{"action":"created","issue":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/19","repository_url":"https://api.github.com/repos/floragunncom/search-guard","labels_url":"https://api.github.com/repos/floragunncom/search-guard/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/floragunncom/search-guard/issues/19/comments","events_url":"https://api.github.com/repos/floragunncom/search-guard/issues/19/events","html_url":"https://github.com/floragunncom/search-guard/issues/19","id":91245003,"number":19,"title":"No access to kibana when adding bypass on .kibana:index-pattern","user":{"login":"julienbeclin","id":12039154,"avatar_url":"https://avatars.githubusercontent.com/u/12039154?v=3","gravatar_id":"","url":"https://api.github.com/users/julienbeclin","html_url":"https://github.com/julienbeclin","followers_url":"https://api.github.com/users/julienbeclin/followers","following_url":"https://api.github.com/users/julienbeclin/following{/other_user}","gists_url":"https://api.github.com/users/julienbeclin/gists{/gist_id}","starred_url":"https://api.github.com/users/julienbeclin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/julienbeclin/subscriptions","organizations_url":"https://api.github.com/users/julienbeclin/orgs","repos_url":"https://api.github.com/users/julienbeclin/repos","events_url":"https://api.github.com/users/julienbeclin/events{/privacy}","received_events_url":"https://api.github.com/users/julienbeclin/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/floragunncom/search-guard/labels/wait%20for%20user%20feedback","name":"wait for user feedback","color":"fbca04"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-06-26T13:04:41Z","updated_at":"2016-05-01T11:10:04Z","closed_at":"2016-05-01T11:10:04Z","body":"Hi I have an issue when I add a bypass on inde:type. Any idea ?\r\n\r\nConfig :\r\n\r\n```json\r\n# Enable or disable the complete Searchguard plugin functionality\r\nsearchguard.enabled: true\r\n\r\n# Path where to write/read the searchguard master key file\r\nsearchguard.key_path: /etc/searchguard/\r\n\r\n# When using DLS or FLS and a get or mget is performed then rewrite it as search request\r\nsearchguard.rewrite_get_as_search: true\r\n\r\nsearchguard.authentication.authentication_backend.impl: com.floragunn.searchguard.authentication.backend.simple.SettingsBasedAuthenticationBackend\r\n\r\nsearchguard.authentication.authorizer.impl: com.floragunn.searchguard.authorization.simple.SettingsBasedAuthorizator\r\n\r\nsearchguard.authentication.http_authenticator.impl: com.floragunn.searchguard.authentication.http.basic.HTTPBasicAuthenticator\r\n\r\nsearchguard.authentication.settingsdb.user.admin: admin\r\nsearchguard.authentication.settingsdb.user.user1: user1pwd\r\nsearchguard.authentication.settingsdb.user.user2: user2pwd\r\n\r\nsearchguard.authentication.authorization.settingsdb.roles.admin: [\"admin\"]\r\n\r\n# Configure the actionrequestfilter to allow or forbid action\r\nsearchguard.actionrequestfilter.names: [\"readonly\",\"kibanaaccess\"]\r\nsearchguard.actionrequestfilter.readonly.allowed_actions: [ \"indices/data/read/*\",\"*monitor*\", \"indices:admin*\"]\r\nsearchguard.actionrequestfilter.readonly.forbidden_actions: [\"cluster:admin*\",\"indices:data/write*\"]\r\n```\r\n\r\n```json\r\nACL rules :\r\n\r\n{\"acl\": [\r\n    {\r\n      \"__Comment__\": \"Default is to execute all filters\",\r\n      \"filters_bypass\": [],\r\n      \"filters_execute\": [\"*\"]\r\n    },\r\n    {\r\n      \"__Comment__\": \"This means that every requestor (regardless of the requestors hostname and username) which has the admin role can do anything\",\r\n      \"roles\": [\r\n        \"admin\"\r\n      ],\r\n      \"filters_bypass\": [\"*\"],\r\n      \"filters_execute\": []\r\n    },\r\n    {\r\n      \"__Comment__\": \"This means that for the user user1 on index .kibana and type index-pattern, all is bypassed\",\r\n      \"users\": [\"user1\"],\r\n      \"indices\": [\".kibana:index_patten\"],\r\n      \"filters_bypass\": [\"*\"],\r\n      \"filters_execute\": []\r\n    }\r\n]}'\r\n```\r\nuser1 cannot access kibana with this error :\r\n\r\n![error_kibana](https://cloud.githubusercontent.com/assets/12039154/8377775/73f961b0-1c14-11e5-96c7-f119016d7b9c.png)\r\n\r\n\r\n\r\nBut only with this ACL rules :\r\n\r\n``` json\r\n\r\n{\"acl\": [\r\n    {\r\n      \"__Comment__\": \"Default is to execute all filters\",\r\n      \"filters_bypass\": [],\r\n      \"filters_execute\": [\"*\"]\r\n    },\r\n    {\r\n      \"__Comment__\": \"This means that every requestor (regardless of the requestors hostname and username) which has the admin role can do anything\",\r\n      \"roles\": [\r\n        \"admin\"\r\n      ],\r\n      \"filters_bypass\": [\"*\"],\r\n      \"filters_execute\": []\r\n    }\r\n]}'\r\n```\r\n\r\nuser1 can access to kibana and every index."},"comment":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/comments/216035159","html_url":"https://github.com/floragunncom/search-guard/issues/19#issuecomment-216035159","issue_url":"https://api.github.com/repos/floragunncom/search-guard/issues/19","id":216035159,"user":{"login":"floragunncom","id":11678154,"avatar_url":"https://avatars.githubusercontent.com/u/11678154?v=3","gravatar_id":"","url":"https://api.github.com/users/floragunncom","html_url":"https://github.com/floragunncom","followers_url":"https://api.github.com/users/floragunncom/followers","following_url":"https://api.github.com/users/floragunncom/following{/other_user}","gists_url":"https://api.github.com/users/floragunncom/gists{/gist_id}","starred_url":"https://api.github.com/users/floragunncom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/floragunncom/subscriptions","organizations_url":"https://api.github.com/users/floragunncom/orgs","repos_url":"https://api.github.com/users/floragunncom/repos","events_url":"https://api.github.com/users/floragunncom/events{/privacy}","received_events_url":"https://api.github.com/users/floragunncom/received_events","type":"User","site_admin":false},"created_at":"2016-05-01T11:10:03Z","updated_at":"2016-05-01T11:10:03Z","body":"Auto close this issue because it refers to Search Guard 1 which is decommissioned now. For details pls. see https://github.com/floragunncom/search-guard-attic/wiki . If this issue is still valid for Search Guard 2 (for elasticsearch 2.x) feel free to reopen it (or to file a new one). Pls. do not longer report issues for Search Guard 1 (for elasticsearch 1.x). We sincerely apologize for the inconvenience this may have caused. Thanks for contributing!"}}