security: [BUG] Restoring snapshot: indices exclusion triggers security_exception (creating OK, listing OK)

Describe the bug I’m using the S3 repository plugin to store snapshots. I’ve have tested this previously with the same scripting, but now I can’t restore snapshots anymore. Don’t know the exact cause, two things have changed: I have moved to 1.2.4 and I have moved from SAML to openid. The calls for the snapshot create/restore/list/etc are still being done through basic auth.

The strange thing is, I can list all the snapshots, I can create snapshots, I just can’t restore them. I’m not including global state or the security index:

Error:

{
    "error": {
        "root_cause": [
            {
                "type": "security_exception",
                "reason": "no permissions for [] and User [name=admin_XXXX, backend_roles=[admin], requestedTenant=null]"
            }
        ],
        "type": "security_exception",
        "reason": "no permissions for [] and User [name=admin_XXXX, backend_roles=[admin], requestedTenant=null]"
    },
    "status": 403
}

Listing works:

Creating snapshot works:

Restoring fails:

all_access is mapped to the admin backend role:

Expected behavior Snapshot is restored

Plugins Default docker 1.2.4 plus s3 repo plugin Also tried default docker 1.1 plus s3 repo plugin

Screenshots If applicable, add screenshots to help explain your problem.

Host/Environment (please complete the following information): Docker 1.2.4 image on kubernetes

Additional context Add any other context about the problem here.