security of using this and avoid user modifying javascript to remove filters and see more data? about kibana-api HOT 7 CLOSED

Do you use x-pack or searchguard ?
(https://github.com/floragunncom/search-guard)

from kibana-api.

No, also i dont see how can that help, i dont want to have a login user/password in xpack for each different user i want to show data. I want to filter that in my application.

from kibana-api.

with xpack/searchguard i know i can define user/password and associate some filter but then my app will have to know all user/password in xpack right? and aslo can i have one dashboard shared across all users or i need to define dashboard again and again on every user/role in kibana.

from kibana-api.

First ,I recommend you to protect your elasticsearch index, otherwise the users can reach your kibana embedded url and navigate to kibana admin(5601 port) and then go to "dev tools" tab and there delete your index.

I have a question:
There is a different in kibana dashboard between two users for example different visualisation or the only different thing is the data?

from kibana-api.

no difference in dashboard, we want to use same dashboard, just data change across users logged into my website

from kibana-api.

So unfortunately, I think that kibana-API is not the plugin that you looking for, kibana API expose kibana(not elasticsearch) functionality like create visualisation dynamically, create index pattern dynamically etc.
As I understand your problem is how to expose specific data to specific user, it is not this plugin scope.

I have two suggestions:

1. create different index for each user, then in kibana embedded URL change the index pattern for specific user,in this solution you can use kibana-API plugin to create the index-pattern dynamically.
2. Like I said try use search-guard, I think it exactly what you looking for

from kibana-api.

ok, i understand. Thanks!

from kibana-api.