Hello, I'm currently evaluating X-Pack for my company and as a requirement we need: any user can write data to elasticsearch using bulk API; disallow any other bulk operation (index, delete and update); Looking at the "Indices Privileges" table (here: https://www.elastic.co/guide/en/x-pack/curre…

This is not something that can be done in current versions of Elasticsearch. Because the Bulk API can be used to create, update and delete, it is only available to users with write privileges. We don't currently apply this sort of security filtering to the content that goes through the Bulk API, so…

[image] TimV: do hope to support this use case in future versions, but it is not currently possi Thank you for the quick reply Tim. This is a big drawback for us since we have a set of standalone distributed clients that upload lots of information using Bulk API. For backward compatibility w…

Followup: As of Elasticsearch/X-Pack 5.3.0 it is possible to use the bulk API if you have some "modify" (create/update/delete) permissions, even if you don't have fully write permission.

How to allow bulk create only (disallow index, delete and update)

Elastic Stack Elasticsearch

Topic		Replies	Views
How to allow index operations only via bulk api Elasticsearch	3	639	July 5, 2017
Kibana Indices Privilege query Kibana	6	1041	April 13, 2017
Action [indices:data/write/bulk[s]] is unauthorized for API key id of user [ ] Elasticsearch elastic-stack-security	4	5014	October 24, 2022
Error with bulk upload & Role permissions Elasticsearch	2	1337	May 7, 2020
How to create a role that solely has the ability to add data, but not inspect delete or update data? Elasticsearch	1	621	October 10, 2018

How to allow bulk create only (disallow index, delete and update)

Related topics