Hi, Elasticsearch currently does not allow you to enable/disable specific HTTP methods. If you need that kind of security, please use a nginx or another webserver in front of Elasticsearch which does this.
--Alex On Thu, Jul 24, 2014 at 4:50 PM, Vijay Dodla <vijay.rem...@gmail.com> wrote: > Hi > I'm trying to disable DELETE API option from sense or via HTTP and was not > able to do it . My requirement is make DELETE API not available so that > user will not accidentally delete any index . I tried the following in .yml > file and restarted the server ,but still i'm able to DELETE any index .Is > there something i'm missing ? > > Access-Control-Allow-Methods: OPTIONS, POST, GET, PUT > Access-Control-Allow-Headers: X-Requested-With, Content-Type, > Content-Length > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to elasticsearch+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/cf3ca0be-7ea1-4c6d-af69-58dde27b1565%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/cf3ca0be-7ea1-4c6d-af69-58dde27b1565%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAGCwEM-7tAHcW71XFdoWBdNkcFgFy6CWPr%2BkYTCr_2k6_dz%3Dow%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
