OpenSearch/server
Albert Zaharovits 11881e7b50
Empty GetAliases authorization fix (#34444)
This fixes a bug about aliases authorization.
That is, a user might see aliases which he is not authorized to see.
This manifests when the user is not authorized to see any aliases
and the `GetAlias` request is empty which normally is a marking
that all aliases are requested. In this case, no aliases should be
returned, but due to this bug, all aliases will have been returned.
2018-10-23 18:50:20 +03:00
..
licenses upgrade to a new snapshot of Lucene 8 (7d0a7782fa) (#33812) 2018-09-18 18:16:40 +02:00
src Empty GetAliases authorization fix (#34444) 2018-10-23 18:50:20 +03:00
build.gradle Upgrade forbiddenapis to 2.6 (#33809) 2018-10-23 12:06:46 +03:00