Darshit Chanpura

Hi @tushar-kharbanda72 , This issue will be marked for next-release `v2.8.0` on (Apr 17) as that is the [code-freeze](https://opensearch.org/releases.html) date for `v2.7.0`. Please let me know if otherwise.

Tagging it to next release: `v2.8.0`

Hi @tushar-kharbanda72, This issue will be marked for next-release `v2.8.0` on (Apr 17) as that is the [code-freeze](https://opensearch.org/releases.html) date for `v2.7.0`. Please let me know if otherwise.

Tagging it for `v2.8.0`

Thank you @nibix for this RFC in depth. I like the approach of pre-computing the actions + index + role names. This would be easy for a fresh cluster, however,...

Thank you @nibix for the quick response! > For the basic (non-DLS/FLS) privilege evaluation, the logic is confined to the single node which processes the current action. If we do...

I like the overall approach here @nibix . I think I was confused about exclude index feature in roles, but I believe we don't support that yet. Do you think...

Thanks @dancristiancecoi. The changes seems in-line with the changes in core. Would you please look at backwards-compatibility failures?

> Have we considered replacing `OpenSearchRestTestCase` and creating a task triggered by `scripts/integtest.sh` that can send those parameters into the test cases? That is how these tests are configured currently...

When running it twice with this command: ```zsh ./gradlew integTest -Dtests.rest.cluster=localhost:9200 -Dtests.cluster=localhost:9200 -Dtests.clustername="opensearch-cluster" -Dhttps=true -Duser=admin -Dpassword= --tests "org.opensearch.indexmanagement.IndexStateManagementSecurityBehaviorIT.test add policy" ``` I couldn't reproduce it again: ```zsh ➜ index-management git:(2.12)...