# Kibana

**URL:** <https://discuss.elastic.co/t/kibana/23579>\
**Category:** Elasticsearch\
**Created:** [May 6, 2015, 3:16pm UTC](https://discuss.elastic.co/t/kibana/23579 "2015-05-06T15:16:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![liorg2](https://avatars.discourse-cdn.com/v4/letter/l/ed8c4c/32.png) [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Post date:** [May 6, 2015, 3:16pm UTC](https://discuss.elastic.co/t/kibana/23579/1 "2015-05-06T15:16:35Z")

</div>

hi,

can kibana be used for end-users security wise, without to give them  
ability to send queries as they like using F12/fiddler etc?

## -- Please update your bookmarks! We moved to [https://discuss.elastic.co/](https://discuss.elastic.co/)

You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/99f09e0a-cc29-43d1-a559-24f843d0cc98%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/99f09e0a-cc29-43d1-a559-24f843d0cc98%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 7, 2015, 5:23am UTC](https://discuss.elastic.co/t/kibana/23579/2 "2015-05-07T05:23:50Z")

</div>

​Kibana provides unrestricted access to any index it can see.  
So unless you are running Shield to limit that, or use aliases, then it's  
possible users can see data they should not be able to see.​  
​

​There is no function​ality to restrict specific queries though.

On 7 May 2015 at 01:16, Lior Goldemberg [liorg2@gmail.com](mailto:liorg2@gmail.com) wrote:

> hi,
> 
> can kibana be used for end-users security wise, without to give them  
> ability to send queries as they like using F12/fiddler etc?
> 
> ## -- Please update your bookmarks! We moved to [https://discuss.elastic.co/](https://discuss.elastic.co/)
> 
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/99f09e0a-cc29-43d1-a559-24f843d0cc98%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/99f09e0a-cc29-43d1-a559-24f843d0cc98%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/99f09e0a-cc29-43d1-a559-24f843d0cc98%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/99f09e0a-cc29-43d1-a559-24f843d0cc98%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

## -- Please update your bookmarks! We moved to [https://discuss.elastic.co/](https://discuss.elastic.co/)

You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9TGdiYjxhahh9ym5MjDMdQw90LZvCOhXqZ%3DDrRdCAaNA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9TGdiYjxhahh9ym5MjDMdQw90LZvCOhXqZ%3DDrRdCAaNA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:15am UTC](https://discuss.elastic.co/t/kibana/23579/3 "2017-07-06T00:15:14Z")

</div>


