Graylog2 / Graylog2/graylog2-server

Field suggestion in search should not display all fields

Open
#4,672 0 comments 0 reactions 0 assignees View on GitHub
feature search security triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Expected Behavior
When you use the field suggestion inside of a stream it should only display fields that are visible/used inside of that stream.

## Current Behavior
Graylog suggestion from all fields that are available.

## Context
If you run Graylog with multiple user groups with seperated data and restricted access to data, it might be a security risk having all available fields exposed. In addition it will confuse users because they see field names their specific view did not include and the product looks broken/unuseable to them.

## Your Environment

* Graylog Version: 2.4.3

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.