Skip to content

Commit

Permalink
Remove resolve fields action from read_cross_cluster (elastic#111643)
Browse files Browse the repository at this point in the history
The `indices:data/read/esql/resolve_fields` action is already granted by
`read`, and therefore is not necessary to be included in
`read_cross_cluster`. Since both privileges are required for ES|QL with
CCS it's safe to omit from `read_cross_cluster`.

It was added provisionally in
elastic#110738, but there are
subtle implications that make the permissions model of ES|QL slightly
more confusing when used with aliases and indices, so this PR removes
it.
  • Loading branch information
n1v0lg authored Aug 7, 2024
1 parent b7ccf43 commit b0a486d
Showing 1 changed file with 0 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,6 @@ public final class IndexPrivilege extends Privilege {
TransportClusterSearchShardsAction.TYPE.name(),
TransportSearchShardsAction.TYPE.name(),
TransportResolveClusterAction.NAME,
"indices:data/read/esql/resolve_fields",
"indices:data/read/esql",
"indices:data/read/esql/compute"
);
Expand Down

0 comments on commit b0a486d

Please sign in to comment.