I'm building a plugin that would execute some custom authorization logic, namely integrating the OpenPolicyAgent into the authorization flow of ES. I have implemented the org.elasticsearch.xpack.core.security.authz.AuthorizationEngine interface in my plugin. It works as far as I'm seeing one method of my plugin being called by ES, but only that one (validateIndexPermissionsAreSubset).
The one where I see I could actually modify the authorization of the search or getting of documents is (as far as I understand from the docs) is authorizeIndexAction. That one however never get's called. But neither do resolveAuthorizationInfo or authorizeClusterAction. Can anyone help me out if I'm on the right track here and what could be the problem?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.