Check if pluginUser

Signed-off-by: Craig Perkins <[email protected]>
opensearch-project · Dec 11, 2024 · ce80b7c · ce80b7c
1 parent 3e353c9
commit ce80b7c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/java/org/opensearch/security/privileges/ActionPrivileges.java b/src/main/java/org/opensearch/security/privileges/ActionPrivileges.java
@@ -442,7 +442,7 @@ PrivilegesEvaluatorResponse providesPrivilege(PrivilegesEvaluationContext contex
             }
 
             // 4: If plugin is performing the action, check if plugin has permission
-            if (this.usersToActionMatcher.containsKey(context.getUser().getName())) {
+            if (context.getUser().isPluginUser() && this.usersToActionMatcher.containsKey(context.getUser().getName())) {
                 WildcardMatcher matcher = this.usersToActionMatcher.get(context.getUser().getName());
                 if (matcher != null && matcher.test(action)) {
                     return PrivilegesEvaluatorResponse.ok();