Open
Description
Different SQL queries require different permission in OpenSearch security plugin. For example, simple SELECT needs search and getmapping permission while JOIN needs scroll for loading data in batch. Other examples include SHOW statement, Nested loop join, DELETE statement etc.
We need to document permission required by each statement clearly and see if any changes to make in security plugin repo. Reference PR: #777