Issue with DLS (Document Level Security)

Security
1

Hi,

i wanted to test document level security with evaluation mode = filter-level.
So i followed the documentation Document-level security - OpenSearch documentation and add following line to my opensearch.yml:

plugins.security.dls.mode: filter-level

After node restart i get following error:

java.lang.IllegalArgumentException: unknown setting [plugins.security.dls.mode] did you mean any of [plugins.security.disabled, plugins.security.audit.type, plugins.security.ssl_only, plugins.security.cert.oid]?

Am i doing something wrong?

Thanks.

2

which version of OpenSearch are you running? this feature & config option had been introduced in 1.3.0: Add support for DLS Term Lookup Queries by jochenkressin · Pull Request #1541 · opensearch-project/security · GitHub

and why do you want to set the setting explicitly? as the documentation states it will always pick the proper mode based on whether your DLS contains a TLQ or not.

3

@ralph Thanks für feedback.

I’m using OpenSearch 2.3.0.

My intention was to test and compare the two methods and to take a closer look at the resulting filters queries.

Since the documentation says that there is the mentioned configuration key (plugins.security.dls.mode) for switching, i tried that.