Ganzzz
(Ganzzz)
March 21, 2017, 2:57am
1
Hi All,
I am very new to Read only rest. Can you advise me if it is ok to use readonlyrest and KIBI together ?.
I am yet to read more in detail, but your answer will help me to choose the solution.
Thanks Much
Gan
sscarduzio
(Simone Scarduzio)
March 22, 2017, 12:05am
2
I didn’t test with Kibi, but @nitram4 did in the past. Should be all right.
opened 04:48PM - 24 Oct 16 UTC
closed 08:11AM - 02 Nov 16 UTC
Im investigating support for Kibi (for of Kibana used for relational analysis). …
I have successfully started Kibi (has own plugin for ES) together with readonlyplugin.
Kibi saves its data to .kibi index, so I wanted to reuse the capability of controlling Kibi the same way as Kibana.
My configuation is like this:
```
name: Full Admin (now for Kibi) - access outside Kibana
type: allow
kibana_access: rw
kibana_index: .kibi
auth_key: kibiadmin:XXXXXXXX
```
Error message is:
```
[2016-10-24 18:25:01,460][DEBUG][plugin.readonlyrest.acl.blocks.rules.impl] Login as: kibiadmin rc: { action: indices:data/read/coordinate-search, OA:10.xx.xx.xx, indices:[.kibi], M:POST, P:/.kibi/dashboard/_coordinate_search, C:{"query":{"match_all":{}}}
[2016-10-24 18:25:01,460][DEBUG][plugin.readonlyrest.acl.blocks.rules.impl] KIBANA ACCESS DENIED { action: indices:data/read/coordinate-search, OA:10.xx.xxx.xx, indices:[.kibi], M:POST, P:/.kibi/dashboardgroup/_coordinate_search, C:{"query":{"match_all":{}}}
```
What is strange for me is, that I see there is another option indices:data/read/coordinate-search which is new to Kibi and its not working even when Im not limiting Action.
When the rules are simple like this
```
- name: Full Admin (now for Kibi) - access outside Kibana
type: allow
auth_key: kibiadmin:XXXXX
```
it works. Any clues? Thanks
Ganzzz
(Ganzzz)
March 23, 2017, 5:37am
3
Thanks for the link.
I am getting an error as " Cannot read property ‘root’ of
undefined " when I use the config mentioned in the link to connect kibi to Elastic
search. Am I missing something here ?
Thanks
sscarduzio
(Simone Scarduzio)
March 23, 2017, 9:59am
4
that looks like a javascript error, more useful would be to see if there is some “forbidden” requests on the ES side.