Skip to content

Align Cloud Security Index Privileges #128893

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Jun 5, 2025
Merged

Align Cloud Security Index Privileges #128893

merged 4 commits into from
Jun 5, 2025

Conversation

@CohenIdo
Copy link
Contributor

@CohenIdo CohenIdo commented Jun 4, 2025

Summary

While attempting to add an index alias to the Cloud Security Findings index (PR #222567), I encountered the following error:

security_exception Root causes: security_exception: Adding an alias is not allowed when the alias has more permissions than 
any of the indices

This PR aligns the index privileges so that they match those of the alias.

Additionally, our team will review the granted privileges as part of this ticket: #12695.

@CohenIdo CohenIdo requested a review from a team as a code owner June 4, 2025 12:10
@CohenIdo CohenIdo added >non-issue Team:Security Meta label for security team Team:Cloud Security Meta label for Cloud Security team v9.1.0 labels Jun 4, 2025
@CohenIdo CohenIdo changed the title Unify csp index privileges Unify Cloud Security Index Privileges Jun 4, 2025
@CohenIdo CohenIdo changed the title Unify Cloud Security Index Privileges Align Cloud Security Index Privileges Jun 4, 2025
@elasticsearchmachine elasticsearchmachine added external-contributor Pull request authored by a developer outside the Elasticsearch team and removed Team:Security Meta label for security team labels Jun 4, 2025
@CohenIdo CohenIdo mentioned this pull request Jun 4, 2025
Merged
2 tasks
@SiddharthMantri SiddharthMantri self-requested a review June 4, 2025 15:00
@CohenIdo CohenIdo added the Team:Security Meta label for security team label Jun 5, 2025
@elasticsearchmachine elasticsearchmachine removed the Team:Security Meta label for security team label Jun 5, 2025
@CohenIdo CohenIdo added the :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC label Jun 5, 2025
@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Jun 5, 2025
@elasticsearchmachine
Copy link
Collaborator

elasticsearchmachine commented Jun 5, 2025

Pinging @elastic/es-security (Team:Security)

@CohenIdo CohenIdo merged commit 6262492 into elastic:main Jun 5, 2025
23 checks passed
@CohenIdo CohenIdo linked an issue Jun 5, 2025 that may be closed by this pull request
[Milestone 1] Update latest findings indices references in Kibana elastic/kibana#187435
Closed
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SiddharthMantri SiddharthMantri SiddharthMantri approved these changes

Assignees

No one assigned

Labels

external-contributor Pull request authored by a developer outside the Elasticsearch team >non-issue :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Cloud Security Meta label for Cloud Security team Team:Security Meta label for security team v9.1.0

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[Milestone 1] Update latest findings indices references in Kibana

3 participants

@CohenIdo @elasticsearchmachine @SiddharthMantri