test: indices: - names: [ 'dls' ] privileges: - read query: "{\"match\": {\"year\": 2016}}" - names: [ 'fls' ] privileges: - read field_security: grant: [ '*' ] except: [ 'year', 'hidden' ]