Index permissions should not be assigned to cluster permissions and vice versa

[spapadop]

I know the following is not important, just a nice-to-have feature. I'm using the latest opendistro 1.13.2 version.

At the moment, one can assign index permissions (e.g. indices_all) to the cluster permissions tab within Kibana UI: Security > Roles > Edit role.

Likewise, when defining index permissions, suggestions like cluster_all, cluster_monitor, etc. pop up in the drop-down list.

If I am not mistaken these cases do not make sense, thus it would be optimal that the auto-complete suggestions are relevant to the permissions one is trying to define i.e. only cluster:* permission (groups) for cluster permissions and only indices:* permission (groups) for index permissions.

Going one step forward, if user anyway enters the wrong group of permissions an error/warning should occur, letting him know that it doesn't make sense.

Please let me know if my suggestion is unclear.

[stephen-crawford]

[Triage] @opensearch-project/transfer-request could you please move this over to the @opensearch-project/security-analytics-dashboards-plugin? Thank you. @cwperks feel free to close if you find a duplicate there already. Thank you.

[cwperks]

I thought an issue existed for this, but couldn't find the existing issue. I filed a similar issue for action groups (#1346) but the issue filed here is on individual permissions which is also a problem. @opensearch-project/transfer-request Can you transfer this issue to security-dashboards-plugin?

[stephen-crawford]

[Triage] This is a similar issue to #1346. These issues could be resolved at the same time and would make a good first issue.