Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Remove resolve fields action from read_cross_cluster (elastic#111643)
The `indices:data/read/esql/resolve_fields` action is already granted by `read`, and therefore is not necessary to be included in `read_cross_cluster`. Since both privileges are required for ES|QL with CCS it's safe to omit from `read_cross_cluster`. It was added provisionally in elastic#110738, but there are subtle implications that make the permissions model of ES|QL slightly more confusing when used with aliases and indices, so this PR removes it.
- Loading branch information