I have installed the RoR plugin on ES, version in use is 1.16.8 for ES 5.4.2. This is configured according to Make Kibana read only for domain other than localhost, see the GitHub resource.
I basically have a read-only account, and an admin account for Kibana. This works as expected. With the read-only account, I can not save changes to dashboard or visualizations for example.
What I found out today though, is that I can go to: Management > Index paterns, select an index, and change a field. I do get a login prompt, but I can cancel this. Make changes to an index field attribute, click the ‘Update Field’ button and the change is indeed accepted.
Is this a bug in the RoR plugin, or in my configuration?