github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-23 09:19:04 -04:00
Code Issues Projects Releases Packages Wiki Activity

[So tagging] Add automatic read privileges for "tag" SO type (#202400)

Browse source
This commit is contained in:
Sébastien Loix 2024-12-11 12:11:13 +00:00 • committed by GitHub
parent d6cfd3fce8
commit af0f2910db
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
9 changed files with 245 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

32
x-pack/plugins/features/server/feature_registry.test.ts
View file

@ -57,7 +57,7 @@ describe('FeatureRegistry', () => {
app: ['app1'],
savedObject: {
all: ['space', 'etc', 'telemetry'],
read: ['canvas', 'config', 'config-global', 'url'],
read: ['canvas', 'config', 'config-global', 'url', 'tag'],
},
api: ['someApiEndpointTag', 'anotherEndpointTag'],
ui: ['allowsFoo', 'showBar', 'showBaz'],
@ -65,7 +65,7 @@ describe('FeatureRegistry', () => {
read: {
savedObject: {
all: [],
read: ['config', 'config-global', 'url', 'telemetry'],
read: ['config', 'config-global', 'url', 'telemetry', 'tag'],
},
ui: [],
},
@ -130,7 +130,7 @@ describe('FeatureRegistry', () => {
app: ['app1'],
savedObject: {
all: ['space', 'etc', 'telemetry'],
read: ['canvas', 'config', 'config-global', 'url'],
read: ['canvas', 'config', 'config-global', 'url', 'tag'],
},
api: ['someApiEndpointTag', 'anotherEndpointTag'],
ui: ['allowsFoo', 'showBar', 'showBaz'],
@ -314,7 +314,7 @@ describe('FeatureRegistry', () => {
expect(allPrivilege?.savedObject.all).toEqual(['telemetry']);
});
it(`automatically grants access to config, config-global, url, and telemetry saved objects`, () => {
it(`automatically grants access to config, config-global, url, telemetry and tag saved objects`, () => {
const feature: KibanaFeatureConfig = {
id: 'test-feature',
name: 'Test Feature',
@ -348,16 +348,17 @@ describe('FeatureRegistry', () => {
const allPrivilege = result[0].privileges?.all;
const readPrivilege = result[0].privileges?.read;
expect(allPrivilege?.savedObject.read).toEqual(['config', 'config-global', 'url']);
expect(allPrivilege?.savedObject.read).toEqual(['config', 'config-global', 'url', 'tag']);
expect(readPrivilege?.savedObject.read).toEqual([
'config',
'config-global',
'telemetry',
'url',
'tag',
]);
});
it(`automatically grants 'all' access to telemetry and 'read' to [config, config-global, url] saved objects for the reserved privilege`, () => {
it(`automatically grants 'all' access to telemetry and 'read' to [config, config-global, url, tag] saved objects for the reserved privilege`, () => {
const feature: KibanaFeatureConfig = {
id: 'test-feature',
name: 'Test Feature',
@ -388,7 +389,7 @@ describe('FeatureRegistry', () => {
const reservedPrivilege = result[0]!.reserved!.privileges[0].privilege;
expect(reservedPrivilege.savedObject.all).toEqual(['telemetry']);
expect(reservedPrivilege.savedObject.read).toEqual(['config', 'config-global', 'url']);
expect(reservedPrivilege.savedObject.read).toEqual(['config', 'config-global', 'url', 'tag']);
});
it(`does not duplicate the automatic grants if specified on the incoming feature`, () => {
@ -402,14 +403,14 @@ describe('FeatureRegistry', () => {
ui: [],
savedObject: {
all: ['telemetry'],
read: ['config', 'config-global', 'url'],
read: ['config', 'config-global', 'url', 'tag'],
},
},
read: {
ui: [],
savedObject: {
all: [],
read: ['config', 'config-global', 'url'],
read: ['config', 'config-global', 'url', 'tag'],
},
},
},
@ -426,11 +427,12 @@ describe('FeatureRegistry', () => {
const allPrivilege = result[0].privileges!.all;
const readPrivilege = result[0].privileges!.read;
expect(allPrivilege?.savedObject.all).toEqual(['telemetry']);
expect(allPrivilege?.savedObject.read).toEqual(['config', 'config-global', 'url']);
expect(allPrivilege?.savedObject.read).toEqual(['config', 'config-global', 'url', 'tag']);
expect(readPrivilege?.savedObject.read).toEqual([
'config',
'config-global',
'url',
'tag',
'telemetry',
]);
});
@ -518,7 +520,7 @@ describe('FeatureRegistry', () => {
name: 'Foo',
app: ['app1', 'app2'],
savedObject: {
all: ['config', 'config-global', 'space', 'etc'],
all: ['config', 'config-global', 'space', 'tag', 'etc'],
read: ['canvas'],
},
api: ['someApiEndpointTag', 'anotherEndpointTag'],
@ -2455,7 +2457,7 @@ describe('FeatureRegistry', () => {
expect(featureA.privileges).toEqual({
all: {
ui: [],
savedObject: { all: ['telemetry'], read: ['config', 'config-global', 'url'] },
savedObject: { all: ['telemetry'], read: ['config', 'config-global', 'url', 'tag'] },
composedOf: [
{ feature: 'featureC', privileges: ['subFeatureCOne'] },
{ feature: 'featureD', privileges: ['all'] },
@ -2463,7 +2465,7 @@ describe('FeatureRegistry', () => {
},
read: {
ui: [],
savedObject: { all: [], read: ['config', 'config-global', 'telemetry', 'url'] },
savedObject: { all: [], read: ['config', 'config-global', 'telemetry', 'url', 'tag'] },
composedOf: [{ feature: 'featureD', privileges: ['read'] }],
},
});
@ -2483,12 +2485,12 @@ describe('FeatureRegistry', () => {
expect(featureA.privileges).toEqual({
all: {
ui: [],
savedObject: { all: ['telemetry'], read: ['config', 'config-global', 'url'] },
savedObject: { all: ['telemetry'], read: ['config', 'config-global', 'url', 'tag'] },
composedOf: [{ feature: 'featureE', privileges: ['all'] }],
},
read: {
ui: [],
savedObject: { all: [], read: ['config', 'config-global', 'telemetry', 'url'] },
savedObject: { all: [], read: ['config', 'config-global', 'telemetry', 'url', 'tag'] },
},
});
});

