Point in time security changes (opensearch-project#1989)

Signed-off-by: Bharathwaj G <bharath78910@gmail.com>
ochprince · Aug 9, 2022 · 9ce8b4f · 9ce8b4f
1 parent e121c7d
commit 9ce8b4f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/src/main/resources/static_config/static_action_groups.yml b/src/main/resources/static_config/static_action_groups.yml
@@ -116,6 +116,7 @@ cluster_composite_ops:
   - "indices:admin/aliases*"
   - "indices:data/write/reindex"
   - "cluster_composite_ops_ro"
+  - "indices:data/read/point_in_time/delete"
   type: "cluster"
   description: "Allow read/write bulk and m* operations"
 cluster_composite_ops_ro:
@@ -130,6 +131,8 @@ cluster_composite_ops_ro:
   - "indices:admin/aliases/get*"
   - "indices:data/read/scroll"
   - "indices:admin/resolve/index"
+  - "indices:data/read/point_in_time/read*"
+  - "indices:data/read/point_in_time/create"
   type: "cluster"
   description: "Allow readonly bulk and m* operations"
 get:

diff --git a/src/main/resources/static_config/static_roles.yml b/src/main/resources/static_config/static_roles.yml
@@ -87,6 +87,7 @@ kibana_server:
   - "cluster_composite_ops"
   - "indices:admin/template*"
   - "indices:data/read/scroll*"
+  - "indices:data/read/point_in_time*"
   index_permissions:
   - index_patterns:
     - ".kibana"