Skip to content

Commit 1139cce

Browse files
authored
[DOCS] Add docs for create_doc index privilege (#47584) (#47778)
This commit adds documentation for new index privilege create_doc which only allows indexing of new documents but no updates to existing documents via Index or Bulk APIs. Relates: #45806
1 parent 75a7daa commit 1139cce

File tree

1 file changed

+15
-2
lines changed

1 file changed

+15
-2
lines changed

x-pack/docs/en/security/authorization/privileges.asciidoc

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -153,8 +153,21 @@ action.
153153
+
154154
--
155155
NOTE: This privilege does not restrict the index operation to the creation
156-
of documents but instead restricts API use to the index API. The index API allows a user
157-
to overwrite a previously indexed document.
156+
of documents but instead restricts API use to the index API. The index API
157+
allows a user to overwrite a previously indexed document. See the `create_doc`
158+
privilege for an alternative.
159+
160+
--
161+
162+
`create_doc`::
163+
Privilege to index documents. Also grants access to the update mapping action.
164+
However, it does not enable a user to update existing documents.
165+
+
166+
--
167+
NOTE: When indexing documents with an external `_id` either via the index API or
168+
the bulk API, the request must use `op_type` as `create`. If `_id`s are
169+
generated automatically, the authorization happens as if the `op_type` is set to
170+
`create`.
158171

159172
--
160173

0 commit comments

Comments
 (0)