Skip to content

Conversation

@tvernum
Copy link
Contributor

@tvernum tvernum commented Mar 27, 2019

No description provided.

@tvernum tvernum added >docs General docs changes :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC v8.0.0 labels Mar 27, 2019
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security

@tvernum tvernum merged commit 2d1402b into elastic:master Mar 27, 2019
tvernum added a commit to tvernum/elasticsearch that referenced this pull request Apr 2, 2019
Fix link from role mapping API to custom role provider.
tvernum added a commit that referenced this pull request Apr 2, 2019
This adds a new `role_templates` field to role mappings that is an
alternative to the existing roles field.

These templates are evaluated at runtime to determine which roles should be
granted to a user.
For example, it is possible to specify:

    "role_templates": [
      { "template":{ "source": "_user_{{username}}" } }
    ]

which would mean that every user is assigned to their own role based on
their username.

You may not specify both roles and role_templates in the same role
mapping.

This commit adds support for templates to the role mapping API, the role
mapping engine, the Java high level rest client, and Elasticsearch
documentation.

Due to the lack of caching in our role mapping store, it is currently
inefficient to use a large number of templated role mappings. This will be
addressed in a future change.

Backport of: #39984, #40504
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

>docs General docs changes :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC v8.0.0-alpha1

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants