iSharkFly-Docs
/
opensearch-docs-cn
mirror of https://github.com/iSharkFly-Docs/opensearch-docs-cn
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Documentation for security roles to be used for DLS parameter substitution. Added under opensearch-project/security/#1568 

Signed-off-by: Matthew Moreland <matthew.moreland1@defence.gov.au>
This commit is contained in:
Matthew Moreland 2022-01-28 15:57:31 +11:00
parent e3815540e7
commit fac8b9676c
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
_security-plugin/access-control/document-level-security.md
View File

@ -85,7 +85,8 @@ This table lists substitutions.
Term | Replaced with Term | Replaced with
:--- | :--- :--- | :---
`${user.name}` | Username. `${user.name}` | Username.
`${user.roles}` | A comma-separated, quoted list of user roles. `${user.roles}` | A comma-separated, quoted list of user backend roles.
`${user.securityRoles}` | A comma-separated, quoted list of user security roles.
`${attr.<TYPE>.<NAME>}` | An attribute with name `<NAME>` defined for a user. `<TYPE>` is `internal`, `jwt`, `proxy` or `ldap` `${attr.<TYPE>.<NAME>}` | An attribute with name `<NAME>` defined for a user. `<TYPE>` is `internal`, `jwt`, `proxy` or `ldap`