Partial result retrival

Hi!
I was wondering if Search Guard could be used not only for allowing/blocking queries but to only query the indices that a user has access to .

For example, If I am a user that is mapped to a role allowing me to access only one specific index. I am preforming a “match all” query on all the indies in the cluster. Is it possible to only receive results from the one index I am authorized for?

Thank you!

sure, see

  https://docs.search-guard.com/latest/troubleshooting-search-guard-permission#only-return-data-from-allowed-indices
  https://docs.search-guard.com/latest/kibana-plugin-installation#configuring-elasticsearch-enable-do-not-fail-on-forbidden

If you want Search Guard to return only data from allowed indices, and discard the security exceptions for the other ones, set do_not_fail_on_forbidden to true in sg_config.yml:

searchguard:
  dynamic:
    kibana:
      do_not_fail_on_forbidden: true

···

Am 01.01.2019 um 12:41 schrieb vostrodello15@gmail.com:

Hi!
I was wondering if Search Guard could be used not only for allowing/blocking queries but to only query the indices that a user has access to .
For example, If I am a user that is mapped to a role allowing me to access only one specific index. I am preforming a "match all" query on all the indies in the cluster. Is it possible to only receive results from the one index I am authorized for?

Thank you!

--
You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/f7ff2f0e-b4d7-4268-b296-e21ea857472a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.