Skip to content

Document _user.application_resources and _user.application_privileges for DLS templates - #7551

Draft
seanstory wants to merge 1 commit into
mainfrom
ppisljar/dls-user-application-privileges
Draft

Document _user.application_resources and _user.application_privileges for DLS templates#7551
seanstory wants to merge 1 commit into
mainfrom
ppisljar/dls-user-application-privileges

Conversation

@seanstory

Copy link
Copy Markdown
Member

Summary

Documents the three new _user fields added to Elasticsearch DLS Mustache templates by elastic/elasticsearch#154785:

  • _user.applications — map from app name to resource list; ergonomic for non-dotted app names
  • _user.application_resources — flat union of all resource strings across all applications
  • _user.application_privileges — flat list of <resource>|<action> tokens for enforcing resource + action together

Changes to controlling-access-at-document-field-level.md:

  • Three new rows in the _user property table
  • New prose section with API + Kibana tab examples for _user.application_resources and _user.application_privileges
  • Note that these fields are not populated for API key authenticated users

Linked PR

elastic/elasticsearch#154785

@seanstory
seanstory requested a review from a team as a code owner July 23, 2026 17:57
@github-actions

Copy link
Copy Markdown
Contributor

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

  • Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

@github-actions

Copy link
Copy Markdown
Contributor

Elastic Docs Style Checker (Vale)

Summary: 2 warnings, 1 suggestion found

⚠️ Warnings (2): Fix when the suggestion improves clarity or correctness.
File Line Rule Message
deploy-manage/users-roles/cluster-or-deployment-auth/controlling-access-at-document-field-level.md 309 Elastic.Spelling 'api' is a possible misspelling.
deploy-manage/users-roles/cluster-or-deployment-auth/controlling-access-at-document-field-level.md 352 Elastic.Spelling 'api' is a possible misspelling.
💡 Suggestions (1): Optional style improvements. Apply when helpful.
File Line Rule Message
deploy-manage/users-roles/cluster-or-deployment-auth/controlling-access-at-document-field-level.md 345 Elastic.Semicolons Use semicolons judiciously.

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant