Any way to provide authentication/authorization to certain operations?

ElasticHQ / elasticsearch-HQ

Monitoring and Management Web Application for ElasticSearch instances and clusters.

http://www.elastichq.org

Other

4.96k stars 530 forks source link

Any way to provide authentication/authorization to certain operations? #477

Open GAHila opened 5 years ago

GAHila commented 5 years ago

General information

Using dockerized version

ElasticHQ Version: release-v3.5.0 .
Elasticsearch Version : 6.8.1

Issue Description

Is there any way or plans to add some authentication/authorization capabilities to this, at least to restrict access to some of the administration operation?

GAHila commented 5 years ago

@royrusso I noticed the following comment. Do you know if there are any plans when this may happen?

We're considering it. We may hold off on adding this until we have users/roles/permissions in place. This is a highly destructive operation that allowing any user to do without credentials may be a bad idea.

Originally posted by @royrusso in https://github.com/ElasticHQ/elasticsearch-HQ/issues/366#issuecomment-379271879