mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-04-25 07:37:19 -04:00
def2f2777b
In some Elastic Stack environments, there is a distinction between the operator of the cluster infrastructure and the administrator of the cluster. This distinction cannot be supported currently because the "administrator" often has the superuser role which grants each and every privilege of the cluster. This PR adds a new feature to protect a fixed set of APIs from the "administrator" even when it is a highly privileged user such as superuser. It enhances the Elasticsearch security model to have an additional layer of restriction in addition to the RBAC. Co-authored-by: Tim Vernum <tim@adjective.org> |
||
|---|---|---|
| .. | ||
| common-parms.asciidoc | ||
| cron-expressions.asciidoc | ||
| defs.asciidoc | ||
| index.asciidoc | ||
| info.asciidoc | ||
| usage.asciidoc | ||