Graylog2 / Graylog2/graylog2-server
Field suggestion in search should not display all fields
Open
feature
search
security
triaged
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
## Expected Behavior
When you use the field suggestion inside of a stream it should only display fields that are visible/used inside of that stream.
## Current Behavior
Graylog suggestion from all fields that are available.
## Context
If you run Graylog with multiple user groups with seperated data and restricted access to data, it might be a security risk having all available fields exposed. In addition it will confuse users because they see field names their specific view did not include and the product looks broken/unuseable to them.
## Your Environment
* Graylog Version: 2.4.3
Contributor guide
Assessment
This issue has not been assessed yet.