# Alternatives to document level security / Performance of multiples indices

**URL:** <https://discuss.elastic.co/t/alternatives-to-document-level-security-performance-of-multiples-indices/220914>\
**Category:** Elasticsearch\
**Created:** [February 25, 2020, 6:45pm UTC](https://discuss.elastic.co/t/alternatives-to-document-level-security-performance-of-multiples-indices/220914 "2020-02-25T18:45:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pablo\_Albertengo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pablo_albertengo/32/47685_2.png) [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\
**Post date:** [February 25, 2020, 6:45pm UTC](https://discuss.elastic.co/t/alternatives-to-document-level-security-performance-of-multiples-indices/220914/1 "2020-02-25T18:45:45Z")

</div>

I have the following scenario.

We currently use an index to audit the operations of our suppliers in our system (supplierop index).  
This index is consulted internally, accessing the information of all suppliers, through Kibana.

We are analyzing the possibility of creating access to our suppliers so that each of them can access their own information (and not the info of the rest of the suppliers).

The way to achieve this is through document-level security:  
[https://www.elastic.co/guide/en/elasticsearch/reference/current/document-level-security.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/document-level-security.html)

But this functionality is only included in the Platinum version and we are using Open Source, so in principle it is not a possibility.

Another possibility would be to use multiple indexes, one per supplier:  
supplierop-SUP1  
supplierop-SUP2  
supplierop-SUP3  
...

and give appropriate permission to each supplier.

My question related to this ... will I have a very bad performance, when internally we consult the information of all the suppliers?

Can you think of any other alternative to address this problem?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 24, 2020, 6:45pm UTC](https://discuss.elastic.co/t/alternatives-to-document-level-security-performance-of-multiples-indices/220914/2 "2020-03-24T18:45:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.