elasticsearch/libs/entitlement
Ryan Ernst 1b9249938d
Use dynamic policy for entitled test plugin (#121852) (#122096)
Like the plugin being testing, the entitled test plugin needs access to
dynamic elements (namely, file paths). This commit dynamically generates
the entitlement policy for the entitlted test plugin when it is
installed. It also adds using the file entitltlement as an example.
2025-02-08 08:54:43 +11:00
..
agent Dynamic entitlement agent (#116125) 2024-11-06 00:07:52 +01:00
asm-provider [Entitlements] Fix Entitlement initialization to work across multiple versions (#121192) (#121656) 2025-02-05 01:44:48 +11:00
bridge Use dynamic policy for entitled test plugin (#121852) (#122096) 2025-02-08 08:54:43 +11:00
qa Use dynamic policy for entitled test plugin (#121852) (#122096) 2025-02-08 08:54:43 +11:00
src Use dynamic policy for entitled test plugin (#121852) (#122096) 2025-02-08 08:54:43 +11:00
tools Entitlements tools: public callers finder (#116257) 2024-12-13 10:24:54 -05:00
build.gradle Add java version variants of entitlements checker (#116878) 2024-11-22 07:40:06 -08:00
entitlements-loading.svg Add a diagram of how entitlements loading works (#117513) 2024-12-05 15:53:17 -08:00
README.md Remove unused EntitlementInternals (#116473) 2024-11-08 16:08:54 +01:00

Entitlement library

This module implements mechanisms to grant and check permissions under the entitlements system.

The entitlements system provides an alternative to the legacy SecurityManager system, which is deprecated for removal. The entitlement-agent instruments sensitive class library methods with calls to this module, in order to enforce the controls.

This feature is currently under development, and it is completely disabled by default (the agent is not loaded). To enable it, run Elasticsearch with

./gradlew run --entitlements