Module org.elasticsearch.xcore
Package org.elasticsearch.xpack.core.security.authz.privilege
package org.elasticsearch.xpack.core.security.authz.privilege
-
ClassDescriptionA
NamedClusterPrivilegethat can be used to define an access to cluster level actions.An application privilege has an application name (e.g.AnApplicationPrivilegeDescriptoris a representation of a storedApplicationPrivilege.This interface represents a privilege that is used to control access to cluster level actions.Translates cluster privilege names into concrete implementationsA ConfigurableClusterPrivilege is a form ofClusterPrivilegethat can be configured by an Elasticsearch security administrator within aRoleDescriptor.Categories exist for to segment privileges for the purposes of rendering to XContent.Static utility class for working withConfigurableClusterPrivilegeinstancesConfigurable cluster privileges for ES|QL datasource operations underglobal.data_sourcein role definitions.TheManageApplicationPrivilegesprivilege is aConfigurableClusterPrivilegethat grants the ability to execute actions related to the management of application privileges (Get, Put, Delete) for a subset of applications (identified by a wildcard-aware application-name).TheConfigurableClusterPrivileges.WriteProfileDataPrivilegesprivilege is aConfigurableClusterPrivilegethat grants the ability to write thedataandaccesssections of any user profile.Provides additionalRoleDescriptor.IndicesPrivilegesthat should be implicitly granted based on a user's application privileges.A predicate to capture role access byIndexComponentSelector.The name of an index related action always being with `indices:` followed by a sequence of slash-separated terms that generally describes the hierarchy (from broader to more specific) of the action.Named cluster privilege for managing API keys owned by the current authenticated user.AClusterPrivilegethat has a name.A single application-privilege grant on a role, after the role's requested privilege names have been resolved against the storedApplicationPrivilegeDescriptors.