Skip to content

Commit 88a711e

Browse files
committed
Allow users with read role to use the async_search/status endpoint
1 parent 82221ff commit 88a711e

File tree

1 file changed

+7
-1
lines changed
  • x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege

1 file changed

+7
-1
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/IndexPrivilege.java

+7-1
Original file line numberDiff line numberDiff line change
@@ -75,14 +75,20 @@
7575
public final class IndexPrivilege extends Privilege {
7676
private static final Logger logger = LogManager.getLogger(IndexPrivilege.class);
7777

78-
private static final Automaton ALL_AUTOMATON = patterns("indices:*", "internal:transport/proxy/indices:*");
78+
private static final Automaton ALL_AUTOMATON = patterns(
79+
"indices:*",
80+
"internal:transport/proxy/indices:*",
81+
"cluster:monitor/async_search/status"
82+
);
7983
private static final Automaton READ_AUTOMATON = patterns(
8084
"indices:data/read/*",
85+
"cluster:monitor/async_search/status",
8186
ResolveIndexAction.NAME,
8287
TransportResolveClusterAction.NAME
8388
);
8489
private static final Automaton READ_CROSS_CLUSTER_AUTOMATON = patterns(
8590
"internal:transport/proxy/indices:data/read/*",
91+
"cluster:monitor/async_search/status",
8692
ClusterSearchShardsAction.NAME,
8793
TransportSearchShardsAction.TYPE.name(),
8894
TransportResolveClusterAction.NAME,

0 commit comments

Comments
 (0)