This is more of a question around expected behavior/specification as I cannot determine the behavior via test and observe: If a user is mapped to a Role A that grants read access to Index 1 with a document level security pattern match of : {"term": { "_id": 1}} And same user is mapped to a R…

Hello all ! I would also be interested in knowing how the security plugin combines dsl originating from different roles. Did you have te chance to understand how this is handled ? Thanks Christophe

Hi All, Tested this with 1.12.0, and if user is mapped to : role A which has access to index B and dls of {“term”: { “_id”: 1}} role B which also has access to index B and dls of {“term”: { “_id”: 2}}" Then the rules are combined and user has access to only those 2 documents during search of the …

Hi @Anthony , thanks for trying :slight_smile: Now please try with a user that has 2 roles: One with with no DLS configured at all (that is to say it should have access to all documents). One with DLS configured (for instance {“term”: { “_id”: 1}}) The expected behavior would be that the user h…

[image] chrousto: {“match_all” : {} } Thank you so much chrousto, problem solved! Addition: in OpenSearch 2.9, this ‘{“match_all” : {} }’ makes Opensearch Dashboard throw 500 error. I’ve replaced it with ‘{ “bool”: { “must_not”: [ { “match_phrase”: { “host”: “unexisted.name.here” } } ] } }’…

How is DLS applied when user has multiple roles

Security

rlevitsky February 2, 2024, 9:14am 7

In case anybody interested, this workaround broke index pattern update, Weird error when trying to update index pattern - #4 by rlevitsky

Topic		Replies	Views
On applying DLS in role configuraiton, not able to see index pattern and dashboard details Security troubleshoot	8	171	July 12, 2024
Users getting least permissions when mapped to multiple roles Security	5	1040	December 28, 2023
Combine DLS rules from different roles Security discuss	3	373	May 17, 2022
How to use roles parameter substitution for DLS Security	2	734	December 14, 2021
Configure document level security Security	1	844	May 17, 2021

How is DLS applied when user has multiple roles

Related topics