🔎 Open source distributed and RESTful search engine.
Go to file
jaymode 7c62e4c82c disable core caches to ensure users are always authorized
The IndicesTermsFilter Cache in core can leak data by not authorizing users prior to
retrieving data from the cache. We work around this by ensuring that the cache has
a maximum size of 0, effectively disabling it.

A test is also added to ensure that data is not leaked by this cache or the cache used by
the ScriptService in core.

Closes elastic/elasticsearch#854

Original commit: elastic/x-pack-elasticsearch@8a48bdad98
2015-06-05 11:28:13 -04:00
dev-tools update shield to depend on elasticsearch 2.0 2015-05-26 13:57:58 -04:00
src disable core caches to ensure users are always authorized 2015-06-05 11:28:13 -04:00
LICENSE.txt Initial X-Pack commit 2018-04-20 14:16:58 -07:00
NOTICE.txt Added unboundID free use license to NOTICE.txt 2015-03-04 10:34:55 +01:00
README.asciidoc Docs: Added SSL certification/CA creation docs 2014-07-23 15:42:10 +02:00
TESTING.asciidoc update shield to depend on elasticsearch 2.0 2015-05-26 13:57:58 -04:00
pom.xml remove commons codec dependency 2015-06-01 07:52:38 -04:00
test-signatures.txt remove commons codec dependency 2015-06-01 07:52:38 -04:00
tests.policy Integration with license plugin 2014-12-04 20:49:35 +01:00

README.asciidoc

= Elasticsearch Security Plugin

This plugins adds security features to elasticsearch

You can build the plugin with `mvn package`.

The documentation is put in the `docs/` directory.