# Index permitions with global index pattern not working

**URL:** <https://forum.opensearch.org/t/index-permitions-with-global-index-pattern-not-working/1678>\
**Category:** Security\
**Created:** [October 8, 2019, 10:22am UTC](https://forum.opensearch.org/t/index-permitions-with-global-index-pattern-not-working/1678 "2019-10-08T10:22:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![carlosvieira](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@carlosvieira](https://forum.opensearch.org/u/carlosvieira)\
**Post date:** [October 8, 2019, 10:22am UTC](https://forum.opensearch.org/t/index-permitions-with-global-index-pattern-not-working/1678/1 "2019-10-08T10:22:48Z")

</div>

Hi everyone,  
I’ve seen a similar topic, but quite different on the end, so I decided to create a new one.

I’m not gonna bother with implementation details, but i have the following scenario:

- **UserA** has access to **IndexA**
- **UserB** has access to **IndexB**

Without opendDistro\_security integration I used to have an index pattern:

- “Index\*”

that I used to create a DashboardX/ViewX  
Well this DashboardX (“Index\*”) was accessible by **userA** and **userB**. However, respecting the permissions, **userA** would only see info in **indexA** and **userB** would only see info in **IndexB**.  
This doesn’t seem to be the case. **UserA** can see an Index pattern “IndexA” but not “Index\*”.

When I request to see index pattern Index\* (in discovery for example) it crashes saying the user don’t have indices:data/read/search permissions.  
I’m guessing elasticsearch is looking for both **IndexA** and **IndexB** and as one of them isn’t allowed it throws an error instead of returning one index (the correct one).

I’m curious to see if this happened to anyone else and maybe some workarounds.  
Thank you in advance for any help.~

**EDIT** : A subset of this problem was solved [here](https://forum.opensearch.org/t/kibana-user-security-setup/1671) but I continue to have the case where an **userC** that has access to **indexA** and **indexB**. This **userC** can only see **indexB** for “index\*” index pattern.

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [May 24, 2021, 12:05pm UTC](https://forum.opensearch.org/t/index-permitions-with-global-index-pattern-not-working/1678/2 "2021-05-24T12:05:14Z")

</div>

Hi @carlosvieira

do\_not\_fail\_on\_forbidden would be the solution to your first issue.

Regarding userC have you tried to disable do\_not\_fail\_on\_forbidden and check why it’s failing on indexA in logs.  
Does userC has same privileges as userA to indexA?
