Fixes

elastic · Nov 27, 2024 · ae17618 · ae17618
1 parent f78b271
commit ae17618
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/x-pack/plugins/security/server/authorization/api_authorization.ts b/x-pack/plugins/security/server/authorization/api_authorization.ts
@@ -116,7 +116,10 @@ export function initAPIAuthorization(
               : [privilegeEntry];
 
           for (const privilege of privileges) {
-            if (isReservedPrivilegeSet(privilege)) {
+            if (
+              isReservedPrivilegeSet(privilege) &&
+              !acc.requestedReservedPrivileges.includes(privilege)
+            ) {
               acc.requestedReservedPrivileges.push(privilege);
             } else {
               acc.requestedPrivileges.push(privilege);