Open elasticmachine opened 7 years ago
Original comment by @skearns64:
I'm a fan of this in the long term. I wonder if we could get some mileage in the nearer term with a simpler change:
We could add a restriction such that a user (UserA) with the manage users and manage/assign roles privileges could not create roles that have more privileges than UserA has, and not only assign roles to users unless UserA has those roles. Basically, prevent anyone from granting themselves or anyone else more privileges than they have today. This means that the superuser would still have full power.
This approach would work in a multi-tenant scenario, where the cluster admin could provision a tenant-admin to manage access to their indexes, etc.
Original comment by @joshbressers:
From the forum https://discuss.elastic.co/t/security-discussion/83714
This could make sense for the user API.