# Failed in query data with ssl

**URL:** <https://forum.opensearch.org/t/failed-in-query-data-with-ssl/27056>\
**Category:** Security\
**Tags:** troubleshoot, security-issue\
**Created:** [September 16, 2025, 2:07am UTC](https://forum.opensearch.org/t/failed-in-query-data-with-ssl/27056 "2025-09-16T02:07:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![liu](https://avatars.discourse-cdn.com/v4/letter/l/a88e57/32.png) [@liu](https://forum.opensearch.org/u/liu)\
**Post date:** [September 16, 2025, 2:07am UTC](https://forum.opensearch.org/t/failed-in-query-data-with-ssl/27056/1 "2025-09-16T02:07:11Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):3.1.0

**Describe the issue** :i set user ,role and role mapping ,but cannot query data

my role is :

curl -X GET “https:/localhost:9200/\_plugins/\_security/api/roles/dev\_role?pretty”  
-u ‘admin:passwd’  
–cacert /home/opensearch/opensearch-3.1.0/certs/root-ca.pem  
–cert /home/opensearch/opensearch-3.1.0/certs/admin.pem --key /home/opensearch/opensearch-3.1.0/certs/admin-key.pem  
{  
“dev\_role” : {  
“reserved” : false,  
“hidden” : false,  
“cluster\_permissions” : [  
“cluster\_monitor”  
],  
“index\_permissions” : [  
{  
“index\_patterns” : [  
“pps-\*”  
],  
“fls” : ,  
“masked\_fields” : ,  
“allowed\_actions” : [  
“read”,  
“search”,  
“index”  
]  
}  
],  
“tenant\_permissions” : ,  
“static” : false  
}  
}

rolemapping is :

curl -X GET \_plugins/security/api/rolesmapping/dev\_role?pretty -u ‘admin:passwd’  
–cacert /home/opensearch/opensearch-3.1.0/certs/root-ca.pem  
–cert /home/opensearch/opensearch-3.1.0/certs/admin.pem --key /home/opensearch/opensearch-3.1.0/certs/admin-key.pem  
{  
“dev\_role” : {  
“hosts” : [  
“\*”  
],  
“users” : [  
“dev\_user”  
],  
“reserved” : false,  
“hidden” : false,  
“backend\_roles” : [  
“C=CN,ST=GUANGDONG….”  
],  
“and\_backend\_roles” :   
}  
}

user is:  
curl -X GET\_plugins/\_security/api/internalusers/dev\_user?pretty  
-u ‘admin:passwd’  
–cacert /home/opensearch/opensearch-3.1.0/certs/root-ca.pem  
–cert /home/opensearch/opensearch-3.1.0/certs/admin.pem --key /home/opensearch/opensearch-3.1.0/certs/admin-key.pem  
{  
“dev\_user” : {  
“hash” : “”,  
“reserved” : false,  
“hidden” : false,  
“backend\_roles” : [  
“dev\_role”  
],  
“attributes” : { },  
“opendistro\_security\_roles” : ,  
“static” : false  
}  
}

curl -XGET --cacert /home/opensearch/opensearch-3.1.0/certs/root-ca.pem  
-u ‘dev\_user:passwd’  
–cert /home/opensearch/opensearch-3.1.0/certs/developer.pem --key /home/opensearch/opensearch-3.1.0/certs/developer-key.pem  
“[https://localhost:9200/pps\_a/\_search”](https://localhost:9200/pps_a/%5C_search%E2%80%9D)

{“error”:{“root\_cause”:[{“type”:“security\_exception”,“reason”:“no permissions for [indices:data/read/search] and User [name=dev\_user, backend\_roles=[dev\_role],  
requestedTenant=null]”}],“type”:“security\_exception”,“reason”:“no permissions for [indices:data/read/search] and User [name=dev\_user, backend\_roles=[dev\_role],  
requestedTenant=null]”},“status”:403}

**Configuration** :

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [September 16, 2025, 9:00am UTC](https://forum.opensearch.org/t/failed-in-query-data-with-ssl/27056/2 "2025-09-16T09:00:31Z")

</div>

@liu Is there any reason you are using basicauth (username and password) on top of certificates?

Regarding the missing permissions, it seems your role has permissions for indices starting with `pps-`, but the index you are searching is `pps_`