# Is there any way to implement document level security in app search?

**URL:** https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154
**Category:** Elastic Search
**Tags:** elastic-app-search
**Created:** [September 26, 2019, 6:37am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154 "2019-09-26T06:37:26Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![ranjeet.tiwari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ranjeet.tiwari/32/55160_2.png) [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)
#### Post date: [September 26, 2019, 6:37am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154/1 "2019-09-26T06:37:27Z")

</div>

Hi Team,

We need to implement security trimming on search result. Presently we are using App search and Search UI to show result.

Can we implement document level security in app search ?

---

<div class="post-metadata">

### Author: ![orhantoy](https://avatars.discourse-cdn.com/v4/letter/o/c5a1d2/32.png) [@orhantoy](https://discuss.elastic.co/u/orhantoy)
#### Post date: [September 27, 2019, 12:33pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154/2 "2019-09-27T12:33:17Z")

</div>

Hey @ranjeet.tiwari. I'm not entirely sure about your use case but I think you can achieve this with a filterable field 'wrapped' in a [Signed Search key](https://swiftype.com/documentation/app-search/authentication#signed).

---

<div class="post-metadata">

### Author: ![ranjeet.tiwari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ranjeet.tiwari/32/55160_2.png) [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)
#### Post date: [September 29, 2019, 5:27am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154/3 "2019-09-29T05:27:09Z")

</div>

Hi @orhantoy,

Thanks for quick reply.

Document level security restricts the documents that users have read access

In elasticsearch, it is feasible.  
[https://www.elastic.co/guide/en/elastic-stack-overview/current/document-level-security.html](https://www.elastic.co/guide/en/elastic-stack-overview/current/document-level-security.html)

Can we achieve same in app search?

---

<div class="post-metadata">

### Author: ![JasonStoltz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jasonstoltz/32/49893_2.png) [@JasonStoltz](https://discuss.elastic.co/u/JasonStoltz)
#### Post date: [September 30, 2019, 11:59am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154/4 "2019-09-30T11:59:01Z")

</div>

@ranjeet.tiwari

Document level security in App Search can be implemented with Signed Search Keys, as Orhan mentioned.

After authenticating a user, you would generate a Signed Search Key for them, encoded with a filter on whatever field you wish to restrict documents by.

It's a different approach than Elasticsearch.

Does that makes sense?

Jason

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 28, 2019, 11:59am UTC](https://discuss.elastic.co/t/is-there-any-way-to-implement-document-level-security-in-app-search/201154/5 "2019-10-28T11:59:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
