# Document level security issue with elastic and shield 2.3.2

**URL:** https://discuss.elastic.co/t/document-level-security-issue-with-elastic-and-shield-2-3-2/52204
**Category:** Elasticsearch
**Tags:** elastic-stack-security
**Created:** [June 8, 2016, 11:06am UTC](https://discuss.elastic.co/t/document-level-security-issue-with-elastic-and-shield-2-3-2/52204 "2016-06-08T11:06:33Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![stefanrinderle](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@stefanrinderle](https://discuss.elastic.co/u/stefanrinderle)
#### Post date: [June 8, 2016, 11:06am UTC](https://discuss.elastic.co/t/document-level-security-issue-with-elastic-and-shield-2-3-2/52204/1 "2016-06-08T11:06:33Z")

</div>

Hello everybody,

I'm not getting document level security to work. It does not seem to have any effect. My config in roles.yml:

user:  
indices:  
'lmsapp-\*':  
privileges: read  
query: '{"match":{"\_type":"lmsappPerfLog"}}'

curl -GET -u monitoring:monitoring '[https://localhost:9210/lmsapp-2016.06.07/lmsappLoginLog/AVUp7fQjrLqamWsblN-y?pretty](https://localhost:9210/lmsapp-2016.06.07/lmsappLoginLog/AVUp7fQjrLqamWsblN-y?pretty)'  
and  
curl -GET -u monitoring:monitoring '[https://localhost:9210/lmsapp-2016.06.07/lmsappLoginLog/AVUp7fQjrLqamWsblN-y?pretty](https://localhost:9210/lmsapp-2016.06.07/lmsappLoginLog/AVUp7fQjrLqamWsblN-y?pretty)'

both return results. According to [Problem with document level security](https://discuss.elastic.co/t/problem-with-document-level-security/41944) i also enabled shield.dls\_fls.enabled: true

The user monitoring is in the according group "user".

Any ideas? Thanks.

---

<div class="post-metadata">

### Author: ![jaymode](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaymode/32/50103_2.png) [@jaymode](https://discuss.elastic.co/u/jaymode)
#### Post date: [June 10, 2016, 11:28am UTC](https://discuss.elastic.co/t/document-level-security-issue-with-elastic-and-shield-2-3-2/52204/2 "2016-06-10T11:28:04Z")

</div>

What type of license do you have? You can check by executing a `GET /_license` request

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:44pm UTC](https://discuss.elastic.co/t/document-level-security-issue-with-elastic-and-shield-2-3-2/52204/3 "2017-07-06T13:44:10Z")

</div>