-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[SecuritySolution] Breaking out timeline & note privileges #201780
Merged
janmonschke
merged 162 commits into
elastic:main
from
janmonschke:security/timeline-privileges
Jan 20, 2025
Merged
Changes from 1 commit
Commits
Show all changes
162 commits
Select commit
Hold shift + click to select a range
a88f3bb
initial wiring of feature ids
janmonschke 2a612f2
disable timeline save button based on timeline crud
janmonschke 2d523cc
should we do it like this?
janmonschke 0af9862
update some timeline privilege checks
janmonschke 6f61825
Merge branch 'main' into security/timeline-privileges
janmonschke f718567
hide/disable timeline in more places
janmonschke fd14f2d
Merge branch 'main' into security/timeline-privileges
janmonschke 1db418f
update tests
janmonschke bdc9b96
fix more tests
janmonschke f59824c
Merge branch 'main' into security/timeline-privileges
janmonschke ed16537
update threat intelligence code
janmonschke fffd844
update tests
janmonschke 98f184e
fix tests and console statements
janmonschke 8e6cfdd
move saved object access to timeline feature
janmonschke f193df3
step into the direction of migration
janmonschke 64674e5
typo
janmonschke e21ef77
Merge branch 'main' into security/timeline-privileges
janmonschke 76c7720
siem -> siemV2
janmonschke f4a6cdd
separating SERVER_APP_ID from SECURITY_FEATURE_ID
janmonschke a492d0b
introduce notes feature
janmonschke ff15c9f
add more privilege checks
janmonschke c6be22b
update link to correct file
janmonschke 53e4e67
Merge branch 'main' into security/timeline-privileges
janmonschke 2996b65
[CI] Auto-commit changed files from 'node scripts/eslint --no-cache -…
kibanamachine f2b1fbe
fix test types
janmonschke de7a43d
Merge branch 'security/timeline-privileges' of https://github.com/jan…
janmonschke fba346f
fix types
janmonschke 90973ab
fix types
janmonschke 2c1b61d
fix more tests
janmonschke 27d96ab
fix more unit tests
janmonschke efaab34
fix more unit tests
janmonschke 528b226
more siem -> siemV2
janmonschke bfa9137
Merge branch 'main' into security/timeline-privileges
janmonschke fc88be5
updates roles
janmonschke 1e37531
fix some more ftr tests
janmonschke 18eed64
fix logic on timelines page
janmonschke c95c4b3
more role updates
janmonschke 5b73971
fix roles
janmonschke 9564f74
Merge branch 'main' into security/timeline-privileges
janmonschke 1a6bcca
fix index names
janmonschke 50fdf2a
consumsers should still be `SERVER_APP_ID` cc @cnasikas
janmonschke 773a743
update FTR test fixtures
janmonschke 010eff0
update more fixtures
janmonschke e271240
update roles
janmonschke 30559d7
update more roles
janmonschke e76cf62
fix tests
janmonschke 636372c
fix more ftr fixtures
janmonschke 26ed151
rmeove console statement
janmonschke 4d084f4
fix order
janmonschke 439f055
fix more ftr tests
janmonschke 6add084
add read and crud
janmonschke 10a2a14
update more privilege definitions
janmonschke 61f6b28
Merge branch 'main' into security/timeline-privileges
janmonschke cf2628a
fix composed objects
janmonschke f7b9502
update role
janmonschke d124ddf
hide the timelines link
janmonschke 5cb316a
fix privilege calculation
janmonschke a4ac9b2
don't show note actions when user has insufficient privileges
janmonschke 0bca8de
update test privileges
janmonschke 243e7b2
Merge branch 'main' into security/timeline-privileges
janmonschke 6054829
fix hook dependencies
janmonschke 7fbb1fa
fix test
janmonschke e03a730
fix role expansion
janmonschke 457cae3
hide notes and timeline links when the user does not have access to
janmonschke 929ac02
Merge branch 'main' into security/timeline-privileges
janmonschke be01850
make `replacedBy aware of `minimal` cases
janmonschke da09314
hide notes/pin/investigate in timeline in case of insufficient privil…
janmonschke 6771670
Merge branch 'main' into security/timeline-privileges
janmonschke dc2f125
increase timeout
janmonschke 2ef9380
move tests to faster hook
janmonschke 2c151be
make sure securityV1 keeps the same initial saved objects
janmonschke 66b859f
Merge branch 'main' into security/timeline-privileges
janmonschke bf53c94
hide pinned tab
janmonschke d047a04
hide notes and timeline from app search for user with insufficient pr…
janmonschke f6ca53e
add siem to exceptions
janmonschke e720949
hide investigate in timeline when user doesn't have privileges
janmonschke 4d7df7b
Merge branch 'main' into security/timeline-privileges
janmonschke 8376c2e
secure the timeline/notes API endpoints with new privileges
janmonschke 383e724
Merge branch 'main' into security/timeline-privileges
janmonschke 7646860
remove unused variables
janmonschke 056a79e
fix tests
janmonschke 921f855
make sure `api` tags are working after a migration
janmonschke 668a79d
add timeline privileges test
janmonschke 94d8b02
fix types
janmonschke 98ca448
add more timeline API tests
janmonschke 9a1fe27
add notes privileges tests
janmonschke 6466d96
add new tests
janmonschke 05c49b2
Merge branch 'main' into security/timeline-privileges
janmonschke e8d9e58
update serverless api tags
janmonschke 7768163
update privilege FTR tests to work in serverless
