Allow users with read role to use the async_search/status endpoint

elastic · Mar 20, 2024 · 88a711e · 88a711e
1 parent 82221ff
commit 88a711e
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/...e/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/IndexPrivilege.java b/...e/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/IndexPrivilege.java
@@ -75,14 +75,20 @@
 public final class IndexPrivilege extends Privilege {
  private static final Logger logger = LogManager.getLogger(IndexPrivilege.class);
 
- private static final Automaton ALL_AUTOMATON = patterns("indices:*", "internal:transport/proxy/indices:*");
+ private static final Automaton ALL_AUTOMATON = patterns(
+ "indices:*",
+ "internal:transport/proxy/indices:*",
+ "cluster:monitor/async_search/status"
+ );
  private static final Automaton READ_AUTOMATON = patterns(
  "indices:data/read/*",
+ "cluster:monitor/async_search/status",
  ResolveIndexAction.NAME,
  TransportResolveClusterAction.NAME
  );
  private static final Automaton READ_CROSS_CLUSTER_AUTOMATON = patterns(
  "internal:transport/proxy/indices:data/read/*",
+ "cluster:monitor/async_search/status",
  ClusterSearchShardsAction.NAME,
  TransportSearchShardsAction.TYPE.name(),
  TransportResolveClusterAction.NAME,