Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[APM] user can set an empty value for UI indices #52907

Closed
dgieselaar opened this issue Dec 12, 2019 · 1 comment · Fixed by #53541
Closed

[APM] user can set an empty value for UI indices #52907

dgieselaar opened this issue Dec 12, 2019 · 1 comment · Fixed by #53541
Assignees
Labels
bug Fixes for quality problems that affect the customer experience Team:APM All issues that need APM UI Team support v7.6.0

Comments

@dgieselaar
Copy link
Member

When the user is saving the UI indices settings, an empty value can be saved by filling in a value, and then removing it. This could break a query that uses the UI indices, because an empty index name leads to the following exception (string_index_out_of_bounds_exception):

server    log   [16:54:12.688] [error][http] { Error: [security_exception] action [indices:data/read/search] is unauthorized for user [admin]
    at respond (/Users/dariogieselaar/dev/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)
    at checkRespForFailure (/Users/dariogieselaar/dev/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)
    at HttpConnector.<anonymous> (/Users/dariogieselaar/dev/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)
    at IncomingMessage.wrapper (/Users/dariogieselaar/dev/kibana/node_modules/elasticsearch/node_modules/lodash/lodash.js:4929:19)
    at IncomingMessage.elasticAPMCallbackWrapper (/Users/dariogieselaar/dev/kibana/node_modules/elastic-apm-node/lib/instrumentation/index.js:309:27)
    at IncomingMessage.emit (events.js:194:15)
    at endReadableNT (_stream_readable.js:1103:12)
    at process._tickCallback (internal/process/next_tick.js:63:19)
  status: 403,
  displayName: 'AuthorizationException',
  message:
   '[security_exception] action [indices:data/read/search] is unauthorized for user [admin]',
  path: '/apm-*%2Capm-*%2C%2Capm-*/_search',
  query: { terminate_after: 1, ignore_throttled: true },
  body:
   { error:
      { root_cause: [Array],
        type: 'security_exception',
        reason:
         'action [indices:data/read/search] is unauthorized for user [admin]',
        caused_by: [Object] },
     status: 403 },
  statusCode: 403,
  response:
   '{"error":{"root_cause":[{"type":"security_exception","reason":"action [indices:data/read/search] is unauthorized for user [admin]"}],"type":"security_exception","reason":"action [indices:data/read/search] is unauthorized for user [admin]","caused_by":{"type":"string_index_out_of_bounds_exception","reason":"String index out of range: 0"}},"status":403}',
  toString: [Function],
  toJSON: [Function] }
@dgieselaar dgieselaar added bug Fixes for quality problems that affect the customer experience Team:APM All issues that need APM UI Team support v7.6.0 labels Dec 12, 2019
@elasticmachine
Copy link
Contributor

Pinging @elastic/apm-ui (Team:apm)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Team:APM All issues that need APM UI Team support v7.6.0
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants