aeed1c05b0
AuthorizationService#authorize uses the thread context to carry the result of the authorisation as transient headers. The listener argument to the `authorize` method must necessarily observe the header values. This PR makes it so that the authorisation transient headers (`_indices_permissions` and `_authz_info`, but NOT `_originating_action_name`) of the child action override the ones of the parent action. Co-authored-by: Tim Vernum tim@adjective.org |
||
|---|---|---|
| .. | ||
| forbidden | ||
| licenses | ||
| src | ||
| build.gradle | ||
| snapshot.key | ||