Read only access to elasticsearch


I am interested in restricting users to read only access to elasticsearch data.
So I would like to limit curl commands to GET method.

But if I do so head plugin is not displaying any data.
So I allowed POST method and I can view data in head plugin.

But with allowing POST users can modify data too.

So how can I restrict only read using POST and block write?

PS:I am using ReadOnly REST plugin for achieving this


Shield will handle this for you. Otherwise you have to build something yourself.

But the shield is a payment plugin