Code

Limit service account permission#3607

Code

Merged

DarshitChanpura merged 24 commits intoopensearch-project:mainopensearch-project/security:mainfrom RyanL1997:service-acc-permissionRyanL1997/security:service-acc-permissionCopy head branch name to clipboardOct 31, 2023

+205-2

Commits

Commits on Oct 27, 2023

• Limit Service Accounts permissions

  Show description for a1a9c50
  RyanL1997

  committed
  a1a9c50

  Copy full SHA for a1a9c50

• Correct the key check for service account attribute

  Show description for 37a0954
  RyanL1997

  committed
  37a0954

  Copy full SHA for 37a0954

• Refactor the cluster permission filter of service accounts

  Show description for 57bf240
  RyanL1997

  committed
  57bf240

  Copy full SHA for 57bf240

• Add filter for service account access to non system indices

  Show description for a167919
  RyanL1997

  committed
  a167919

  Copy full SHA for a167919

• Fix import

  Show description for b421ac8
  RyanL1997

  committed
  b421ac8

  Copy full SHA for b421ac8

• Fix testSpecialUsernames() by make the test account non-service account

  Show description for 81aa19a
  RyanL1997

  committed
  81aa19a

  Copy full SHA for 81aa19a

• Refactor isServiceAccount() into User class

  Show description for 4142890
  RyanL1997

  committed
  4142890

  Copy full SHA for 4142890

• Update the accounts number in UserServiceUnitTests

  Show description for e0ce30d
  RyanL1997

  committed
  e0ce30d

  Copy full SHA for e0ce30d

• Minor fix of some formatting

  Show description for ccc3bea
  RyanL1997

  committed
  ccc3bea

  Copy full SHA for ccc3bea

• Remove the unused example

  Show description for 691b347
  RyanL1997

  committed
  691b347

  Copy full SHA for 691b347

• Initial setup of service account testing env

  Show description for 6d0a820
  RyanL1997

  committed
  6d0a820

  Copy full SHA for 6d0a820

Commits on Oct 28, 2023

• Add indices test case

  Show description for 8ecb683
  RyanL1997

  committed
  8ecb683

  Copy full SHA for 8ecb683

• Fix lint

  Show description for 1dc296b
  RyanL1997

  committed
  1dc296b

  Copy full SHA for 1dc296b

• Filter out the regular index when it is a mixed request with both system indices and regular indices

  Show description for ac9416e
  RyanL1997

  committed
  ac9416e

  Copy full SHA for ac9416e

Commits on Oct 29, 2023

• Finish the tests

  Show description for 0853252
  RyanL1997

  committed
  0853252

  Copy full SHA for 0853252

Commits on Oct 30, 2023

• Fix some comments

  Show description for ec67ff2
  RyanL1997

  committed
  ec67ff2

  Copy full SHA for ec67ff2

• Remove object mapper from the test case

  Show description for 1a811b1
  RyanL1997

  committed
  1a811b1

  Copy full SHA for 1a811b1

• Apply getName()

  Show description for c697f95
  RyanL1997

  committed
  c697f95

  Copy full SHA for c697f95

• Fix some comments

  Show description for fcf91eb
  RyanL1997

  committed
  fcf91eb

  Copy full SHA for fcf91eb

• Fix lint

  Show description for 4e0c3ad
  RyanL1997

  committed
  4e0c3ad

  Copy full SHA for 4e0c3ad

• Switch to reject the request, if this is a mixed situation

  Show description for 3a22b79
  RyanL1997

  committed
  3a22b79

  Copy full SHA for 3a22b79

• Refactor

  Show description for 2323a4a
  RyanL1997

  committed
  2323a4a

  Copy full SHA for 2323a4a

• Fix lint

  Show description for 0a6bd2d
  RyanL1997

  committed
  0a6bd2d

  Copy full SHA for 0a6bd2d

Commits on Oct 31, 2023

• Fix some comments

  Show description for 0c268bf
  RyanL1997

  committed
  0c268bf

  Copy full SHA for 0c268bf