When testing with aliases, it seems that Kibana is requesting * (or all aliases) with each request. Search-Guard is comparing my allowed aliases (test*) to this and deciding it doesn’t match. Is there some way to tell Search-Guard to compare to the returned aliases rather than the requested ones? If Kibana requests all aliases, and it turns out that an index has an alias test-2015-07-01, search-guard will block based on the * request, and never allow the search.
Related topics
Topic | Replies | Views | Activity | |
---|---|---|---|---|
Index Alias - Allows too much or not enough permission | 4 | 719 | October 24, 2018 | |
User can't see docs in alias, although he has access to alias (but not indices directly) | 5 | 417 | July 18, 2018 | |
Querying missing index causes security exception | 12 | 3061 | August 2, 2019 | |
My deployment and strategic configuration for SG, I hope to help you | 3 | 430 | September 15, 2015 | |
Courier Fetch Error | 9 | 458 | July 13, 2015 |