When testing with aliases, it seems that Kibana is requesting * (or all aliases) with each request. Search-Guard is comparing my allowed aliases (test*) to this and deciding it doesn’t match. Is there some way to tell Search-Guard to compare to the returned aliases rather than the requested ones? If Kibana requests all aliases, and it turns out that an index has an alias test-2015-07-01, search-guard will block based on the * request, and never allow the search.
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Index Alias - Allows too much or not enough permission | 4 | 760 | October 24, 2018 | |
| Alias permissions on index_pattern else than "*" possible? | 3 | 1757 | October 19, 2020 | |
| Querying missing index causes security exception | 12 | 3081 | August 2, 2019 | |
| User can't see docs in alias, although he has access to alias (but not indices directly) | 5 | 435 | July 18, 2018 | |
| Alias Filter do not work with Search Guard on ES 7.8.0 | 15 | 1166 | September 10, 2020 |