HTTP API to list built-in permissions

[SlavaUtesinov]

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
OpenSearch 2.18.0
Dashboards 2.18.0
Operator 2.6.0

Describe the issue:
I can’t find an appropriate API to list built-in permissions(allowed_actions) like Permissions - OpenSearch Documentation At the first glance it has to be described here API - OpenSearch Documentation but it doesn’t.

Configuration:
default security config for mentioned OpenSearch version

Relevant Logs or Screenshots:
I can see these permissions at Dashboards:

where they come from OpenSearch HTTP API perspective?

It seems they are hardcoded into securityDashboards.plugin.js:

const CLUSTER_PERMISSIONS = ["cluster:admin/component_template/delete", "cluster:admin/component_template/get"
const INDEX_PERMISSIONS = ["indices:admin/aliases", "indices:admin/aliases/exists"

source - security-dashboards-plugin/public/apps/configuration/constants.tsx at 2.18.0.0 · opensearch-project/security-dashboards-plugin · GitHub

Thanks

[nateynate]

@SlavaUtesinov

where they come from OpenSearch HTTP API perspective?

Hi @SlavaUtesinov - I have to admit I don’t know the answer to this. I’ve checked every endpoint I can think of. I’ll ask around in our Slack instance.