Search Guard and Spaces

39 views
Skip to first unread message

Gosforth

unread,
Jan 4, 2019, 7:09:38 AM1/4/19
to Search Guard Community Forum
I've just test SearchGuard (last version) on latest version of Kibana and Elasticsearch.

My question is:
Am I able to assign user permission only to some Spaces (he/she can use space X but not space Z)?

If possible, could you please provide some config example?

Regards

SG

unread,
Jan 7, 2019, 3:19:37 AM1/7/19
to search...@googlegroups.com
Thats not possible (for now). But you can use our multi tenancy feature for that (https://docs.search-guard.com/latest/kibana-multi-tenancy#multitenancy)
> --
> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/0808794f-dd5f-4a21-a60a-7f770d426dba%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

Gosforth

unread,
Jan 7, 2019, 5:01:09 AM1/7/19
to Search Guard Community Forum
Thank you.
To my surprise I see that 'security' after applying Search Guard is that some users do not see indices but they can do discovery, create or modify visualization and dashboards :-)
Incredible :-)
This is the 'security' that comes with ES or Search Guard?

Gosforth

unread,
Jan 9, 2019, 6:07:13 AM1/9/19
to Search Guard Community Forum
Any comment about that?

SG

unread,
Jan 9, 2019, 6:17:30 AM1/9/19
to search...@googlegroups.com
Search Guard
> --
> You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.
> To post to this group, send email to search...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/7733167e-2397-4c30-85f0-a8fd60c61928%40googlegroups.com.

Gosforth

unread,
Jan 10, 2019, 10:56:00 AM1/10/19
to Search Guard Community Forum
Thanks for the answer.

So this is not a security at all (If I have access to indices I can do everything with data). I can obtain same level with nginx.


Reply all
Reply to author
Forward
0 new messages