# Cookie based auth x-pack
**URL:** https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620
**Category:** Kibana
**Created:** [January 23, 2018, 9:03am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620 "2018-01-23T09:03:30Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@anton-putau](https://discuss.elastic.co/u/anton-putau)
#### Post date: [January 23, 2018, 9:03am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620/1 "2018-01-23T09:03:31Z")
I would like to allow site visitors to view kibana charts. I need something like custom realm to read site cookies and determine which permissions user have. Is it possible to achieve? Are there any existing solutions ? Thanks.
---
### Author:  [@ppisljar](https://discuss.elastic.co/u/ppisljar)
#### Post date: [January 23, 2018, 9:25am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620/2 "2018-01-23T09:25:29Z")
> [@anton-putau](#):
>
> read site cookies and determine which permissions user have
i am not aware of any such solution, but i might be wrong.
could you try to further explain your use case and what would be your expectations?
thanks.
---
### Author:  [@anton-putau](https://discuss.elastic.co/u/anton-putau)
#### Post date: [January 23, 2018, 10:10am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620/3 "2018-01-23T10:10:36Z")
I need to provide users some statistics. For now I can't guess how exactly user will access it. Most likely I will place a link on a web page which will point user to a dashboard (or embed somehow dashboard or specific chart on a web page). In this case user should be restricted to perform only read only actions. Also charts should be hidden from anonymous access. Some charts can be user specific, so I need to know which user is trying to access resource and to adjust charts on the fly (if it is possible). To perform security integration of kibana (kibana charts) to website I am planning to use site cookies, allowing kibana to read them.
---
### Author:  [@ppisljar](https://discuss.elastic.co/u/ppisljar)
#### Post date: [January 23, 2018, 10:18am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620/4 "2018-01-23T10:18:01Z")
are you using xpack to secure your kibana instance ?
---
### Author:  [@anton-putau](https://discuss.elastic.co/u/anton-putau)
#### Post date: [January 23, 2018, 10:27am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620/5 "2018-01-23T10:27:01Z")
both elastic and kibana are secured with x-pack
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 20, 2018, 10:27am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620/6 "2018-02-20T10:27:02Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.