Skip to content

[Security Solution] Update Button Enabled While Field is in Edit Mode #203912

@pborgonovi

Description

Describe the bug:

When editing a field in the Rule Update flyout, the Update button remains enabled while the field is in edit mode. This allows the user to save updates even if the field has not been finalized, potentially leading to incomplete or unintended updates.

Kibana/Elasticsearch Stack version:

8.x

Functional Area (e.g. Endpoint management, timelines, resolver, etc.):

Prebuilt rules

Pre requisites:

  1. Prebuilt rules are installed
  2. Updates are available

Steps to reproduce:

  1. Ensure there is a prebuilt rule with an available update.
  2. Navigate to the Updates tab of the rule in the Installed Rules table.
  3. Click on the rule update to open the Rule Update flyout.
  4. Locate an updated field without conflict (e.g., Tags, Setup).
  5. Click the Edit button for the field to put it in edit mode.
  6. Observe that the Update button remains enabled.
  7. Click the Update button while the field is still in edit mode.

Current behavior:

  • The Update button is enabled even when a field is in edit mode.
  • The user can save the updates with the field in edit mode, which may result in incomplete or invalid updates.

Expected behavior:

  • The Update button should be disabled when any field is in edit mode.
  • The button should only become enabled after the user finalizes the field edit and clicks Save and accept.

Screenshots:

Screen.Recording.2024-12-11.at.11.33.38.AM.mov

Any additional context (logs, chat logs, magical formulas, etc.):

Metadata

Assignees

Labels

8.18 candidateFeature:Prebuilt Detection RulesSecurity Solution Prebuilt Detection Rules areaTeam: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detection Rule ManagementSecurity Detection Rule Management TeamTeam:Detections and RespSecurity Detection Response TeambugFixes for quality problems that affect the customer experiencefixedimpact:highAddressing this issue will have a high level of impact on the quality/strength of our product.v8.18.0

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions