Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

KQL Search Autocomplete shows fields that user does not have access to #78096

Closed
boutcher opened this issue Sep 21, 2020 · 3 comments
Closed

KQL Search Autocomplete shows fields that user does not have access to #78096

boutcher opened this issue Sep 21, 2020 · 3 comments
Labels
:DataDiscovery/fix-it-week Feature:Data Views Data Views code and UI - index patterns before 8.0 Feature:KQL KQL impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. loe:small Small Level of Effort Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL.

Comments

@boutcher
Copy link

boutcher commented Sep 21, 2020 •
edited by exalate-issue-sync bot
Loading

Kibana version: 7.9.1

Elasticsearch version: 7.9

Describe the bug: I have defined a user role that only has access to a subset of fields from a given index. When that user moves focus into any dashboard's KQL search box, suggestions for ALL fields are presented to the user, even the ones they do not have access to. (The problem here is that we don't want users asking for field permissions for things we want to hide from them).

** Expected Behavior ** Ideally, the list would only suggest fields that the user has access to.
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-app-arch (Team:AppArch)

@exalate-issue-sync exalate-issue-sync bot added impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. loe:small Small Level of Effort labels Jun 2, 2021
@lukasolson lukasolson added the Feature:Data Views Data Views code and UI - index patterns before 8.0 label May 17, 2022
@exalate-issue-sync exalate-issue-sync bot added impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. and removed impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. labels May 17, 2022
@lukasolson lukasolson changed the title Dashboard KQL Search Autocomplete shows fields that user does not have access to KQL Search Autocomplete shows fields that user does not have access to Feb 21, 2023
@lukasolson lukasolson added Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. and removed Team:AppServicesSv labels Feb 21, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)

@lukasolson
Copy link
Member

This has been resolved (I believe by #82223).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
:DataDiscovery/fix-it-week Feature:Data Views Data Views code and UI - index patterns before 8.0 Feature:KQL KQL impact:medium Addressing this issue will have a medium level of impact on the quality/strength of our product. loe:small Small Level of Effort Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@boutcher @timroes @lukasolson @elasticmachine