-
Notifications
You must be signed in to change notification settings - Fork 8.5k
Closed
Labels
Team:Kibana ManagementDev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more t//Dev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more t//triage_needed
Description
Kibana version: 7.9.0
Elasticsearch version: 7.9.0
Browser version: Chrome Version 85.0.4183.83 (Official Build) (64-bit)
Browser OS version: MacOS
Original install method (e.g. download page, yum, from source, etc.): ESS
Describe the bug:
When user has insufficient privileges to delete the index and attempts deleting the index, the 403 error message is not correctly propagated from ES (see screenshot).
Steps to reproduce:
- Grant
kibana_adminrole and the following role to user X:
{
"test_role" : {
"cluster" : [
"monitor"
],
"indices" : [
{
"names" : [
"*"
],
"privileges" : [
"read",
"monitor",
"view_index_metadata"
],
"field_security" : {
"grant" : [
"*"
],
"except" : [ ]
},
"allow_restricted_indices" : false
}
],
"applications" : [ ],
"run_as" : [ ],
"metadata" : { },
"transient_metadata" : {
"enabled" : true
}
}
}
- Log into Kibana as user X
- Navigate to Stack Management -> Index Management and try removing an index.
Expected behavior:
ES authorization error action [indices:admin/delete] is unauthorized for user [XXX] should be propagated to the user.
Screenshots (if relevant):
Metadata
Metadata
Assignees
Labels
Team:Kibana ManagementDev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more t//Dev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more t//triage_needed
