# Document Level Security

**URL:** <https://forum.opensearch.org/t/document-level-security/1904>\
**Category:** Security\
**Created:** [November 24, 2019, 11:22am UTC](https://forum.opensearch.org/t/document-level-security/1904 "2019-11-24T11:22:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gvsrini](https://avatars.discourse-cdn.com/v4/letter/g/53a042/32.png) [@gvsrini](https://forum.opensearch.org/u/gvsrini)\
**Post date:** [November 24, 2019, 11:22am UTC](https://forum.opensearch.org/t/document-level-security/1904/1 "2019-11-24T11:22:44Z")

</div>

I have ODFE 1.2.0 set with internal users. I have disabled mult-tenancy mode as I am hitting some other issue when enabling it.

Considering multi-tenancy is disabled, I want to configure following DLSQ:  
`{ "bool": { "must": { "match": { "roleFilter": "${attr.internal.roleFilter}" } } } }`  
As soon as I add this to my role, following error is thrown when I login with respective user:  
`[config:7.2.0]: version conflict, document already exists (current version [2]): [version_conflict_engine_exception] [config:7.2.0]: version conflict, document already exists (current version [2]), with { index_uuid=\"rwRJS4kqQTWcp0p5_vTiHQ\" & shard=\"0\" & index=\".kibana_1\" }`

If I remove DLSQ (without changing anything else), it starts working again. Also, there is no additional log shown in either Kibana/ES logs.

Any pointers to resolve this?

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [May 20, 2021, 12:31pm UTC](https://forum.opensearch.org/t/document-level-security/1904/2 "2021-05-20T12:31:14Z")

</div>

@gvsrini Did you get this resolved? If not which version of odfe are you using?