opensearch-project / opensearch-project/security
Onboard anomaly-detection plugin to this new authorization mechanism
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 252
- Forks
- 395
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 76
Description
Description
Once the feature is code-complete, the next step would be to show a working PoC by on-boarding a plugin that manages resources. For this we've chosen anomaly-detection.
AD currently performs in-house authorization by extracting users roles and mapping them with roles present for a user on the resource.
This task aims at removing the functions/classes performing in-house authorization to then rely on security plugin to perform resource-authorization.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with anomaly-detection's src/main/java/org/opensearch/timeseries/util/ParseUtils.java around line 618 and review how its in-house authorization extracts roles and maps resource roles. Compare that flow with the security plugin's authorization mechanism; done means the anomaly-detection plugin relies on it and the in-house authorization functions/classes are removed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 28/100