# Is a query of the form /myindex/... certainly only operating on the index "myindex" if rest.action.multi.allow\_explicit\_index is set to false?

**URL:** <https://discuss.elastic.co/t/is-a-query-of-the-form-myindex-certainly-only-operating-on-the-index-myindex-if-rest-action-multi-allow-explicit-index-is-set-to-false/145742>\
**Category:** Elasticsearch\
**Created:** [August 23, 2018, 1:51pm UTC](https://discuss.elastic.co/t/is-a-query-of-the-form-myindex-certainly-only-operating-on-the-index-myindex-if-rest-action-multi-allow-explicit-index-is-set-to-false/145742 "2018-08-23T13:51:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Photon](https://avatars.discourse-cdn.com/v4/letter/p/b5a626/32.png) [@Photon](https://discuss.elastic.co/u/Photon)\
**Post date:** [August 23, 2018, 1:51pm UTC](https://discuss.elastic.co/t/is-a-query-of-the-form-myindex-certainly-only-operating-on-the-index-myindex-if-rest-action-multi-allow-explicit-index-is-set-to-false/145742/1 "2018-08-23T13:51:44Z")

</div>

Hello, Community!

I am new to Elasticsearch and after installing and playing around with it, I am now reading the API documentation.

I came across the [URL-based access control page](https://www.elastic.co/guide/en/elasticsearch/reference/current/url-access-control.html) and am now wondering: Is it certain that a query which starts with some particular index (or set of indices if several indices are specified by a list or a \* regexp), that is, a query of the form /myindex/... certainly only gives access to the given index, if rest.action.multi.allow\_explicit\_index is set to false in the configuration? Are there ways to inject a call to further indices and if so what are good ways of securing the access here?

Thanks for any input!  
Photon

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 20, 2018, 1:57pm UTC](https://discuss.elastic.co/t/is-a-query-of-the-form-myindex-certainly-only-operating-on-the-index-myindex-if-rest-action-multi-allow-explicit-index-is-set-to-false/145742/2 "2018-09-20T13:57:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.