2
x-pack/plugins/features/server/feature_registry.ts
View file

@ -340,6 +340,7 @@ function applyAutomaticAllPrivilegeGrants(
'config',
'config-global',
'url',
'tag',
]);
}
});
@ -356,6 +357,7 @@ function applyAutomaticReadPrivilegeGrants(
'config-global',
'telemetry',
'url',
'tag',
]);
}
});

2
x-pack/plugins/features/server/plugin.test.ts
View file

@ -168,6 +168,7 @@ describe('Features Plugin', () => {
"config",
"config-global",
"url",
"tag",
],
},
"ui": Array [],
@ -183,6 +184,7 @@ describe('Features Plugin', () => {
"config-global",
"telemetry",
"url",
"tag",
],
},
"ui": Array [],

3
x-pack/test/saved_object_tagging/api_integration/security_and_spaces/apis/_find.ts
View file

@ -80,8 +80,9 @@ export default function (ftrContext: FtrProviderContext) {
USERS.DEFAULT_SPACE_DASHBOARD_READ_USER,
USERS.DEFAULT_SPACE_VISUALIZE_READ_USER,
USERS.DEFAULT_SPACE_MAPS_READ_USER,
USERS.DEFAULT_SPACE_ADVANCED_SETTINGS_READ_USER,
],
noResults: [USERS.DEFAULT_SPACE_ADVANCED_SETTINGS_READ_USER],
noResults: [],
unauthorized: [USERS.NOT_A_KIBANA_USER],
};

2
x-pack/test/saved_object_tagging/api_integration/security_and_spaces/apis/get.ts
View file

