User access to index management

10

I ended up needing:

#Block adding custom fields
  - name: "Block access to update fields"
    type: "forbid"
    methods: ['PUT']
    headers: [ "x-ror-kibana-request-path:/s/default/api/content_management/rpc/update" ]
    groups_any_of: ["group_to_block1", "group_to_block2"]

To disable adding fields by users.

It would maybe be good to have a more elegant approach for this at some point.