-
Notifications
You must be signed in to change notification settings - Fork 68
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Change Delete name path to OpenSearch #214
Change Delete name path to OpenSearch #214
Conversation
Signed-off by: David Cui <davidcui@amazon.com>
Fixing #187 |
Updated PR description, good catch |
What's the user impact of this issue? can't delete report definition? |
when did we rename it to opensearch? I thought we are keeping cluster permissions same as in ODFE |
Pretty sure this was part of the original migration- delete is the only path within |
No reported customer impact yet, but I feel we should not have leftover opendistro references in the codebase. Will have to look into what implications there are for security, but as pointed out in response to Josh's comment, |
I still feel like if secuirty plugin defaults are still using opendistro, while we use opensearch. There will be issue with permissioning. I suggest you try it out using our build-in artifacts, or docker image. Create a user with only predefined role for reporting, just enough permission for reporting, to see if it breaks @davidcui1225 |
#55 (comment) I commented in your PR previously, I thought you reverted them? we should not be using opensearch for cluster permissions |
I guess I accidentally just reverted |
I see, might need some discussion. I'm worried that users are using the new cluster permissions now |
Do we loop in someone from security on this? I'm not too familiar with the reporting security permissions |
Closing this PR as it is superceded by #218 |
Signed-off by: David Cui davidcui@amazon.com
Description
Refactor the name path for DeleteReportDefinitionAction from
opendistro
toopensearch
.Issues Resolved
#187
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.