Skip to content

Index date math expression when defining index permissions #64972

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
albertzaharovits opened this issue Nov 12, 2020 · 2 comments
Open

Index date math expression when defining index permissions #64972

albertzaharovits opened this issue Nov 12, 2020 · 2 comments
Labels
>enhancement :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Security Meta label for security team team-discuss

Comments

@albertzaharovits
Copy link
Contributor

albertzaharovits commented Nov 12, 2020

To grant index permissions, wildcards and lucene regexps can be used in the name field of the index permission in the role definition.
The wildcards and regexps can cover indices, data streams, as well as alias names, although we're planning to remove support for aliases in the coming major release (v8) (because of issues, such as #61547 and #32238).

But aliases can be utilised by ILM rollover policies with indices that follow a naming pattern containing dates.
If we're going to take away the option to grant permissions on aliases, I think we should facilitate granting permissions on index names containing dates, by permitting using date math expressions in the name field of the index expression. The now token is especially useful.

Related https://discuss.elastic.co/t/range-query-in-doc-lvl-security/254431

@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (:Security/Authorization)

@elasticmachine elasticmachine added the Team:Security Meta label for security team label Nov 12, 2020
@bytebilly
Copy link
Contributor

Interesting proposal. Do you think there may be some issue with caching if we allow dynamic dates using now?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
>enhancement :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Security Meta label for security team team-discuss
Projects
None yet
Development

No branches or pull requests

3 participants