Introduce opensearch_security.configuration.admin_pages_enabled
setting to be able to disable security admin pages
#1963
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Introduces an
opensearch_dashboards.yml
setting to be able to disable Security from the menu for all users. The setting isopensearch_security.configuration.admin_pages_enabled
, is true by default and needs to be explicitly disabled.Currently, the behavior is to display Security in the main menu only for a Security admin user. To determine whether a user is a Security admin, security-dashboards-plugin runs an API request and determines if the logged in user is mapped to one of the
plugins.security.restapi.roles_enabled
roles.Category
Enhancement
Issues Resolved
Testing
Manual testing to ensure disabling the Security screens doesn't cause any other issues. The user still needs to be able to reset their password, view their user info and switch tenants.
Marking this as Draft until functional tests are added.
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.