search

cloudfoundry-community / logsearch-for-cloudfoundry

A Logsearch addon that customises Logsearch to work with Cloud Foundry data
Apache License 2.0
49 stars 58 forks source link

UAA integration of Kibana allows Management menu for non-admins #294

Open kkellner opened 6 years ago

kkellner commented 6 years ago

UAA integration of Kibana works well for non-admin except it allows Management Menu.

If a user is a OrgOwner (non-system org), Kibana nicely filters firehose data to show only what they should see. However the "Management Menu" option (left side of Kibana screen) is accessible and allows a user to modify critical Kibana configuration items.

Can the Management menu be configured to only allow UAA users that are part of the "system" org to access?

Infra-Red commented 6 years ago

Currently UAA integration works only with search queries. Restrictions for Management Menu page will require additional changes in auth plugin.

-- Regards, Andrei

28 февр. 2018 г., 0:44 +0300, Kurt Kellner notifications@github.com, писал:

UAA integration of Kibana works well for non-admin except it allows Management Menu. If a user is a OrgOwner (non-system org), Kibana nicely filters firehose data to show only what they should see. However the "Management Menu" option (left side of Kibana screen) is accessible and allows a user to modify critical Kibana configuration items. Can the Management menu be configured to only allow UAA users that are part of the "system" org to access? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.