Nils Bandener

So far, I gather from the opinions that the main proposal "Drop support V6 configuration file formats" is not a short-term thing, but should be done for OpenSearch 3. Regarding...

@scrawfor99 @cwperks @peternied @DarshitChanpura How shall we proceed with the question here? https://github.com/opensearch-project/security/issues/4493#issuecomment-2198024256 In order to illustrate the alternative proposal "Behind the scenes conversion from V6 to V7", I have...

@cwperks @DarshitChanpura @stephen-crawford @peternied One more data point, which I found while working on https://github.com/opensearch-project/security/pull/4546 : - At the moment, there are no integration tests which verify that OpenSearch security...

@cwperks > Any idea what that last version was that supported V6 models? I have to correct myself a bit, I did the mistake of looking only at `main`. In...

@cwperks yes!

@DarshitChanpura > Proposal on path forward for scopes: Thank you for the proposals! Before I am going into the proposals, I'd like to go one step back and try to...

@cwperks @DarshitChanpura Thank you for your replies! I think a part of my personal confusion is caused by the fact that the word "scope" can mean so many things. It...

@Jakob3xD thank you for the report! The relevant code path that is mentioned in the stack trace relates to assigning privileges to the member indices of aliases: https://github.com/opensearch-project/security/blob/c9e0edc61e21b6436589020c1314982139d17315/src/main/java/org/opensearch/security/privileges/ActionPrivileges.java#L1026-L1031 However, the...

I see. It seems that this is a case that was not considered when the ActionPrivileges class was designed. The fix should be fairly easy, will look at it right...

@shikharj05 > Thanks for the quick check here. As a side note, DLS/FLS implementation might also need changes to consider data streams? I checked the code and the DLS/FLS implementation...