Ability to set security user for Elasticsearch DLS
Open
enhancement
- Dominant language
- Java
- Stars
- 14.9k
- Forks
- 3.5k
- Avg merge
- 19h 14m
- Merged PRs (30d)
- 63
Description
This is a new processor functionality in the Ingest Node that should be considered for inclusion in Logstash. This allows the setting of the authenticated user info for documents at write time to better enable document level security at query time. For Logstash, I can potentially see this as just another config option(s) in the Elasticsearch output instead of a separate filter.
Additional details on the Ingest processor is here: https://www.elastic.co/guide/en/x-pack/current/field-and-document-access-control.html#set-security-user-processor
Contributor guide
Assessment
This issue has not been assessed yet.