[BUG] Need for invalid permission clean up?

[peternied]

What is the bug?
Coming from #1481, there is a possiblity that users have used the Dashboards dropdown to create permissions object were a cluster permission was included in the list of index permissions. These permissions might be creating confusion since they are not authorizing actions as expected.

How can one reproduce the bug?
Steps to reproduce the behavior:

1. Edit permission on a role
2. Select the index permissions
3. Select the permission indices:data/write/reindex and apply it
4. Attempt to run a reindex with an account that uses that role

What is the expected behavior?
Reindex should fail because permission really weren't granted, it should be clear how the permissions should be modified to grant that permission

[peternied]

@setiah Could you weigh in if you think this requires are migration to detect these invalid configurations and the appropriate action to take on them (Delete the invalid permission, create the correct permission on the role)?

[DarshitChanpura]

[Triage] @setiah Would you please add you thoughts here?

[peternied]

[Triage] I don't think its clear that this would be high value for security plugin users - this area will be approached when permissions declarations are revisited