Improper Preservation Of Permissions

OpenSearch Security is vulnerable to Improper Preservation Of Permissions. The vulnerability exists in the isTenantAllowed function at PrivilegesInterceptorImpl.java which allows an attacker with read only access to create, edit, and delete operations on index metadata of dashboards...