# Can we restrict users to read last n days of data

**URL:** <https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804>\
**Category:** Elasticsearch\
**Created:** [June 14, 2021, 7:58am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804 "2021-06-14T07:58:27Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![kannan\_raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kannan_raj/32/63201_2.png) [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\
**Post date:** [June 14, 2021, 7:58am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/1 "2021-06-14T07:58:27Z")

</div>

we are running Elasticsearch 7.9.0 with basic liecense and we need to put some restriction on users to read the document not more than 2 days.

is it possible to add range query in roles?

> **[Document level security | Elasticsearch Guide \[7.13\] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/document-level-security.html)**

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 14, 2021, 8:13am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/2 "2021-06-14T08:13:02Z")

</div>

I would recommend you upgrade as I believe 7.9.0 had a memory leak.

---

<div class="post-metadata">

**Author:** ![kannan\_raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kannan_raj/32/63201_2.png) [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\
**Post date:** [June 14, 2021, 8:34am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/3 "2021-06-14T08:34:24Z")

</div>

@Christian_Dahlqvist

Thank you for your quick response, sure we could work an upgrade to the latest version.

we are holding to hold 90 days of data and the index size is 800GB and getting a minimum of 4 indexes per day.

so we have to some restriction on some user that user should not read more than n days of data.

could you please confirm that is it possible to put restrictions on users to read the document not more than n days?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 14, 2021, 8:48am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/4 "2021-06-14T08:48:38Z")

</div>

I do not think that is possible using the basic license. It might be using document level security though which requires a higher license level.

---

<div class="post-metadata">

**Author:** ![kannan\_raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kannan_raj/32/63201_2.png) [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\
**Post date:** [June 14, 2021, 9:02am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/5 "2021-06-14T09:02:56Z")

</div>

@Christian_Dahlqvist Thank you for the confirmation.  
I am not able to find any bug or reference about memory leak issue on 7.9.0 version, could you please point me the document or issue.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 14, 2021, 9:27am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/6 "2021-06-14T09:27:15Z")

</div>

There should be a couple of threads in the forum about it but I do not have access to that now.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 12, 2021, 9:27am UTC](https://discuss.elastic.co/t/can-we-restrict-users-to-read-last-n-days-of-data/275804/7 "2021-07-12T09:27:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
