mirror of
https://github.com/elastic/kibana.git
synced 2025-06-29 03:24:45 -04:00
1c3bceacc0
## Summary Currently, the partitionPatchRequest in x-pack/plugins/cases/server/client/cases/bulk_update.ts will not check a case properly if a case is being re-opened, instead of an else if in the loop comparing cases to cases in the request, the status logic should be outside of this set of if statements. If a case is being re-opened, the final else is never run, and casesToAuthorize is 0. This results in ensureAuthorized being called with an empty array of entities, and so the check always succeeds. To fix this, reopenedCases is still populated in the same loop, just not when casesToAuthorize logic is running as well. Also adds some missing tests for this and the create comment permission as requested in https://github.com/elastic/kibana/pull/194898. ### Checklist - [x] [Unit or functional tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html) were updated or added to match the most common scenarios |
||
|---|---|---|
| .. | ||
| common | ||
| bulk_get_user_profiles.ts | ||
| config.ts | ||
| files.ts | ||
| index.ts | ||
| privileges.ts | ||
| suggest_user_profiles.ts | ||