAnalyzersAction.TYPE.name()).build(), },

0 commit comments

Comments
 (0)