Bug 1378702 - .all index is visible to ordinary user
Summary: .all index is visible to ordinary user
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Logging
Version: 3.2.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 3.2.1
Assignee: ewolinet
QA Contact: Xia Zhao
URL:
Whiteboard:
Depends On: 1380456
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-09-23 06:54 UTC by Xia Zhao
Modified: 2016-10-05 15:45 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Removing cluster-admin role from user after they had logged into Kibana. Consequence: User could still see '.all' alias when they weren't an admin though. Fix: Plugin responsible for updating Kibana mappings was updated to remove the mapping for '.all' if they were no longer a cluster-admin. Result: '.all' is removed as expected.
Clone Of:
Environment:
Last Closed: 2016-10-05 15:45:23 UTC
Target Upstream Version:

Attachments (Terms of Use)
es_log (4.25 KB, text/plain)
2016-09-23 08:01 UTC, Xia Zhao 		no flags Details
kibana_log (4.07 KB, text/plain)
2016-09-23 08:01 UTC, Xia Zhao 		no flags Details
fluentd_log (85 bytes, text/plain)
2016-09-23 08:02 UTC, Xia Zhao 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:2010 0 normal SHIPPED_LIVE OpenShift Container Platform logging-elasticsearch bug fix update 2016-10-05 19:44:59 UTC

Comment 1 Xia Zhao 2016-09-23 08:01:14 UTC 
Created attachment 1204024 [details]
es_log
Comment 2 Xia Zhao 2016-09-23 08:01:44 UTC 
Created attachment 1204025 [details]
kibana_log
Comment 3 Xia Zhao 2016-09-23 08:02:07 UTC 
Created attachment 1204026 [details]
fluentd_log
Comment 10 errata-xmlrpc 2016-10-05 15:45:23 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:2010
Note You need to log in before you can comment on or make changes to this bug.