Skip to content

Built-in role "watcher_admin" doesn't grant write access. #37761

Closed
@gecharita

Description

@gecharita

Describe the feature:

Elasticsearch version (bin/elasticsearch --6.4.3):

Plugins installed: []

JVM version (1.8.0_201):

OS version (Linux Mint 18.3, Cinnamon 3.6.7, 64-bit):

Description of the problem including expected versus actual behavior:

The documentation says that the watcher_admin role:
Grants write access to the .watches index, read access to the watch history and the triggered watches index and allows to execute all watcher actions.

When I get the role, I can see that there is no write access configured:
"watcher_admin" : { "cluster" : [ "manage_watcher" ], "indices" : [ { "names" : [ ".watches", ".triggered_watches", ".watcher-history-*" ], "privileges" : [ "read" ] } ]

Metadata

Metadata

Assignees

No one assigned

    Labels

    :Security/AuthorizationRoles, Privileges, DLS/FLS, RBAC/ABAC>docsGeneral docs changes

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions