I have a dashboard with few visualizations created from restricted indices and few visualizations created from non restricted indices. Kibana instead of blocking just the restricted visualizations empties the whole dashboard and returns this error:
Visualize: [security_exception] action [indices:data/read/msearch] is unauthorized for user []
role I am using,
kibanauser:
indices:
non-restricted index:
- indices:admin/mappings/fields/get
- indices:admin/validate/query
- indices:data/read/search
- indices:data/read/msearch
- indices:admin/get
'.kibana':
- indices:admin/exists
- indices:admin/mappings/fields/get
- indices:admin/refresh
- indices:admin/validate/query
- indices:data/read/get
- indices:data/read/mget
- indices:data/read/search