Forbidden path issue with ROR enterprise kibana plugin

1

Hi there,

I’m using the trial version of the enterprise kibana plugin. I followed the instructions in this article to get started: https://github.com/beshu-tech/readonlyrest-docs/blob/master/multitenancy_guide.md

Issue I’m running into is that whenever I log in as any user (e.g., admin_usr, ops_ro_usr), It logs me in but its basically a blank screen with kibana navbar as below

56%20pm
56%20pm1280×741 15.4 KB

and the kibana console gives the error below:
[error][readonlyrest_kbn] got an error [403] Forbidden for path /api/saved_objects/_find

any idea on what the issue is? everything seems to work fine if i sign in as kibana:kibana., but not any other user.

Initially, I did get a “high disk watermark” warning in elasticsearch which made all indices read-only. But even after resolving that, the “forbidden for path” issue still persisted.

Thanks :slight_smile:

2

Hello @mirzenx!
We are talking about ROR 1.16.26_es6.4.0 installed both in Kibana and Elasticsearch, right?

Is there any forbidden request in Elasticsearch logs?

3

I found an error in the example code, the users didn’t have permission to access their own kibana indices! Please review the corrected documentation.

1 Like