原文地址: https://www.elastic.co/guide/en/elasticsearch/reference/7.7/url-access-control.html, 原文档版权归 www.elastic.co 所有
IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
URL-based access controledit
Many users use a proxy with URL-based access control to secure access to Elasticsearch indices. For multi-search, multi-get, and bulk requests, the user has the choice of specifying an index in the URL and on each individual request within the request body. This can make URL-based access control challenging.
To prevent the user from overriding the index which has been specified in the
URL, add this setting to the elasticsearch.yml file:
rest.action.multi.allow_explicit_index: false
The default value is true, but when set to false, Elasticsearch will
reject requests that have an explicit index specified in the request body.