mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-04-24 07:07:57 -04:00
Like the plugin being testing, the entitled test plugin needs access to dynamic elements (namely, file paths). This commit dynamically generates the entitlement policy for the entitlted test plugin when it is installed. It also adds using the file entitltlement as an example. |
||
---|---|---|
.. | ||
agent | ||
asm-provider | ||
bridge | ||
qa | ||
src | ||
tools | ||
build.gradle | ||
entitlements-loading.svg | ||
README.md |
Entitlement library
This module implements mechanisms to grant and check permissions under the entitlements system.
The entitlements system provides an alternative to the legacy SecurityManager
system, which is deprecated for removal.
The entitlement-agent
instruments sensitive class library methods with calls to this module, in order to enforce the controls.
This feature is currently under development, and it is completely disabled by default (the agent is not loaded). To enable it, run Elasticsearch with
./gradlew run --entitlements