Skip to content

Commit 5044ce7

Browse files
Merge pull request #1912 from periklis/bz-1842357
Bug 1842357: Limit role project_user to access only owned kibana idx
2 parents cae9fee + 8253f95 commit 5044ce7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

elasticsearch/sgconfig/roles.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@ project_user:
142142
'*':
143143
- READ
144144
_dls_: "{\"bool\":{\"filter\":{\"script\":{\"script\":{\"lang\":\"painless\",\"params\":{\"param1\":\"${attr.proxy.ns}\"},\"source\":\"String namespace = doc['kubernetes.namespace_name'][0];StringTokenizer st = new StringTokenizer(params.param1,\\\",\\\");while (st.hasMoreTokens()){if (st.nextToken().equalsIgnoreCase(namespace)){return true;}}return false;\"}}}}}"
145-
'?kibana_*':
145+
'?kibana_*_${user_name}':
146146
'*':
147147
- CRUD
148148

0 commit comments

Comments
 (0)