elasticsearch/plugins
Lorenzo Dematté 69f6520b0c
[Entitlements] Validation checks on paths (#126852)
With this PR we restrict the paths we allow access to, forbidding plugins to specify/request entitlements for reading or writing to specific protected directories.

I added this validation to EntitlementInitialization, as I wanted to fail fast and this is the earliest occurrence where we have all we need: PathLookup to resolve relative paths, policies (for plugins, server, agents) and the Paths for the specific directories we want to protect.

Relates to ES-10918
2025-04-18 15:36:07 +02:00
..
analysis-icu [Entitlements] Replace Permissions with Entitlements in InstallPluginAction (#125207) 2025-04-02 11:03:27 +01:00
analysis-kuromoji Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
analysis-nori Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
analysis-phonetic Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
analysis-smartcn Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
analysis-stempel Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
analysis-ukrainian Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
discovery-azure-classic Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
discovery-ec2 Patcher for AWS SDKv2 locale-dependent formatting (#126326) 2025-04-15 12:49:56 +02:00
discovery-gce Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
examples Make TransportRequest an interface (#126733) 2025-04-14 14:22:28 -07:00
mapper-annotated-text Cleanup missing use of StandardCharsets (#125424) 2025-03-21 20:10:15 +01:00
mapper-murmur3 Update Gradle wrapper to 8.12 (#118683) 2024-12-30 15:34:24 +01:00
mapper-size Use FallbackSyntheticSourceBlockLoader for number fields (#122280) 2025-02-12 16:12:19 -08:00
repository-hdfs [Entitlements] Validation checks on paths (#126852) 2025-04-18 15:36:07 +02:00
store-smb Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00
build.gradle Convert remaining plugin projects to new test clusters framework (#125626) 2025-03-26 13:44:07 -07:00