Skip to content

[SIEM] Non-ML users see error toaster on SIEM pages #65602

@rylnd

Description

@rylnd

Expected behavior: a user with sufficient privileges to use the SIEM app (but no ML privileges) should not see an error for ML unless they are explicitly trying to interact with ML.

Actual behavior: a user with sufficient privileges to use the SIEM app (but no ML privileges) sees the following error on all SIEM pages:
Overview_-_Kibana

Other notes:

  • The error is seen regardless of whether ML is enabled/disabled
  • If they are a superuser, an ML User, or an ML Admin, no error is seen.

This bug may be present since the inception of the Anomalies tables (needs verification).

Migrating version labels to description:
Affected versions include: v7.7.1, v7.8.0, v7.9.0,v8.0.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Detections and RespSecurity Detection Response TeamTeam:SIEMbugFixes for quality problems that affect the customer experience

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions