Is there permission or privileges list or docs?

Search Guard
1

I try to understand the sg_action_groups.yml, where I can find the detail ref doc ?

ALL:

  • “indices:*”

MANAGE:

  • “indices:monitor/*”

  • “indices:admin/*”

CREATE_INDEX:

  • “indices:admin/create”

MANAGE_ALIASES:

  • “indices:admin/aliases*”

MONITOR:

  • “indices:monitor/*”

DATA_ACCESS:

  • “indices:data/*”

WRITE:

  • “indices:data/write*”

READ:

  • “indices:data/read*”

DELETE:

  • “indices:data/write/delete*”

CRUD:

  • READ

  • WRITE

SEARCH:

  • “indices:data/read/search*”

  • “indices:data/read/msearch*”

  • SUGGEST

SUGGEST:

  • “indices:data/read/suggest*”

INDEX:

  • “indices:data/write/index*”

  • “indices:data/write/update*”

GET:

  • “indices:data/read/get*”

  • “indices:data/read/mget*”

CLUSTER

CLUSTER_ALL:

  • cluster:*

CLUSTER_MONITOR:

  • cluster:monitor/*

Thank you very much.

2

Looks like it is not same as shield, Shield Privileges | Shield [2.4] | Elastic

···

On Wednesday, July 20, 2016 at 4:18:21 PM UTC+8, Qiang Li wrote:

I try to understand the sg_action_groups.yml, where I can find the detail ref doc ?

ALL:

  • “indices:*”

MANAGE:

  • “indices:monitor/*”
  • “indices:admin/*”

CREATE_INDEX:

  • “indices:admin/create”

MANAGE_ALIASES:

  • “indices:admin/aliases*”

MONITOR:

  • “indices:monitor/*”

DATA_ACCESS:

  • “indices:data/*”

WRITE:

  • “indices:data/write*”

READ:

  • “indices:data/read*”

DELETE:

  • “indices:data/write/delete*”

CRUD:

  • READ
  • WRITE

SEARCH:

  • “indices:data/read/search*”
  • “indices:data/read/msearch*”
  • SUGGEST

SUGGEST:

  • “indices:data/read/suggest*”

INDEX:

  • “indices:data/write/index*”
  • “indices:data/write/update*”

GET:

  • “indices:data/read/get*”
  • “indices:data/read/mget*”

CLUSTER

CLUSTER_ALL:

  • cluster:*

CLUSTER_MONITOR:

  • cluster:monitor/*

Thank you very much.

3

Have a look here: Reference | Shield Reference [2.1] | Elastic

···

On Wednesday, 20 July 2016 10:19:54 UTC+2, Qiang Li wrote:

Looks like it is not same as shield, https://www.elastic.co/guide/en/shield/current/shield-privileges.html

On Wednesday, July 20, 2016 at 4:18:21 PM UTC+8, Qiang Li wrote:

I try to understand the sg_action_groups.yml, where I can find the detail ref doc ?

ALL:

  • “indices:*”

MANAGE:

  • “indices:monitor/*”
  • “indices:admin/*”

CREATE_INDEX:

  • “indices:admin/create”

MANAGE_ALIASES:

  • “indices:admin/aliases*”

MONITOR:

  • “indices:monitor/*”

DATA_ACCESS:

  • “indices:data/*”

WRITE:

  • “indices:data/write*”

READ:

  • “indices:data/read*”

DELETE:

  • “indices:data/write/delete*”

CRUD:

  • READ
  • WRITE

SEARCH:

  • “indices:data/read/search*”
  • “indices:data/read/msearch*”
  • SUGGEST

SUGGEST:

  • “indices:data/read/suggest*”

INDEX:

  • “indices:data/write/index*”
  • “indices:data/write/update*”

GET:

  • “indices:data/read/get*”
  • “indices:data/read/mget*”

CLUSTER

CLUSTER_ALL:

  • cluster:*

CLUSTER_MONITOR:

  • cluster:monitor/*

Thank you very much.