{"action":"created","issue":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/220","repository_url":"https://api.github.com/repos/floragunncom/search-guard","labels_url":"https://api.github.com/repos/floragunncom/search-guard/issues/220/labels{/name}","comments_url":"https://api.github.com/repos/floragunncom/search-guard/issues/220/comments","events_url":"https://api.github.com/repos/floragunncom/search-guard/issues/220/events","html_url":"https://github.com/floragunncom/search-guard/issues/220","id":183597587,"number":220,"title":"No permissions for indices:data/read/search","user":{"login":"armenak","id":3421052,"avatar_url":"https://avatars.githubusercontent.com/u/3421052?v=3","gravatar_id":"","url":"https://api.github.com/users/armenak","html_url":"https://github.com/armenak","followers_url":"https://api.github.com/users/armenak/followers","following_url":"https://api.github.com/users/armenak/following{/other_user}","gists_url":"https://api.github.com/users/armenak/gists{/gist_id}","starred_url":"https://api.github.com/users/armenak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/armenak/subscriptions","organizations_url":"https://api.github.com/users/armenak/orgs","repos_url":"https://api.github.com/users/armenak/repos","events_url":"https://api.github.com/users/armenak/events{/privacy}","received_events_url":"https://api.github.com/users/armenak/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-18T06:03:30Z","updated_at":"2016-10-18T15:40:32Z","closed_at":null,"body":"Hello,\r\n\r\nMy configuration is the following:\r\nJDK 1.8\r\nSearchGuard 2.4.1.7\r\nElasticSearch 2.4.1\r\nKibana 4.6\r\nNumber of nodes: 1 (this is test server).\r\n\r\nI am trying to restrict the access for different roles to different index names. For examples, the role A will have access only to indices logstash-syslog* while the role B only to indices logstash-audit*, etc.\r\n\r\nBelow is the configuration:\r\n\r\nsg_role_roleb:\r\n  indices:\r\n    '*':\r\n      '*':\r\n        - indices:data/read/field_stats\r\n        - indices:data/read/msearch\r\n    'logstash-syslog*':\r\n      '*':\r\n        - '*'\r\n    '?kibana':\r\n      '*':\r\n        - READ\r\n        - \"indices:*\"\r\n        - indices:admin/exists*\r\n        - indices:admin/mapping/put*\r\n        - indices:admin/mappings/fields/get*\r\n        - indices:admin/mappings/fields*\r\n        - indices:admin/refresh*\r\n        - indices:admin/validate/query*\r\n        - indices:data/read/get*\r\n        - indices:data/read/mget*\r\n        - indices:data/read/search*\r\n        - indices:data/read/field_stats*\r\n        - indices:data/write/delete*\r\n        - indices:data/write/index*\r\n        - indices:data/write/update*\r\n\r\nI use internal user authorization. The user that belongs to the defined role is successfully authenticated via Kibana, Kibana correctly displays logs from the file which was defined by for this role. However, Kibana displays \"No permissions for indices:data/read/search\" error.\r\n\r\nLog file contains the following message:\r\n[2016-10-17 22:11:24,771][INFO ][com.floragunn.searchguard.configuration.PrivilegesEvaluator] No perm match for indices:data/read/search and [sg_role_roleb]\r\n\r\nAm I doing something wrong? Would you please help me with this problem?\r\n\r\nThank you,\r\nArmenak"},"comment":{"url":"https://api.github.com/repos/floragunncom/search-guard/issues/comments/254548239","html_url":"https://github.com/floragunncom/search-guard/issues/220#issuecomment-254548239","issue_url":"https://api.github.com/repos/floragunncom/search-guard/issues/220","id":254548239,"user":{"login":"floragunncom","id":11678154,"avatar_url":"https://avatars.githubusercontent.com/u/11678154?v=3","gravatar_id":"","url":"https://api.github.com/users/floragunncom","html_url":"https://github.com/floragunncom","followers_url":"https://api.github.com/users/floragunncom/followers","following_url":"https://api.github.com/users/floragunncom/following{/other_user}","gists_url":"https://api.github.com/users/floragunncom/gists{/gist_id}","starred_url":"https://api.github.com/users/floragunncom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/floragunncom/subscriptions","organizations_url":"https://api.github.com/users/floragunncom/orgs","repos_url":"https://api.github.com/users/floragunncom/repos","events_url":"https://api.github.com/users/floragunncom/events{/privacy}","received_events_url":"https://api.github.com/users/floragunncom/received_events","type":"User","site_admin":false},"created_at":"2016-10-18T15:40:32Z","updated_at":"2016-10-18T15:40:32Z","body":"why not just adding ``indices:data/read/search`` to ``sg_role_roleb``"}}
{"actor":{"display_login":"floragunncom"}}