elastic / elastic/stack-docs

Clarify File-based grants are not visible with API calls

Offen
#211 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
:Security
Vorherrschende Sprache
Java
Sterne
105
Forks
249
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

The following is true of all versions: The APIs (user, role, role mapping) only work with objects that were defined via the API.

Objects (users, roles, mappings) defined in files need to be managed via the files (or the `users` CLI tool which uses the files).

API exploration calls (and consecutively, Kibana) will not report roles and mappings defined in files.

Example, where role production_user is defined in roles.yml and user "test" is a file realm user created with the users CLI tool.

```
curl -X GET -u test:password http://localhost:9200/_xpack/security/_authenticate
{"username":"test","roles":["production_user"],"full_name":null,"email":null,"metadata":{},"enabled":true}[root@localhost x-pack]#

curl -X GET -u test:password http://localhost:9200/_xpack/security/role/production_user
{}

curl -X GET -u elastic:password http://localhost:9200/_xpack/security/user/test
{}
```

Some places to update docs to reflect this behavior:

https://www.elastic.co/guide/en/elastic-stack-overview/6.6/defining-roles.html#roles-management-file

https://www.elastic.co/guide/en/elastic-stack-overview/6.6/mapping-roles.html#mapping-roles-file

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.