Access based on fieldvalue

etfeet · October 16, 2015, 8:16pm

Is it possible to grant/deny access to index documents based on field value?

ie user mycorpuser will only be able to access documents in index where the customer field = mycorp.

Thanks,

Rory

skearns · October 16, 2015, 8:35pm

Hi Rory,

Yes, this is most easily supported with Elasticsearch / Shield 2.0, which is currently in RC. We call this Document Level Security in our documentation:

https://www.elastic.co/guide/en/shield/2.0.0-beta2/setting-up-field-and-document-level-security.html#_document_level_security

Cheers,
Steve

Topic		Replies	Views
Field level security based on the value of another field in the document Elasticsearch elastic-stack-security	5	268	November 1, 2022
Is there a way to set security based on value-level of field Elasticsearch	1	357	February 13, 2020
Problem with document level security Elasticsearch elastic-stack-security	3	1144	July 6, 2017
Allow user only certain documents from certain indices Elasticsearch	2	5185	January 10, 2018
Secure access to data via NEST Elasticsearch elastic-stack-security	1	288	May 18, 2021

Access based on fieldvalue

Related topics