Skip to content

[DOCS][8.x]:Update depreciation notice for index mapping updates privileges #130916

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: 8.19
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 20 additions & 18 deletions docs/reference/security/authorization/privileges.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -328,11 +328,11 @@ be mapped rather than an explicit <<indices-put-mapping,update mapping>> request
`create`::
Privilege to index documents.
+
deprecated:[8.0] Also grants the permission to update the index mapping (but
not the data streams mapping), using
the {ref}/indices-put-mapping.html[updating mapping API] or by relying on
{ref}/dynamic-mapping.html[dynamic field mapping]. In a future major release,
this privilege will not grant any mapping update permissions.
IMPORTANT: Starting from 8.0, this privilege no longer grants the permission
to update index mappings. In earlier versions, it implicitly permitted index mapping
updates (excluding data stream mappings) via the {ref}/indices-put-mapping.html[updating mapping API]
or through {ref}/dynamic-mapping.html[dynamic field mapping].
Mapping update capabilities will be fully removed in a future major release.
+
--
NOTE: This privilege does not restrict the index operation to the creation
Expand All @@ -346,11 +346,11 @@ privilege for an alternative.
Privilege to index documents.
It does not grant the permission to update or overwrite existing documents.
+
deprecated:[8.0] Also grants the permission to update the index mapping (but
not the data streams mapping), using
the {ref}/indices-put-mapping.html[updating mapping API] or by relying on
{ref}/dynamic-mapping.html[dynamic field mapping]. In a future major release,
this privilege will not grant any mapping update permissions.
IMPORTANT: Starting from 8.0, this privilege no longer grants the permission
to update index mappings. In earlier versions, it implicitly permitted index mapping
updates (excluding data stream mappings) via the {ref}/indices-put-mapping.html[updating mapping API]
or through {ref}/dynamic-mapping.html[dynamic field mapping].
Mapping update capabilities will be fully removed in a future major release.
+
--
[NOTE]
Expand Down Expand Up @@ -403,11 +403,11 @@ Privilege to delete an index or data stream.
`index`::
Privilege to index and update documents.
+
deprecated:[8.0] Also grants the permission to update the index mapping (but
not the data streams mapping), using
the {ref}/indices-put-mapping.html[updating mapping API] or by relying on
{ref}/dynamic-mapping.html[dynamic field mapping]. In a future major release,
this privilege will not grant any mapping update permissions.
IMPORTANT: Starting from 8.0, this privilege no longer grants the permission
to update index mappings. In earlier versions, it implicitly permitted index mapping
updates (excluding data stream mappings) via the {ref}/indices-put-mapping.html[updating mapping API]
or through {ref}/dynamic-mapping.html[dynamic field mapping].
Mapping update capabilities will be fully removed in a future major release.

`maintenance`::
Permits refresh, flush, synced flush and force merge index administration operations.
Expand Down Expand Up @@ -468,9 +468,11 @@ Privilege to perform all write operations to documents, which includes the
permission to index, update, and delete documents as well as performing bulk
operations, while also allowing to dynamically update the index mapping.
+
deprecated:[8.0] It also grants the permission to update the index mapping (but
not the data streams mapping), using the {ref}/indices-put-mapping.html[updating mapping API].
This will be retracted in a future major release.
IMPORTANT: Starting from 8.0, this privilege no longer grants the permission
to update index mappings. In earlier versions, it implicitly permitted index mapping
updates (excluding data stream mappings) via the {ref}/indices-put-mapping.html[updating mapping API]
or through {ref}/dynamic-mapping.html[dynamic field mapping].
Mapping update capabilities will be fully removed in a future major release.


==== Run as privilege
Expand Down