honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Shield Docs: Added information about enabling DLS/FLS. 

Original commit: elastic/x-pack-elasticsearch@23f9ad66d4
This commit is contained in:
debadair 2015-11-23 11:19:09 -08:00
parent a973cbcd72
commit c365da861f
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
shield/docs/public/reference.asciidoc
View File

@ -188,7 +188,8 @@ The parameters listed in this section are configured in the `config/elasticsearc
[options="header"] [options="header"]
|====== |======
| Name | Default | Description | Name | Default | Description
| `shield.dls_fls.enabled` | `true` | This setting can be used to completely disable document and field level security regardless of how roles are configured. | `shield.dls_fls.enabled` | `false` | Set to `true` to enable document and field level security.
You cannot submit `_bulk` update requests when document and field level security is enabled.
|====== |======

2
shield/docs/public/setting-up-field-and-document-level-security.asciidoc
View File

@ -8,6 +8,8 @@ Document level security permissions restrict access to particular documents with
Field and document level permissions are specified separately, but a role can define both field and document level permissions. Field and document level permissions are specified separately, but a role can define both field and document level permissions.
Field and document level security permissions can be configured on a per-index basis. Field and document level security permissions can be configured on a per-index basis.
IMPORTANT: Document and Field Level Security is disabled by default. Set `shield.dls_fls.enabled` to `true` in `elasticsearch.yml` to enable it. You cannot submit `_bulk` update requests when document and field level security is enabled.
==== Field Level Security ==== Field Level Security
To enable field level security, you specify the fields that each role can access in the `roles.yml` file. To enable field level security, you specify the fields that each role can access in the `roles.yml` file.