jaymode eeb964c886 security: default role checks authenticating realm ...

This change makes the default role check the authenticating realm when authorizing
a request for the current user (or run as user) where the user is trying to change their
own password. We need to do this, otherwise we open up the potential of a user in one
realm changing the password of a user in another realm.

As part of this work, the authentication service has been refactored and simplified. A
new object, Authentication, is now returned when authenticating. Currently, this object
contains the user, authenticating realm information, and if it is a run as request the
information of the realm that looked up the user.

Closes elastic/elasticsearch#2089

Original commit: elastic/x-pack-elasticsearch@3fd9c37a16

2016-06-17 10:31:54 -04:00

..

license

Use Java's Base64 instead of elasticsearch's. elastic/elasticsearch#2282

2016-05-23 11:25:31 +02:00

qa

Simplify ScriptModule and script registration elastic/elasticsearchelastic/elasticsearch#18903 (elastic/elasticsearch#2535)

2016-06-16 09:35:16 +02:00

x-dev-tools

Release: Fix smoke test script to cope with latest changes in master

2016-05-26 12:32:16 +02:00

x-pack

security: default role checks authenticating realm

2016-06-17 10:31:54 -04:00

build.gradle

Change path separator for Checkstyle suppressions to be Windows compatible

2016-02-05 12:15:47 +01:00

checkstyle_suppressions.xml

Remove suppression and implement hashCode

2016-02-09 21:49:13 -05:00