OpenSearch/shield
jaymode d74de5acc8 shield: only wrap readers if the RequestContext can be located
Previously, when the RequestContext could not be located a FieldSubsetReader was returned that only
allowed meta fields to be read. This was done for safety in case there was an API missed so we did not
leak data. However, this causes issues because some requests in elasticsearch execute on a different
thread than the one with the RequestContext so we effectively lose this context and prevent access to
the fields in the document. This is especially problematic with update requests, because that means that
fields that aren't included in the updated document will be lost.

This commit removes the wrapping of the readers in this case and adds tests for bulk updates.

Closes elastic/elasticsearch#938

Original commit: elastic/x-pack-elasticsearch@74c8059da0
2015-11-11 13:26:49 -05:00
..
bin/shield update CLI tools to work with spaces in the home path 2015-09-11 11:15:19 -04:00
config/shield Added missing privileges for the marvel_user role 2015-10-15 18:03:00 -07:00
dev-tools [maven] fix build issues with artifactId renaming 2015-08-18 18:03:40 +02:00
docs Docs: Added uninstall topics to Watcher & Shield. Closes elastic/elasticsearch#801. 2015-11-05 17:54:35 -08:00
src shield: only wrap readers if the RequestContext can be located 2015-11-11 13:26:49 -05:00
LICENSE.txt Update LICENSE.txt for shield and watcher with new EULA 2015-10-20 15:47:00 +02:00
NOTICE.txt initial migration of shield 2015-07-13 12:31:34 +02:00
README.asciidoc initial migration of shield 2015-07-13 12:31:34 +02:00
TESTING.asciidoc Don't redundantly run rest tests in both unit and integ tests. 2015-08-03 22:04:33 -04:00
build.gradle Build: Remove transitive dependencies 2015-11-11 09:18:24 -08:00
test-signatures.txt initial migration of shield 2015-07-13 12:31:34 +02:00

README.asciidoc

= Elasticsearch Security Plugin

This plugins adds security features to elasticsearch

You can build the plugin with `mvn package`.

The documentation is put in the `docs/` directory.