[BUG] Add security_tenant parameter for short links

opensearch-project / security-dashboards-plugin

🔐 Manage your internal users, roles, access control, and audit logs from OpenSearch Dashboards

https://opensearch.org/docs/latest/security-plugin/index/

Apache License 2.0

66 stars 148 forks source link

[BUG] Add security_tenant parameter for short links #1970

Open mxmorin opened 1 month ago

mxmorin commented 1 month ago

Describe the bug

When a link is generated on a dashboard or saved query, the initial tenant is not specified. A user whose current tenant is not that of the link cannot access the dashboard. Adding the ?security_tenant parameter allows access to the dashboard Could you add this parameter on all links ?

Expected behavior The dashboard should be accessible regardless of the current tenant.

OpenSearch Version 2.12

Dashboards Version 2.12

HenryTheSir commented 1 month ago

Same applies for the recently viewed part of opensearch dashboards, if in the wrong tentant the link is a dead link.

kavilla commented 1 month ago

@opensearch-project/admin can you please move this to Security Dashboards repo?

scrawfor99 commented 1 month ago

[Triage] Hi @mxmorin thank you for filing this issue. This seems like a reasonable feature to add. Please feel free to open a PR introducing this change for review.