Shield: can it limit access by field that contains userid?

security

(JasonA) #1

I have an index that contains two user's data.

I want to provide each user the ability to query the index, but to only see those rows of data that contain the field 'user=their_username'.

Can I do this with Shield or some other elastic.co configuration mechanism? If so, how would I go about it? Ideally each user would have to login with a password I assign them first.

Thank you.


(Mark Walkom) #2

Shield can totally do this - https://www.elastic.co/guide/en/shield/current/setting-up-field-and-document-level-security.html#document-level-security


(system) #3