@ -69,7 +69,7 @@ export default function (ftrContext: FtrProviderContext) {
USERS.DEFAULT_SPACE_VISUALIZE_READ_USER,
USERS.DEFAULT_SPACE_MAPS_READ_USER,
],
unauthorized: [USERS.NOT_A_KIBANA_USER, USERS.DEFAULT_SPACE_ADVANCED_SETTINGS_READ_USER],
unauthorized: [USERS.NOT_A_KIBANA_USER],
};
const createUserTest = (

2
x-pack/test/saved_object_tagging/api_integration/security_and_spaces/apis/get_all.ts
View file

@ -86,7 +86,7 @@ export default function (ftrContext: FtrProviderContext) {
USERS.DEFAULT_SPACE_VISUALIZE_READ_USER,
USERS.DEFAULT_SPACE_MAPS_READ_USER,
],
unauthorized: [USERS.NOT_A_KIBANA_USER, USERS.DEFAULT_SPACE_ADVANCED_SETTINGS_READ_USER],
unauthorized: [USERS.NOT_A_KIBANA_USER],
};
const createUserTest = (

140
x-pack/test_serverless/api_integration/test_suites/observability/platform_security/authorization.ts
View file

@ -94,6 +94,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:apm/show",
"ui:apm/save",
"ui:apm/alerting:show",
@ -1572,6 +1577,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:apm/show",
"ui:apm/save",
"ui:apm/alerting:show",
@ -3041,6 +3051,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:apm/show",
"ui:apm/alerting:show",
"alerting:apm.error_rate/apm/rule/get",
@ -3651,6 +3666,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:apm/show",
"ui:apm/alerting:show",
"alerting:apm.error_rate/apm/rule/get",
@ -4896,6 +4916,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:config-global/find",
"saved_object:config-global/open_point_in_time",
"saved_object:config-global/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"ui:discover/save",
"ui:discover/saveQuery",
@ -6103,6 +6128,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"ui:discover/save",
"ui:discover/saveQuery",
@ -7278,6 +7308,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"api:rac",
"app:observability",
@ -7777,6 +7812,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:telemetry/find",
"saved_object:telemetry/open_point_in_time",
"saved_object:telemetry/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"ui:discover/createShortUrl",
"api:rac",
@ -8879,6 +8919,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:fleetv2/read",
"ui:fleetv2/all",
"ui:fleetv2/agents_read",
@ -9370,6 +9415,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:fleetv2/read",
"ui:fleetv2/all",
"api:infra",
@ -9763,6 +9813,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:fleetv2/read",
"api:infra",
"api:rac",
@ -9982,6 +10037,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:fleetv2/read",
"ui:fleetv2/agents_read",
"ui:fleetv2/agent_policies_read",
@ -10402,6 +10462,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:infrastructure/show",
"ui:infrastructure/configureSource",
"ui:infrastructure/save",
@ -11920,6 +11985,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:infrastructure/show",
"ui:infrastructure/configureSource",
"ui:infrastructure/save",
@ -13417,6 +13487,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:infrastructure/show",
"alerting:metrics.alert.threshold/infrastructure/rule/get",
"alerting:metrics.alert.threshold/infrastructure/rule/getRuleState",
@ -14042,6 +14117,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:infrastructure/show",
"alerting:metrics.alert.threshold/infrastructure/rule/get",
"alerting:metrics.alert.threshold/infrastructure/rule/getRuleState",
@ -14650,6 +14730,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"api:downloadCsv",
"ui:management/insightsAndAlerting/reporting",
"ui:dashboard/downloadCsv",
@ -14685,6 +14770,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"api:downloadCsv",
"ui:management/insightsAndAlerting/reporting",
"ui:dashboard/downloadCsv",
@ -14713,6 +14803,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
],
"read": Array [
"login:",
@ -14736,6 +14831,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
],
},
"slo": Object {
@ -14801,6 +14901,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:slo/read",
"ui:slo/write",
"alerting:slo.rules.burnRate/slo/rule/get",
@ -16025,6 +16130,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:slo/read",
"ui:slo/write",
"alerting:slo.rules.burnRate/slo/rule/get",
@ -17227,6 +17337,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:slo/read",
"alerting:slo.rules.burnRate/slo/rule/get",
"alerting:slo.rules.burnRate/slo/rule/getRuleState",
@ -17727,6 +17842,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:slo/read",
"alerting:slo.rules.burnRate/slo/rule/get",
"alerting:slo.rules.burnRate/slo/rule/getRuleState",
@ -18315,6 +18435,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:uptime/save",
"ui:uptime/configureSettings",
"ui:uptime/show",
@ -19791,6 +19916,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:uptime/save",
"ui:uptime/configureSettings",
"ui:uptime/show",
@ -21189,6 +21319,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:uptime/show",
"ui:uptime/alerting:save",
"alerting:xpack.uptime.alerts.tls/uptime/rule/get",
@ -21784,6 +21919,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:uptime/show",
"ui:uptime/alerting:save",
"alerting:xpack.uptime.alerts.tls/uptime/rule/get",

