X-Pack watcher permissions

I wanted to understand how the watcher permissions is working .

for example i am a user with permission to index x but i don't have a permission to index y .

currently i have permission watcher/admin ,
does this mean i can write a watcher for index y ?

if yes it look like a by pass because i can send results to my email by this watcher .


By that you mean you have a role that gives you manage_watcher privilege ?

If you create the watch, the watch will run with your user privileges, so it will only be able read index x.

Hope this clarifies things for you

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.