mirror of
https://github.com/elastic/kibana.git
synced 2025-06-28 11:05:39 -04:00
b1d85aa6a8
This PR adds a new feature for streams to control whether the UI and API is available. Changes: * Add the feature with two privileges (`show` and `manage_assets`) * Can be configured with the classic `none`/`read`/`all` so it's automatically aligned with serverless editor/viewer permissions * None also means the app is not shown - to do this, the existing `status$` observable also looks for at least the `streams.show` capability * Only guards changes to the linked dashboards - changes to the Elasticsearch level are still delegated to the Elasticsearch-level permissions of the user * This happens on the UI level (disabled button and dashboard selection on the dashboard page) * and on the API level (all endpoints that can change linked dashboards require the permission) # Questions * Not sure about the name `manage_assets` - maybe it should be something else * Not sure about how the queries stuff should work - @kdelemme anything we should do in this area? --------- Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
18 lines
477 B
TypeScript
18 lines
477 B
TypeScript
/*
|
|
* Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
|
|
* or more contributor license agreements. Licensed under the Elastic License
|
|
* 2.0; you may not use this file except in compliance with the Elastic License
|
|
* 2.0.
|
|
*/
|
|
|
|
export const ASSET_VERSION = 1;
|
|
|
|
export const STREAMS_API_PRIVILEGES = {
|
|
read: 'read_stream',
|
|
manage: 'manage_stream',
|
|
} as const;
|
|
|
|
export const STREAMS_UI_PRIVILEGES = {
|
|
manage: 'manage',
|
|
show: 'show',
|
|
} as const;
|