opensearch-project / security

🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit logging as well as role-based access control on indices, documents, and fields
https://opensearch.org/docs/latest/security-plugin/index/
Apache License 2.0
181 stars 264 forks source link

[FEATURE] Remove hard coded action names, pull from core instead #4515

Open derek-ho opened 2 days ago

derek-ho commented 2 days ago

Is your feature request related to a problem? Hard coded action names like: https://github.com/opensearch-project/security/blob/main/src/main/java/org/opensearch/security/privileges/SecurityIndexAccessEvaluator.java#L113 should not exist, and instead we should pull from core. That way if there are future changes we are insulated. What solution would you like? Pull action names from core What alternatives have you considered? None Do you have any additional context? No