Documentation for security roles to be used for DLS parameter substitution. Added under opensearch-project/security/#1568

Signed-off-by: Matthew Moreland <matthew.moreland1@defence.gov.au>
This commit is contained in:
Matthew Moreland 2022-01-28 15:57:31 +11:00
parent e3815540e7
commit fac8b9676c
1 changed files with 2 additions and 1 deletions

View File

@ -85,7 +85,8 @@ This table lists substitutions.
Term | Replaced with
:--- | :---
`${user.name}` | Username.
`${user.roles}` | A comma-separated, quoted list of user roles.
`${user.roles}` | A comma-separated, quoted list of user backend roles.
`${user.securityRoles}` | A comma-separated, quoted list of user security roles.
`${attr.<TYPE>.<NAME>}` | An attribute with name `<NAME>` defined for a user. `<TYPE>` is `internal`, `jwt`, `proxy` or `ldap`