Skip to content

[9.2] [User profiles] Strict user profile setting keys (#241213)#245267

Merged
kibanamachine merged 1 commit into
elastic:9.2from
kibanamachine:backport/9.2/pr-241213
Dec 4, 2025
Merged

[9.2] [User profiles] Strict user profile setting keys (#241213)#245267
kibanamachine merged 1 commit into
elastic:9.2from
kibanamachine:backport/9.2/pr-241213

Conversation

@kibanamachine
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 9.2:

Questions ?

Please refer to the Backport tool documentation

## Summary

Adds strict schema validation to the user profile update API endpoint
(/internal/security/user_profile/_data) to restrict the request body to
just allowed fields.

The PR also introduces some reasonable defaults for string length for
colors and initials.

### Checklist

Check the PR satisfies following conditions.

Reviewers should verify this PR satisfies this list as well.

- [ ] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
- [ ] [Flaky Test
Runner](https://ci-stats.kibana.dev/trigger_flaky_test_runner/1) was
used on any tests changed
- [ ] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
(cherry picked from commit 90fdc5f)
@kibanamachine kibanamachine added the backport This PR is a backport of another PR label Dec 4, 2025
@kibanamachine kibanamachine enabled auto-merge (squash) December 4, 2025 15:42
@kibanamachine kibanamachine merged commit 0c78ebc into elastic:9.2 Dec 4, 2025
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants