Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can you add user roles and permission based searches? #100

Open
kalwar opened this issue Apr 13, 2016 · 3 comments
Open

Can you add user roles and permission based searches? #100

kalwar opened this issue Apr 13, 2016 · 3 comments

Comments

@kalwar
Copy link

kalwar commented Apr 13, 2016

It would be great if user roles and permission are also considered in the plugin.

@jettro
Copy link
Owner

jettro commented Apr 14, 2016

Do you mean as in supporting the X-Pack shield component? Or any other ideas?

@kalwar
Copy link
Author

kalwar commented Apr 14, 2016

Supporting X-Pack shield component in the GUI is one option. But it is costly and other alternative is to use search-guard.

It would be nice to use search-guard and authenticate user in the Elasticsearch-GUI .

https://github.com/floragunncom/search-guard

Hide/show search results to the user depending on certain rights:
Something like this:
angular.module(jcs.modules.auth.name).directive('access', [ jcs.modules.auth.services.authorization, function (authorization) { return { restrict: 'A', link: function (scope, element, attrs) { var makeVisible = function () { element.removeClass('hidden'); }, makeHidden = function () { element.addClass('hidden'); }, determineVisibility = function (resetFirst) { var result; if (resetFirst) { makeVisible(); } result = authorization.authorize(true, roles, attrs.accessPermissionType); if (result === jcs.modules.auth.enums.authorised.authorised) { makeVisible(); } else { makeHidden(); } }, roles = attrs.access.split(','); if (roles.length > 0) { determineVisibility(true); } } }; }]);

@jettro
Copy link
Owner

jettro commented Apr 14, 2016

Interesting, did not know about this project yet. Currently not really planning support, but it is interesting. Going to take a good look at it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants