Hello Search Guard Team,
we are currently developing a feature where a DLS on document indexing would be very helpful, but in the documentation only the a searching access is described. Does DLS also apply during indexing?
No, not really. From your question I suspect that your use case is to exclude some documents during ingest time, correct? If this is the case you may want to use an ingest processor:
DLS, as you correctly stated, works for searches. The reason is that DLS is applied dynamically, since it can be different for each SG role. So one role sees documents that meet condition A, while another role sees documents that meet condition B. For that to work all documents must be indexed.
Thanks for your input, we suspected that it would not work but wanted clarity. Also thanks for the hint for ingest processing, we will look into it.
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.