Authorize query read when creating a policy from query_id

When creating a fleet or global policy from an existing query (via
query_id) load the referenced query and authorize ActionRead on it
before its fields are copied, in both fleet policies and global
policies.

This commit is contained in:

Juan Fernandez

2026-06-24 08:27:53 -04:00

committed by

GitHub

parent 2e62d6ab7b

commit 25973b3974

5 changed files with 196 additions and 0 deletions

changes/16291-policy-query-id-authz

View File

				`@@ -0,0 +1 @@`
				`* Improved query validation logic around policy creation.`