There is a bug in the Alerting feature of the OpenSearch Plugin: Although users can be granted the ability to view items on the Alerting monitor or alert pages by assigning them the alerting_read_access_new role (a new role copied from alerting_read_access), the Alerting Items cannot be isolated by Tenant. This means that as long as a user’s role includes alerting_read_access_new, they can see all Alerting Items across the entire system, even if I have added a tenant specific to this user in alerting_read_access_new.
Expected behavior
I hope this bug can be fixed in the next version so that user roles can isolate alerting items by tenant.
OpenSearch Version
2.15.0
Dashboards Version
2.15.0
Plugins
Alerting
Reporting
Host/Environment (please complete the following information):
Describe the bug
There is a bug in the Alerting feature of the OpenSearch Plugin: Although users can be granted the ability to view items on the Alerting monitor or alert pages by assigning them the alerting_read_access_new role (a new role copied from alerting_read_access), the Alerting Items cannot be isolated by Tenant. This means that as long as a user’s role includes alerting_read_access_new, they can see all Alerting Items across the entire system, even if I have added a tenant specific to this user in alerting_read_access_new.
Expected behavior I hope this bug can be fixed in the next version so that user roles can isolate alerting items by tenant.
OpenSearch Version 2.15.0
Dashboards Version 2.15.0
Plugins Alerting Reporting
Host/Environment (please complete the following information):