Access based on fieldvalue

security

(rory) #1

Is it possible to grant/deny access to index documents based on field value?

ie user mycorpuser will only be able to access documents in index where the customer field = mycorp.

Thanks,

Rory


(Steve Kearns) #2

Hi Rory,

Yes, this is most easily supported with Elasticsearch / Shield 2.0, which is currently in RC. We call this Document Level Security in our documentation:

https://www.elastic.co/guide/en/shield/2.0.0-beta2/setting-up-field-and-document-level-security.html#_document_level_security

Cheers,
Steve


(system) #3