40
x-pack/test_serverless/api_integration/test_suites/search/platform_security/authorization.ts
View file

@ -703,6 +703,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:config-global/find",
"saved_object:config-global/open_point_in_time",
"saved_object:config-global/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"ui:discover/save",
"ui:discover/saveQuery",
@ -782,6 +787,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"ui:discover/save",
"ui:discover/saveQuery",
@ -829,6 +839,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
],
"read": Array [
@ -881,6 +896,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:telemetry/find",
"saved_object:telemetry/open_point_in_time",
"saved_object:telemetry/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:discover/show",
"ui:discover/createShortUrl",
],
@ -949,6 +969,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"api:downloadCsv",
"ui:management/insightsAndAlerting/reporting",
"ui:dashboard/downloadCsv",
@ -984,6 +1009,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"api:downloadCsv",
"ui:management/insightsAndAlerting/reporting",
"ui:dashboard/downloadCsv",
@ -1012,6 +1042,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
],
"read": Array [
"login:",
@ -1035,6 +1070,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
],
},
}

60
x-pack/test_serverless/api_integration/test_suites/security/platform_security/authorization.ts
View file

@ -67,6 +67,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"api:downloadCsv",
"ui:management/insightsAndAlerting/reporting",
"ui:dashboard/downloadCsv",
@ -102,6 +107,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"api:downloadCsv",
"ui:management/insightsAndAlerting/reporting",
"ui:dashboard/downloadCsv",
@ -130,6 +140,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
],
"read": Array [
"login:",
@ -153,6 +168,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
],
},
"siem": Object {
@ -436,6 +456,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:siem/show",
"ui:siem/crud",
"ui:siem/entity-analytics",
@ -843,11 +868,6 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:map/find",
"saved_object:map/open_point_in_time",
"saved_object:map/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:dashboard/createNew",
"ui:dashboard/show",
"ui:dashboard/showWriteControls",
@ -1295,6 +1315,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:siem/show",
"ui:siem/crud",
"ui:siem/entity-analytics",
@ -1700,11 +1725,6 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:map/find",
"saved_object:map/open_point_in_time",
"saved_object:map/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:dashboard/createNew",
"ui:dashboard/show",
"ui:dashboard/showWriteControls",
@ -1876,6 +1896,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:siem/show",
"ui:siem/entity-analytics",
"ui:siem/investigation-guide",
@ -2065,11 +2090,6 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:dashboard/find",
"saved_object:dashboard/open_point_in_time",
"saved_object:dashboard/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:dashboard/show",
"ui:dashboard/createShortUrl",
"app:visualize",
@ -2243,6 +2263,11 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:url/find",
"saved_object:url/open_point_in_time",
"saved_object:url/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:siem/show",
"ui:siem/entity-analytics",
"ui:siem/investigation-guide",
@ -2433,11 +2458,6 @@ export default function ({ getService }: FtrProviderContext) {
"saved_object:dashboard/find",
"saved_object:dashboard/open_point_in_time",
"saved_object:dashboard/close_point_in_time",
"saved_object:tag/bulk_get",
"saved_object:tag/get",
"saved_object:tag/find",
"saved_object:tag/open_point_in_time",
"saved_object:tag/close_point_in_time",
"ui:dashboard/show",
"ui:dashboard/createShortUrl",
"app:visualize",