Skip to content

authorization error message missing when deleting index #76617

@gbanasiak

Description

@gbanasiak

Kibana version: 7.9.0

Elasticsearch version: 7.9.0

Browser version: Chrome Version 85.0.4183.83 (Official Build) (64-bit)

Browser OS version: MacOS

Original install method (e.g. download page, yum, from source, etc.): ESS

Describe the bug:

When user has insufficient privileges to delete the index and attempts deleting the index, the 403 error message is not correctly propagated from ES (see screenshot).

Steps to reproduce:

  1. Grant kibana_admin role and the following role to user X:
{
  "test_role" : {
    "cluster" : [
      "monitor"
    ],
    "indices" : [
      {
        "names" : [
          "*"
        ],
        "privileges" : [
          "read",
          "monitor",
          "view_index_metadata"
        ],
        "field_security" : {
          "grant" : [
            "*"
          ],
          "except" : [ ]
        },
        "allow_restricted_indices" : false
      }
    ],
    "applications" : [ ],
    "run_as" : [ ],
    "metadata" : { },
    "transient_metadata" : {
      "enabled" : true
    }
  }
}
  1. Log into Kibana as user X
  2. Navigate to Stack Management -> Index Management and try removing an index.

Expected behavior:

ES authorization error action [indices:admin/delete] is unauthorized for user [XXX] should be propagated to the user.

Screenshots (if relevant):

Screenshot 2020-09-03 at 12 18 11

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team:Kibana ManagementDev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more t//triage_needed

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions