David Roberts 3ea49557fe Add cluster:admin/analyze permission to Kibana system role (#52259) ...

This is to support the ML categorization wizard.

Currently cluster:admin/analyze is only provided with the
"manage" cluster privilege, which is an excessive privilege
level to provide access to this single feature.  It means
that the ML categorization wizard only works for extremely
highly privileged users.

Following this change the Kibana system user will be
permitted to run the _analyze endpoint on supplied strings
(not on an index).  The ML UI will then call the _analyze
endpoint as the Kibana system user after first checking
that the logged-in user is permitted to create an ML job.
This will mean that users with the more reasonable
"manage_ml" cluster privilege will be permitted to use
the ML categorization wizard.

(This is also consistent with the way the ML UI will access
_all_ Elasticsearch functionality when the "ML in Spaces"
project is completed.)

Closes #51391
Relates elastic/kibana#57375

2020-02-13 11:01:27 +00:00

..

forbidden

Ensure SHA256 is not used in tests (#42289)

2019-05-22 09:54:24 +03:00

licenses

Update http-core and http-client dependencies (#46549)

2019-09-12 09:45:29 +02:00

src

Add cluster:admin/analyze permission to Kibana system role (#52259)

2020-02-13 11:01:27 +00:00

build.gradle

Formalize build snapshot (#51484)

2020-01-27 16:56:31 -05:00

snapshot.key

…