iSharkFly-Docs
/
opensearch-docs-cn
mirror of https://github.com/iSharkFly-Docs/opensearch-docs-cn
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

to make TQL consistent and add link to term-level queries section 

Signed-off-by: alicejw <alicejw@amazon.com>
This commit is contained in:
alicejw 2022-04-29 15:32:03 -07:00
parent 306885ca9c
commit b263e000a1
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
_security-plugin/access-control/document-level-security.md
View File

@ -124,9 +124,11 @@ PUT _plugins/_security/api/roles/abac
}]
}
```
## Term Lookup Query (TLQ) modes
## Term-level lookup query (TLQ) modes
You can perform term lookup queries (TLQs) with Document-level security using either of two DLS modes: Lucene-level or Filter-level. By default, the security plugin detects if a DLS query contains a TLQ or not, and chooses the appropriate mode automatically at runtime.
You can perform term-level lookup queries (TLQs) with Document-level security using either of two DLS modes: Lucene-level or Filter-level. By default, the security plugin detects if a DLS query contains a TLQ or not, and chooses the appropriate mode automatically at runtime.
To learn more about OpenSearch queries, see [Term-level queries](https://opensearch.org/docs/latest/opensearch/query-dsl/term/).
### Lucene-level DLS mode
@ -134,7 +136,7 @@ Lucene-level mode modifies Lucene queries and data structures directly to implem
### Filter-level DLS mode
OpenSearch automatically applies DLS when it receives modifying queries. This allows for term lookup queries in DLS queries, but you can only use the`get`, `search`, `mget`, and `msearch` operations to retrieve data from the protected index. Additionally, cross-cluster searches are limited with this mode.
OpenSearch automatically applies DLS when it receives modifying queries. This allows for term-level lookup queries in DLS queries, but you can only use the`get`, `search`, `mget`, and `msearch` operations to retrieve data from the protected index. Additionally, cross-cluster searches are limited with this mode.
#### How to set the DLS evaluation mode in opensearch.yml