Procházet zdrojové kódy

Revert "[Fleet] add privileges to `kibana_system` to read integrations data (#132400)" (#132499)

This reverts commit 364c70e02e036abd3aaca07a9b8eaa303f1c25bd.
Julia Bardi před 2 měsíci
rodič
revize
e6103ba6e0

+ 0 - 2
x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

@@ -328,8 +328,6 @@ class KibanaOwnedReservedRoleDescriptors {
                         "indices:admin/data_stream/lifecycle/put"
                     )
                     .build(),
-                // Read datasets for auto install content packages feature in Fleet
-                RoleDescriptor.IndicesPrivileges.builder().indices("logs-*", "metrics-*", "traces-*").privileges("read").build(),
                 // Endpoint specific action responses. Kibana reads and writes (for third party
                 // agents) to the index to display action responses to the user.
                 // `create_index`: is necessary in order to ensure that the DOT datastream index is

+ 1 - 4
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

@@ -1397,10 +1397,7 @@ public class ReservedRolesStoreTests extends ESTestCase {
                 || indexName.startsWith(".logs-endpoint.actions-")
                 || indexName.startsWith(".logs-endpoint.action.responses-")
                 || indexName.startsWith(".logs-endpoint.heartbeat-")
-                || indexName.startsWith(".logs-osquery_manager.actions-")
-                || indexName.startsWith("logs-")
-                || indexName.startsWith("metrics-")
-                || indexName.startsWith("traces-");
+                || indexName.startsWith(".logs-osquery_manager.actions-");
             assertThat(
                 kibanaRole.indices().allowedIndicesMatcher(TransportGetAction.TYPE.name()).test(indexAbstraction),
                 is(isAlsoReadIndex)