{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/elasticsearch/issues/32732","repository_url":"https://api.github.com/repos/elastic/elasticsearch","labels_url":"https://api.github.com/repos/elastic/elasticsearch/issues/32732/labels{/name}","comments_url":"https://api.github.com/repos/elastic/elasticsearch/issues/32732/comments","events_url":"https://api.github.com/repos/elastic/elasticsearch/issues/32732/events","html_url":"https://github.com/elastic/elasticsearch/pull/32732","id":349010845,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA3MjI1MzQ5","number":32732,"title":"Prevent chains in authorization_realms","user":{"login":"tvernum","id":2244393,"node_id":"MDQ6VXNlcjIyNDQzOTM=","avatar_url":"https://avatars0.githubusercontent.com/u/2244393?v=4","gravatar_id":"","url":"https://api.github.com/users/tvernum","html_url":"https://github.com/tvernum","followers_url":"https://api.github.com/users/tvernum/followers","following_url":"https://api.github.com/users/tvernum/following{/other_user}","gists_url":"https://api.github.com/users/tvernum/gists{/gist_id}","starred_url":"https://api.github.com/users/tvernum/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tvernum/subscriptions","organizations_url":"https://api.github.com/users/tvernum/orgs","repos_url":"https://api.github.com/users/tvernum/repos","events_url":"https://api.github.com/users/tvernum/events{/privacy}","received_events_url":"https://api.github.com/users/tvernum/received_events","type":"User","site_admin":false},"labels":[{"id":912837951,"node_id":"MDU6TGFiZWw5MTI4Mzc5NTE=","url":"https://api.github.com/repos/elastic/elasticsearch/labels/:Security/Authentication","name":":Security/Authentication","color":"0e8a16","default":false},{"id":912838209,"node_id":"MDU6TGFiZWw5MTI4MzgyMDk=","url":"https://api.github.com/repos/elastic/elasticsearch/labels/:Security/Authorization","name":":Security/Authorization","color":"0e8a16","default":false},{"id":94283388,"node_id":"MDU6TGFiZWw5NDI4MzM4OA==","url":"https://api.github.com/repos/elastic/elasticsearch/labels/review","name":"review","color":"0052cc","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-08-09T07:33:57Z","updated_at":"2018-08-20T07:43:37Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/elastic/elasticsearch/pulls/32732","html_url":"https://github.com/elastic/elasticsearch/pull/32732","diff_url":"https://github.com/elastic/elasticsearch/pull/32732.diff","patch_url":"https://github.com/elastic/elasticsearch/pull/32732.patch"},"body":"If realm \"A\" delegates authoriaation to realm \"B\" then it is not\r\npermissible for realm \"B\" to also be using delegated authorization.\r\nA realm which is in the value for \"authorization_realms\" must handle\r\nits own authorization.\r\n"},"comment":{"url":"https://api.github.com/repos/elastic/elasticsearch/issues/comments/414226253","html_url":"https://github.com/elastic/elasticsearch/pull/32732#issuecomment-414226253","issue_url":"https://api.github.com/repos/elastic/elasticsearch/issues/32732","id":414226253,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNDIyNjI1Mw==","user":{"login":"tvernum","id":2244393,"node_id":"MDQ6VXNlcjIyNDQzOTM=","avatar_url":"https://avatars0.githubusercontent.com/u/2244393?v=4","gravatar_id":"","url":"https://api.github.com/users/tvernum","html_url":"https://github.com/tvernum","followers_url":"https://api.github.com/users/tvernum/followers","following_url":"https://api.github.com/users/tvernum/following{/other_user}","gists_url":"https://api.github.com/users/tvernum/gists{/gist_id}","starred_url":"https://api.github.com/users/tvernum/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tvernum/subscriptions","organizations_url":"https://api.github.com/users/tvernum/orgs","repos_url":"https://api.github.com/users/tvernum/repos","events_url":"https://api.github.com/users/tvernum/events{/privacy}","received_events_url":"https://api.github.com/users/tvernum/received_events","type":"User","site_admin":false},"created_at":"2018-08-20T07:43:37Z","updated_at":"2018-08-20T07:43:37Z","author_association":"CONTRIBUTOR","body":"@albertzaharovits If you have a strong view that we should take a step back and redesign our approach to `authorization_realms`, then let's discuss that.\r\n\r\nWe expect this to be a relative niche feature (perhaps more common in Kerberos, but not very common elsewhere), so we're trying to balance:\r\n- making it relatively flexible/featured\r\n- building on top of existing features so it has a low maintenance cost (etc).\r\n- having it make sense to customers who need it\r\n- not confusing customers who don't use it\r\n- while also releasing it in a minor (BWC).\r\n\r\nIf we're going down the wrong path, let's talk - we've got time to revisit this before we merge to master, but I don't think _this_ PR is going to be the best place for that discussion."}}
{"actor":{"display_login":"tvernum"}}