Full Text Search and Role permissions

I am building a system where users have specific dynamic roles which give them access to some resources (i.e meta documents). Those documents META are indexed with Elastic Search.

I can do my queries without trouble.

Now I need to take roles into account: If I add the roles allowed to see a given document while indexing docs I would then filter my query to match a particular role and return the results.

That is fine but if a role is changed I need to reindex all my documents.

If i do it dynamically on the server side 开发者_Go百科on reception of the Elastic Search result It may work as well but will consume some CPU and bandwidth, plus it may be a problem with facet searches and pagination.

How would you solve such a problem? What is the most suitable solution?

What about putting proxy in front you Elastic Search, that will remove all unwanted results and do not care about the roles the Search at all ?