OpenSearch/x-pack/plugin/security
Albert Zaharovits 11881e7b50
Empty GetAliases authorization fix (#34444)
This fixes a bug about aliases authorization.
That is, a user might see aliases which he is not authorized to see.
This manifests when the user is not authorized to see any aliases
and the `GetAlias` request is empty which normally is a marking
that all aliases are requested. In this case, no aliases should be
returned, but due to this bug, all aliases will have been returned.
2018-10-23 18:50:20 +03:00
..
cli Upgrade forbiddenapis to 2.6 (#33809) 2018-10-23 12:06:46 +03:00
forbidden Migrate x-pack-elasticsearch source to elasticsearch 2018-04-20 15:29:54 -07:00
licenses LOGGING: Upgrade to Log4J 2.11.1 (#32616) 2018-08-06 14:56:21 +02:00
src Empty GetAliases authorization fix (#34444) 2018-10-23 18:50:20 +03:00
build.gradle Security: upgrade unboundid ldapsdk to 4.0.8 (#34247) 2018-10-03 12:31:19 -06:00