How is DLS applied when user has multiple roles

[rlevitsky]

@chrousto

{“match_all” : {} }

Thank you so much chrousto, problem solved!

Addition: in OpenSearch 2.9, this ‘{“match_all” : {} }’ makes Opensearch Dashboard throw 500 error.

I’ve replaced it with ‘{ “bool”: { “must_not”: [ { “match_phrase”: { “host”: “unexisted.name.here” } } ] } }’ and it works now.