Prevent privilege checks

Author: n1v0lg

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/AuthorizationEngine.java

@@ -366,6 +366,14 @@ public ActionRequestValidationException validate(ActionRequestValidationExceptio
                 && application.length == 0) {
                 validationException = addValidationError("must specify at least one privilege", validationException);
             }
+            if (index != null) {
+                for (RoleDescriptor.IndicesPrivileges indexPrivilege : index) {
+                    if (Arrays.stream(indexPrivilege.getPrivileges())
+                        .anyMatch(p -> "read_failure_store".equals(p) || "manage_failure_store".equals(p))) {
+                        validationException = addValidationError("checking failure store privileges is not supported", validationException);
+                    }
+                }
+            }
             return validationException;
         }