-
Notifications
You must be signed in to change notification settings - Fork 286
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove special handling for do_not_fail_on_forbidden on cluster actions #4486
Remove special handling for do_not_fail_on_forbidden on cluster actions #4486
Conversation
98dd626
to
7cd04a8
Compare
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #4486 +/- ##
==========================================
- Coverage 65.27% 65.24% -0.03%
==========================================
Files 313 313
Lines 22058 22045 -13
Branches 3563 3559 -4
==========================================
- Hits 14398 14384 -14
+ Misses 5889 5887 -2
- Partials 1771 1774 +3
|
8aaf278
to
09bb8c5
Compare
This special handling does not provide any benefits - rather it just causes some inconsistent behavior. Fixes opensearch-project#4485 Signed-off-by: Nils Bandener <[email protected]>
09bb8c5
to
fba55ac
Compare
To avoid any confusion: Yes, this is already complete. The only code-change not related to tests is the removal of the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, re-running CI, cuz that seems like fail due to flaky
f37399e
into
opensearch-project:main
…ns (#4486) Signed-off-by: Nils Bandener <[email protected]> (cherry picked from commit f37399e) Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
The special handling for
do_not_fail_on_forbidden
on cluster actions does not provide any benefits - rather it just causes some inconsistent behavior. See #4485 for the details.This is part of the work done for #3870
Description
do_not_fail_on_forbidden
set totrue
and tofalse
will need the same set of privileges for multi actions and scroll actions. The need to specifyindices:data/read/mget
,indices:data/read/msearch
,indices:data/read/mtv
,indices:data/read/scroll
andindices:data/read/search/template/render
as index permissions in the roles config will go away.Issues Resolved
Testing
DoNotFailOnForbiddenTests
have been adapted.Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.