Any way to hide plugins from users who don't have permissions?

jong · April 22, 2021, 10:17am

For simplicity for end users, I want to hide plugins that the user has no permissions for.

The Security plugin does not show up in the nav bar for users without permission. Is it possible to hide other plugins from users without permissions?

For example, I’ve installed the Alerting plugin and it shows up here for a user with no permissions:

I want it to show:

Thanks!

jong · April 22, 2021, 10:34am

I found this old thread, but not really helpful.

How specifically does Kibana/OpenSearch decide whether or not to display the “Security” plugin in the nav bar? Is it possible to extend to functionality to other plugins? If anyone has any pointers I could look into maybe making changes and a pull request.

searchymcsearchface · April 22, 2021, 1:24pm

Moved to Security category.

jong · April 22, 2021, 2:17pm

Looks like this menu item is not displayed because of this line here:

github.com

opensearch-project/security-dashboards-plugin/blob/5e1598e1f5455817ee70a53b721c4be3807b7a35/public/plugin.ts#L80


      
          public async setup(core: CoreSetup): Promise<OpendistroSecurityPluginSetup> {
            const apiPermission = await hasApiPermission(core);
          
          
  const config = this.initializerContext.config.get<ClientConfigType>();
          
          
  const accountInfo = (await fetchAccountInfoSafe(core.http))?.data;
            const isReadonly = accountInfo?.roles.some((role) =>
              (config.readonly_mode?.roles || DEFAULT_READONLY_ROLES).includes(role)
            );
          
          
  if (apiPermission) {
              core.application.register({
                id: PLUGIN_NAME,
                title: 'Security',
                order: 8000,
                mount: async (params: AppMountParameters) => {
                  const { renderApp } = await import('./apps/configuration/configuration-app');
                  const [coreStart, depsStart] = await core.getStartServices();
          
          
        // merge OpenSearchDashboards yml configuration
                  includeClusterPermissions(config.clusterPermissions.include);

shansb · November 11, 2021, 1:18pm

Hi, is there an update on this issue?

pablo · November 11, 2021, 1:58pm

@shansb I don’t think there will be any for OpenDistro.
I suggest to open feature request for OpenSearch Dashboards.

https://github.com/opensearch-project/OpenSearch-Dashboards/issues

Currently the only mechanism to hide OpenSearch Dashboards menu elements based on user’s priviliges is opensearch_security.readonly_mode.roles option.

However, this option won’t allow you to choose elements of the OpenSearch Dashboards menu and will disable everything except Dashboards.

shansb · November 11, 2021, 2:12pm

Ok thanks for your quick reply.
I opened a feature request here: https://github.com/opensearch-project/OpenSearch-Dashboards/issues/929

Topic		Replies	Views
How to hide Kibana menu for user? Security	10	6022	August 9, 2024
Hiding menu depending on role OpenSearch Dashboards	2	457	September 27, 2023
There are no "Security" tab in OpenSearch Plugins Menu OpenSearch Dashboards	2	537	June 22, 2023
How to create set of permission for custom plugin created in kibana Security	1	404	October 14, 2021
Dashboard no Secure menu in plugin Security install	8	323	October 20, 2022

Any way to hide plugins from users who don't have permissions?

Related topics