【发布时间】：2019-07-22 13:18:29
【问题描述】：
我们最近将 Elasticsearch 从 6.4.3 升级到了 7.1.1。我将 searchguard 索引和配置迁移到了新格式。
在升级之前，我可以创建或恢复快照，现在，升级后，我仍然可以创建快照，但我无法恢复它们：
{
"error": {
"root_cause": [
{
"type": "security_exception",
"reason": "no permissions for [] and User [name=admin, roles=[admin], requestedTenant=null]"
}
],
"type": "security_exception",
"reason": "no permissions for [] and User [name=admin, roles=[admin], requestedTenant=null]"
},
"status": 403
}
如果我打开 SG 的调试日志记录，它会告诉我允许我的请求：
[2019-07-22T13:11:24,063][DEBUG][c.f.s.a.BackendRegistry ] [client-elasticsearch-cluster-0] Check authdomain for rest internal/0 or 2 in total
[2019-07-22T13:11:24,063][DEBUG][c.f.s.a.BackendRegistry ] [client-elasticsearch-cluster-0] Rest user 'User [name=admin, roles=[admin], requestedTenant=null]' is authenticated
[2019-07-22T13:11:24,063][DEBUG][c.f.s.a.BackendRegistry ] [client-elasticsearch-cluster-0] sgtenant 'null'
[2019-07-22T13:11:24,064][DEBUG][c.f.s.p.PrivilegesEvaluator] [client-elasticsearch-cluster-0] ### evaluate permissions for User [name=admin, roles=[admin], requestedTenant=null] on client-elasticsearch-cluster-0
[2019-07-22T13:11:24,064][DEBUG][c.f.s.p.PrivilegesEvaluator] [client-elasticsearch-cluster-0] action: cluster:admin/snapshot/restore (RestoreSnapshotRequest)
[2019-07-22T13:11:24,064][DEBUG][c.f.s.r.IndexResolverReplacer] [client-elasticsearch-cluster-0] Resolve aliases, indices and types from RestoreSnapshotRequest
[2019-07-22T13:11:24,064][DEBUG][c.f.s.p.PrivilegesEvaluator] [client-elasticsearch-cluster-0] requestedResolved : Resolved [aliases=[*], indices=[*], allIndices=[*], types=[*], originalRequested=[], remoteIndices=[]]
[2019-07-22T13:11:24,064][DEBUG][c.f.s.f.SearchGuardFilter] [client-elasticsearch-cluster-0] PrivEvalResponse [allowed=true, missingPrivileges=[], allowedFlsFields=null, maskedFields=null, queries=null]
我需要做什么才能在 ES 7 上恢复快照？自 6.4 以来发生了什么变化？
【问题讨论】：
-
@SearchGuard 我读到，唯一提到的与快照/恢复相关的更改是“快照/恢复处理的默认更改”。我还阅读了docs.search-guard.com/latest/…，并且我的用户确实具有
SGS_MANAGE_SNAPSHOTS角色，我通过 authinfo 调用对其进行了检查。
标签： elasticsearch restore snapshot search-guard