search

opensearch-project / security-dashboards-plugin

🔐 Manage your internal users, roles, access control, and audit logs from OpenSearch Dashboards
https://opensearch.org/docs/latest/security-plugin/index/
Apache License 2.0
68 stars 148 forks source link

[BUG] Is there any permissions that only specific indexes can be searched by specific users and searched through the discover menu? #1901

Closed zinho9 closed 2 months ago

zinho9 commented 2 months ago

Describe the bug

Hello, I am using opensearch for collecting logs from several applications. Those applications are developed from each teams , and the logs are under of each indicies. (ex. a-log- , b-log-)

I made several users and tried to mapping permissions for users per project. But there is one problem.

ClipboardImage_2024-04-24_182025

I would like to allow only certain indexes to be searched and showed in the screenshot menu. ( The screenshot is Opensearch Dashboard -> Discover -> the index patterns at the top left side of page )

I tried to set roles -> index permissions -> and then set **Index : a-log-*** , permissions are indicies_all but after that I can't show any indices in the discover menu.

When I attatch the opesearch_dashboard_user role that is already managed in opesearch , I can show all indicies.

Can I know how to set permissions so that only specific indexes can be searched by specific users and searched through the discover menu?

Related component

Search

To Reproduce

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior

Is there any permissions that only specific indexes can be searched by specific users and searched through the discover menu?

Additional Details

Plugins Please list all plugins currently enabled.

Screenshots If applicable, add screenshots to help explain your problem.

Host/Environment (please complete the following information):

Additional context Add any other context about the problem here.

peternied commented 2 months ago

[Triage - attendees 1 2 3 4 5] Transfering to security dashboards repository

scrawfor99 commented 2 months ago

[Triage] Hi @zinho9 thank you for filing this issue. Looking at things, I think you could get better support for this over on the OpenSearch forum (https://forum.opensearch.org/) where you can find more real-world use cases like your own. Going to close this issue but if you end up wanting to request a feature down the road feel free to open a new issue. :)