3 ms·

I haven't seen anywhere in the documentation that claims "assume anyone who can reach elastic is a superuser". The Elasticsearch Security documentation appears

I haven't seen anywhere in the documentation that claims "assume anyone who can reach elastic is a superuser". The Elasticsearch Security documentation appears to be up to date and has notes on if certain features depend on a subscription. https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-security.html https://www.elastic.co/guide/en/elasticsearch/reference/curr...

FZ1 7y ago
"Elasticsearch has no concept of a user. Essentially, anyone that can send arbitrary requests to your cluster is a “super user”. " https://www.elastic.co/de/blog/found-elasticsearch-security https://www.elastic.co/de/blog/found-elasticsearch-security This document says it twice verbatim - once as an emphasizes blurb of its own. It is also re-emphasized it in several other ways. (same link as also posted by the Elasticsearch employee above).