Skip to content

Commit 8f08803

Browse files
Synchronize all permissions from latest OpenSearch (#1333) (#1341)
We've noticed there are some permissions in OpenSearch that are not included in the UX dropdown of the security-dashboards-plugin Signed-off-by: Peter Nied <[email protected]> Co-authored-by: Craig Perkins <[email protected]> (cherry picked from commit e5c0588)
1 parent f159501 commit 8f08803

File tree

1 file changed

+37
-0
lines changed

1 file changed

+37
-0
lines changed

public/apps/configuration/constants.tsx

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,11 +30,27 @@ export const API_ENDPOINT_PERMISSIONS_INFO = API_PREFIX + '/restapiinfo';
3030
export const API_ENDPOINT_CACHE = API_ENDPOINT + '/cache';
3131

3232
export const CLUSTER_PERMISSIONS: string[] = [
33+
'cluster:admin/component_template/delete',
34+
'cluster:admin/component_template/get',
35+
'cluster:admin/component_template/put',
36+
'cluster:admin/decommission/awareness/delete',
37+
'cluster:admin/decommission/awareness/get',
38+
'cluster:admin/decommission/awareness/put',
39+
'cluster:admin/indices/dangling/delete',
40+
'cluster:admin/indices/dangling/find',
41+
'cluster:admin/indices/dangling/import',
42+
'cluster:admin/indices/dangling/list',
3343
'cluster:admin/ingest/pipeline/delete',
3444
'cluster:admin/ingest/pipeline/get',
3545
'cluster:admin/ingest/pipeline/put',
3646
'cluster:admin/ingest/pipeline/simulate',
3747
'cluster:admin/ingest/processor/grok/get',
48+
'cluster:admin/nodes/reload_secure_settings',
49+
'cluster:admin/persistent/completion',
50+
'cluster:admin/persistent/remove',
51+
'cluster:admin/persistent/start',
52+
'cluster:admin/persistent/update_status',
53+
'cluster:admin/remotestore/restore',
3854
'cluster:admin/opendistro/ad/detector/delete',
3955
'cluster:admin/opendistro/ad/detector/info',
4056
'cluster:admin/opendistro/ad/detector/jobmanagement',
@@ -137,16 +153,23 @@ export const CLUSTER_PERMISSIONS: string[] = [
137153
'cluster:admin/opensearch/observability/get',
138154
'cluster:admin/opensearch/observability/update',
139155
'cluster:admin/reindex/rethrottle',
156+
'cluster:admin/repository/_cleanup',
140157
'cluster:admin/repository/delete',
141158
'cluster:admin/repository/get',
142159
'cluster:admin/repository/put',
143160
'cluster:admin/repository/verify',
144161
'cluster:admin/reroute',
162+
'cluster:admin/routing/awareness/weights/delete',
163+
'cluster:admin/routing/awareness/weights/get',
164+
'cluster:admin/routing/awareness/weights/put',
145165
'cluster:admin/script/delete',
146166
'cluster:admin/script/get',
147167
'cluster:admin/script/put',
168+
'cluster:admin/script_context/get',
169+
'cluster:admin/script_language/get',
148170
'cluster:admin/settings/update',
149171
'cluster:admin/snapshot/create',
172+
'cluster:admin/snapshot/clone',
150173
'cluster:admin/snapshot/delete',
151174
'cluster:admin/snapshot/get',
152175
'cluster:admin/snapshot/restore',
@@ -155,6 +178,8 @@ export const CLUSTER_PERMISSIONS: string[] = [
155178
'cluster:admin/tasks/cancel',
156179
'cluster:admin/tasks/test',
157180
'cluster:admin/tasks/testunblock',
181+
'cluster:admin/voting_config/add_exclusions',
182+
'cluster:admin/voting_config/clear_exclusions',
158183
'cluster:monitor/allocation/explain',
159184
'cluster:monitor/health',
160185
'cluster:monitor/main',
@@ -169,6 +194,7 @@ export const CLUSTER_PERMISSIONS: string[] = [
169194
'cluster:monitor/task',
170195
'cluster:monitor/task/get',
171196
'cluster:monitor/tasks/list',
197+
'cluster:monitor/tasks/list*',
172198
];
173199

174200
export function includeClusterPermissions(clusterPermissionsToInclude: string[]) {
@@ -182,6 +208,8 @@ export const INDEX_PERMISSIONS: string[] = [
182208
'indices:admin/aliases/exists',
183209
'indices:admin/aliases/get',
184210
'indices:admin/analyze',
211+
'indices:admin/auto_create',
212+
'indices:admin/block/add',
185213
'indices:admin/cache/clear',
186214
'indices:admin/close',
187215
'indices:admin/close*',
@@ -200,16 +228,21 @@ export const INDEX_PERMISSIONS: string[] = [
200228
'indices:admin/index_template/put',
201229
'indices:admin/index_template/simulate',
202230
'indices:admin/index_template/simulate_index',
231+
'indices:admin/mapping/auto_put',
203232
'indices:admin/mapping/put',
204233
'indices:admin/mappings/fields/get',
205234
'indices:admin/mappings/fields/get*',
206235
'indices:admin/mappings/get',
207236
'indices:admin/open',
208237
'indices:admin/refresh',
209238
'indices:admin/refresh*',
239+
'indices:admin/resize',
210240
'indices:admin/resolve/index',
211241
'indices:admin/rollover',
212242
'indices:admin/seq_no/global_checkpoint_sync',
243+
'indices:admin/seq_no/add_retention_lease',
244+
'indices:admin/seq_no/remove_retention_lease',
245+
'indices:admin/seq_no/renew_retention_lease',
213246
'indices:admin/settings/update',
214247
'indices:admin/shards/search_shards',
215248
'indices:admin/shrink',
@@ -230,6 +263,9 @@ export const INDEX_PERMISSIONS: string[] = [
230263
'indices:data/read/msearch/template',
231264
'indices:data/read/mtv',
232265
'indices:data/read/mtv*',
266+
'indices:data/read/point_in_time/create',
267+
'indices:data/read/point_in_time/delete',
268+
'indices:data/read/point_in_time/readall',
233269
'indices:data/read/scroll',
234270
'indices:data/read/scroll/clear',
235271
'indices:data/read/search',
@@ -245,6 +281,7 @@ export const INDEX_PERMISSIONS: string[] = [
245281
'indices:data/write/update',
246282
'indices:data/write/update/byquery',
247283
'indices:monitor/data_stream/stats',
284+
'indices:monitor/point_in_time/segments',
248285
'indices:monitor/recovery',
249286
'indices:monitor/segments',
250287
'indices:monitor/settings/get',

0 commit comments

Comments
 (0)