search

opensearch-project / security-dashboards-plugin

🔐 Manage your internal users, roles, access control, and audit logs from OpenSearch Dashboards
https://opensearch.org/docs/latest/security-plugin/index/
Apache License 2.0
70 stars 152 forks source link

[FEATURE] Introduce a feature flag to disable Security screens #1961

Open derek-ho opened 4 months ago

derek-ho commented 4 months ago

Is your feature request related to a problem? Today, the security screens are shown if you have valid permissions (defined via opensearch.yml). However, there may be situations where people don't want the security dashboards plugin to show up at all (for example if they only want to modify security settings with the admin cert, or APIs, etc.). We should introduce a feature flag that disables the security plugin screens from showing up regardless of the permissions of the user. What solution would you like? Feature flag in opensearch_dashboards.yml that disables the screens no matter what. What alternatives have you considered? None Do you have any additional context? None

derek-ho commented 4 months ago

opensearch_security.admin_pages.enabled - which defaults to be true (existing behavior today)

derek-ho commented 4 months ago

[Triage] This seems like a good issue that will provide choice for customers.