Add "manage" permission for fleet managed threat intel indices (elast…

…ic#99231) (elastic#99915) * Add "manage" permission needed for creating and maintaining aliases of threat intel transforms
hendrikmuhs · Sep 27, 2023 · 1c2eeec · 1c2eeec
1 parent e23a476
commit 1c2eeec
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/docs/changelog/99231.yaml b/docs/changelog/99231.yaml
@@ -0,0 +1,5 @@
+pr: 99231
+summary: Add manage permission for fleet managed threat intel indices
+area: Authorization
+type: enhancement
+issues: []
diff --git a/...org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java b/...org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
@@ -281,13 +281,12 @@ static RoleDescriptor kibanaSystem(String name) {
                 RoleDescriptor.IndicesPrivileges.builder()
                     .indices("logs-ti_*_latest.*")
                     .privileges(
-                        // Require "create_index", "delete_index", "read", "index", "delete", IndicesAliasesAction.NAME, and
-                        // UpdateSettingsAction.NAME for transform
                         "create_index",
                         "delete_index",
                         "read",
                         "index",
                         "delete",
+                        "manage",
                         IndicesAliasesAction.NAME,
                         UpdateSettingsAction.NAME
                     )