janmonschke c08fd08
Merge branch 'main' into security/timeline-privileges
janmonschke 19698e3
fix notes tests
janmonschke 3191cbd
fix test
janmonschke f3e63ba
remove unused variable
janmonschke aab7aae
fix tests
janmonschke 5ffb55f
hide bulk timeline action
janmonschke 42774c3
hide timeline action
janmonschke 30defc1
disable timeline template form component
janmonschke 266b490
fix note fetching issues for users without notes privileges
janmonschke f3129ef
disable timeline links
janmonschke 7c1030b
remove "add to new timeline" button when user has insufficient privil…
janmonschke 17601d2
fix test
janmonschke 08d91a4
show a toast when trying to show a timeline for a user with insuffici…
janmonschke e2d6f42
fix tests
janmonschke efb12b2
use proper kibana mock
janmonschke c0095c1
add privilege cypress tests
janmonschke 7dc3250
Merge branch 'main' into security/timeline-privileges
janmonschke fd621ca
improve cypress tests
janmonschke 2c133fe
Merge branch 'main' into security/timeline-privileges
janmonschke 7b16e87
simplify tests more
janmonschke 04fcd0e
Merge branch 'main' into security/timeline-privileges
janmonschke 7ff0099
remove unused file
janmonschke 8323e7d
[CI] Auto-commit changed files from 'node scripts/eslint --no-cache -…
kibanamachine 78f0d66
disable the investigate in timeline button
janmonschke e603d8a
Merge branch 'security/timeline-privileges' of https://github.com/jan…
janmonschke cb48838
Merge branch 'main' into security/timeline-privileges
janmonschke 0f64625
harden notes tests
janmonschke 20ff89c
Merge branch 'main' into security/timeline-privileges
janmonschke 7cf5439
skip flaky tests
janmonschke f1c045e
Merge branch 'main' into security/timeline-privileges
janmonschke 3482cec
use helper
janmonschke e338cfc
[CI] Auto-commit changed files from 'node scripts/eslint --no-cache -…
kibanamachine 10940f8
remove unused constant
janmonschke bd93e55
fix tests
janmonschke b7f00b2
Merge branch 'security/timeline-privileges' of https://github.com/jan…
janmonschke d4989b9
revert use helper
janmonschke 656c774
extract helper to avoid bloated build
janmonschke 627797a
Merge branch 'main' into security/timeline-privileges
janmonschke cf9ad88
Merge branch 'main' into security/timeline-privileges
janmonschke 692097d
fix various table actions columns not resizing down when icons are no…
PhilippeOberti 47b5215
variable name change and remove unused translation
PhilippeOberti 18f5cf7
show prevalence details number as text instead of disabled buttons
PhilippeOberti e597265
show insights alert count as text instead of disabled buttons
PhilippeOberti c22e299
fix threat intelligence table actions columns not resizing down when …
PhilippeOberti d538332
slightly change note icon rendering behavior in the tables action column
PhilippeOberti d0c4e57
[CI] Auto-commit changed files from 'node scripts/eslint --no-cache -…
kibanamachine 4e2f81e
updating translations
PhilippeOberti 7971e3d
Merge branch 'main' into security/timeline-privileges
janmonschke ef415ab
fix doc count check
janmonschke bfd7360
update disable button logic
janmonschke 913d768
disable timeline icon button on note list when user does not have pri…
PhilippeOberti 9eb4439
fix notes_list unit tests
PhilippeOberti 6e862d5
Merge branch 'main' into security/timeline-privileges
janmonschke 13286a9
simplify access checks
janmonschke 8bb2aba
only hide the delete button, not the details button
janmonschke 447691c
don't render timelines pages for users without timeline access
janmonschke 3269d1a
Merge branch 'main' into security/timeline-privileges
janmonschke d8a1a2f
use SecurityRoutePageWrapper
janmonschke 86e42f2
disable add to favorites button
janmonschke d387fac
don't save saved search when user cannot save timelines
janmonschke 0b88ce5
remove unused import
janmonschke 52e2f2a
Merge branch 'main' into security/timeline-privileges
janmonschke e6c3bb7
Merge branch 'main' into security/timeline-privileges
janmonschke 7437310
hide add note form in for old notes UI
janmonschke b3c6a8a
Merge branch 'main' into security/timeline-privileges
janmonschke a8a4073
fix add to timeline condition
stephmilovic 68804d1
Merge branch 'main' into security/timeline-privileges
janmonschke 7284797
Merge branch 'main' into security/timeline-privileges
janmonschke f7270c3
Merge branch 'main' into security/timeline-privileges
janmonschke fc1a5ab
revert consumers back to `siem`
janmonschke 49b707e
revert some roles back to `siem` to allow for testing of migration setup
janmonschke 22cd732
change back more consumers
janmonschke File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
improve cypress tests
- Loading branch information
commit fd621ca1ed6ee5b2329eed9e46cdeb4736aeef6a
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I feel like this whole file brings an extremely low value, for the following reasons:
describe
is completely skipped. We could argue that adding something that is not working (and we most likely are not going to revisit this anytime soon) is not goodIf it were me, I would just not add any e2e tests... or at the minimum only keep the first one that verifies insufficient privileges