mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-04-25 15:47:23 -04:00
ee66d6f11f
* Support audit ignore policy by index privileges
Adding new audit ignore policy - privileges
For example, following policy will filter out all events, which actions
minimal required privilege is either "read" or "delete":
xpack.security.audit.logfile.events.ignore_filters:
example:
privileges: ["read", "delete"]
Resolve: #60877
Related: #10836
Related: #37148
* Support audit ignore policy by index privileges
Adding new audit ignore policy - privileges
For example, following policy will filter out all events, which actions
required privilege is either "read" or "delete":
xpack.security.audit.logfile.events.ignore_filters:
example:
privileges: ["read", "delete"]
Resolve: #60877
Related: #10836
Related: #37148
* To avoid ambiguity (as cluster and index policies may have the same
name) changing implementation to have to separate policies for
`index_privileges` and `cluster_privileges`.
If both are set for the same policy, throw the IllegalArgumentException.
* To avoid ambiguity (as cluster and index policies may have the same
name) changing implementation to have to separate policies for
`index_privileges` and `cluster_privileges`.
If both are set for the same policy, throw the IllegalArgumentException.
* Fixing Api key related privilege check which expects request and
authentication by introducing overloaded
version of findPrivilegesThatGrant
just checking if privileges which can grant the action regardless of the
request and authentication context.
* Fixing a test; adding a caching mechanism to avoid calling
findPrivilegesThatGrant each
time.
* Support audit ignore policy by index privileges
Addressing review feedback
* Support audit ignore policy by index privileges
Addressing review comments + changing approach:
- use permission check instead of simple "checkIfGrants"
- adding more testing
* Support audit ignore policy by index privileges
Addressing review comments + changing approach:
- use permission check instead of simple "checkIfGrants"
- adding more testing
* Support audit ignore policy by index privileges
Addressing review comments + changing approach:
- use permission check instead of simple "checkIfGrants"
- adding more testing
* Support audit ignore policy by index privileges
Addressing review comments + changing approach:
- use permission check instead of simple "checkIfGrants"
- adding more testing
* Revert "Support audit ignore policy by index privileges"
This reverts commit
|
||
|---|---|---|
| .. | ||
| aggregations | ||
| analysis | ||
| autoscaling | ||
| cat | ||
| ccr | ||
| cluster | ||
| commands | ||
| data-streams | ||
| docs | ||
| eql | ||
| graph | ||
| high-availability | ||
| how-to | ||
| ilm | ||
| images | ||
| index-modules | ||
| indices | ||
| ingest | ||
| licensing | ||
| mapping | ||
| migration | ||
| ml | ||
| modules | ||
| monitoring | ||
| query-dsl | ||
| release-notes | ||
| repositories-metering-api | ||
| rest-api | ||
| rollup | ||
| scripting | ||
| search | ||
| searchable-snapshots | ||
| settings | ||
| setup | ||
| slm | ||
| snapshot-restore | ||
| sql | ||
| tab-widgets | ||
| text-structure/apis | ||
| transform | ||
| upgrade | ||
| vectors | ||
| aggregations.asciidoc | ||
| analysis.asciidoc | ||
| api-conventions.asciidoc | ||
| cat.asciidoc | ||
| cluster.asciidoc | ||
| data-management.asciidoc | ||
| data-rollup-transform.asciidoc | ||
| datatiers.asciidoc | ||
| dependencies-versions.asciidoc | ||
| docs.asciidoc | ||
| frozen-indices.asciidoc | ||
| getting-started.asciidoc | ||
| glossary.asciidoc | ||
| gs-index.asciidoc | ||
| high-availability.asciidoc | ||
| how-to.asciidoc | ||
| index-extra-title-page.html | ||
| index-modules.asciidoc | ||
| index.asciidoc | ||
| index.x.asciidoc | ||
| indices.asciidoc | ||
| ingest.asciidoc | ||
| intro.asciidoc | ||
| links.asciidoc | ||
| mapping.asciidoc | ||
| query-dsl.asciidoc | ||
| redirects.asciidoc | ||
| release-notes.asciidoc | ||
| scripting.asciidoc | ||
| search.asciidoc | ||
| setup.asciidoc | ||
| upgrade.asciidoc | ||