GET /_all API's response includes closed indices with a alias on security enabled clusters, which varies from that on security not enabled clusters

[bydeath]

Elasticsearch version (bin/elasticsearch --version):Version: 7.13.2, Build: default/tar/4d960a0733be83dd2543ca018aa4ddc42e956800/2021-06-10T21:01:55.251515791Z, JVM: 16

Plugins installed: []

JVM version (java -version):16

OS version (uname -a if on a Unix-like system):Ubuntu 20.04.2 LTS

Description of the problem including expected versus actual behavior: I think the responses of GET /_all should be same despite of whether security is enabled. But I find the response doesn't include closed indices with alias when access /_all API on security not enabled elasticsearch clusters, while it varies from the response when access /_all API on security enabled elasticsearch clusters. Why?
Steps to reproduce:

Please include a minimal but complete recreation of the problem, including (e.g.) index creation, mappings, settings, query etc. The easier you make for us to reproduce it, the more likely that somebody will take the time to look at it.

1. Enable security of elasticsearch cluster, and http basic auth is required to access the cluster.
2. PUT test
3. PUT test/_alias/test_alias
4. POST test/_close
5. GET _all
6. Disable security of the elasticsearch cluster, GET _all and compare the response with step 5.

Provide logs (if relevant):

[elasticmachine]

Pinging @elastic/es-security (Team:Security)

[tvernum]

This is the same underlying issue as https://github.com/elastic/elasticsearch/issues/32238

[DeeStarks]

I'm having the same issue as this too

[marekduciuc]

Still not fixed in 7.15.1