Skip to content

Conversation

@jrodewig
Copy link
Contributor

Clarifies that the creation of a derived key requires a role descriptor with no privileges.
The previous wording implied that a derived key could be created with privileges.

Fixes #57572

@jrodewig jrodewig added >docs General docs changes :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) v7.6.3 v7.7.2 v7.8.2 v7.10.0 v7.9.1 labels Jul 23, 2020
@jrodewig jrodewig requested a review from ywangd July 23, 2020 21:02
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-docs (>docs)

@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (:Security/Authentication)

@elasticmachine elasticmachine added Team:Security Meta label for security team Team:Docs Meta label for docs team labels Jul 23, 2020
Copy link
Member

@ywangd ywangd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jrodewig jrodewig merged commit 08e1181 into elastic:7.x Jul 27, 2020
@jrodewig jrodewig deleted the docs__fix-derived-key-breaking-changes branch July 27, 2020 12:36
tvernum added a commit to tvernum/elasticsearch that referenced this pull request Sep 15, 2020
This updates the Create API Key reference document with
information about the limitations of derived API keys.

Since ES v7.6.0, API keys that are created from an API key (what we
refer to as "derived API keys" must be created with an empty
privileges list (to explicitly match the effective behaviour of all
earlier versions).

This information was included in the release notes, but didn't get
added to the API reference.

Relates: elastic#53647, elastic#54522, elastic#60154
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

>docs General docs changes :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) Team:Docs Meta label for docs team Team:Security Meta label for security team v7.6.3 v7.7.2 v7.8.2 v7.9.1 v7.10.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants