kibana/x-pack/plugins/license_management/server/lib/permissions.ts

/*
 * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
 * or more contributor license agreements. Licensed under the Elastic License
 * 2.0; you may not use this file except in compliance with the Elastic License
 * 2.0.
 */

import { IScopedClusterClient } from 'src/core/server';

interface GetPermissionsArg {
  isSecurityEnabled: boolean;
  client: IScopedClusterClient;
}

export async function getPermissions({ isSecurityEnabled, client }: GetPermissionsArg) {
  if (!isSecurityEnabled) {
    // If security isn't enabled, let the user use license management
    return {
      hasPermission: true,
    };
  }

  const options = {
    body: {
      cluster: ['manage'], // License management requires "manage" cluster privileges
    },
  };

  try {
    const { body: response } = await client.asCurrentUser.security.hasPrivileges(options);
    return {
      hasPermission: response.cluster.manage,
    };
  } catch (error) {
    return error.body;
  }
}