diff --git a/shield/src/main/java/org/elasticsearch/shield/authz/Privilege.java b/shield/src/main/java/org/elasticsearch/shield/authz/Privilege.java
index 8e628870e54..d74182b0c6a 100644
--- a/shield/src/main/java/org/elasticsearch/shield/authz/Privilege.java
+++ b/shield/src/main/java/org/elasticsearch/shield/authz/Privilege.java
@@ -150,7 +150,7 @@ public abstract class Privilege<P extends Privilege<P>> {
         public static final Index SEARCH =          new Index("search",         SearchAction.NAME + "*", MultiSearchAction.NAME + "*", SuggestAction.NAME + "*");
         public static final Index GET =             new Index("get",            GetAction.NAME + "*", MultiGetAction.NAME + "*");
         public static final Index SUGGEST =         new Index("suggest",        SuggestAction.NAME + "*");
-        public static final Index INDEX =           new Index("index",          "indices:data/write/index*", "indices:data/write/update");
+        public static final Index INDEX =           new Index("index",          "indices:data/write/index*", "indices:data/write/update*");
         public static final Index DELETE =          new Index("delete",         "indices:data/write/delete*");
         public static final Index WRITE =           new Index("write",          "indices:data/write/*");
 
diff --git a/shield/src/test/resources/org/elasticsearch/transport/handlers b/shield/src/test/resources/org/elasticsearch/transport/handlers
index 094ea355ae8..0abef1e44f4 100644
--- a/shield/src/test/resources/org/elasticsearch/transport/handlers
+++ b/shield/src/test/resources/org/elasticsearch/transport/handlers
@@ -46,6 +46,7 @@ indices:data/write/bulk[s]
 indices:data/write/bulk[s][r]
 indices:data/write/delete[r]
 indices:data/write/index[r]
+indices:data/write/update[s]
 indices:monitor/recovery[s]
 indices:monitor/segments[s]
 indices:monitor/shard_stores